Skip to content

HomePrivacy

Privacy

This policy says what personal data this site collects, what it is used for, how long it is kept and what your rights are. The controller is the company that publishes this site, whose details appear in the legal notice. For any question about your data, write to the site’s contact address.

Cookies

The site only sets the cookies it needs to work, which do not require your consent: one that keeps you signed in, for seven days at most; one that follows you during a purchase, for one hour; and one that remembers the language of the site, until you close your browser. It uses no audience measurement tool and no advertising tracker. When you pay, the page also loads Stripe’s payment module, which may set its own cookies (“__stripe_mid” and “__stripe_sid”): Stripe uses them for payment security and fraud detection, and states how long they last in its own policy.

Fonts are served by this site itself, not by Google.

Back to contents

Videos

Tristan’s videos are hosted by YouTube (Google Ireland Ltd, Ireland). Until you start a video, the page shows only an image of it, served by this site itself: nothing is sent to YouTube. When you click to play a video, the YouTube player loads from youtube-nocookie.com, the YouTube mode that sets no cookie before playback. YouTube then receives your IP address, technical data about your browser and the address of the page, and may store information in your browser to run the player and measure playback. It processes this data on its own behalf, under Google’s privacy rules, and may process it in the United States. If you play no video, YouTube receives nothing.

Back to contents

What the site records

For its security and to work properly, the site records the pages viewed, with the IP address, the browser and the language it announces, as well as sign-ins, emails sent (without their content), payments and changes saved. These lines are used to understand a breakdown, an error or an intrusion attempt, and to establish what happened in the event of a dispute. They are neither sold nor used for advertising, and they are erased after twelve months. When an account is deleted, its lines are immediately stripped of anything that identifies it. No cookie is set for this.

Back to contents

When you write

A message sent through the contact form, or a request for a quote, records your name, your email address, your phone number if you give it, and your message. If you then reply by email, your reply and its attachments join the same conversation. This information is used to answer you, and for nothing else. When Tristan writes a message in the site’s management tool, his draft (the text, the subject, the language and the recipient) is saved on the server, so that he can pick it up from one device to another; only the person writing it can access it. The draft is cleared when the message is sent, and erased at the latest ninety days after it was last changed.

Back to contents

When you book or buy

The site records what is needed to carry out the order: your first and last name, your email address and your postal address, asked for before any payment because it must appear on your invoice, and, if you give them, your phone number, your company’s name, its VAT number and its billing address; for a place, the name of each participant and their email address if they give it; for a private video call, the hours bought, the video calls booked and what you say you want to work on, with the files you attach; for a quote, the services offered and their price; the date, the amount and the status of the payment. An account is opened at your address to give you access to your places, your recipes and eBooks, your private video calls and your projects; its password, if you choose one, is only kept in a form that cannot be read back. A participant whose address is given receives an email that gives them access to their place. A booking or a purchase is not possible without a name, an email address and a postal address. If your account does not yet have an address, the one you give when paying is saved to it, to be offered to you next time; an address already saved is never replaced. If you book for other people, let them know that their name is passed on for their place.

Back to contents

When you enter a billing address

Once you have typed three characters of an address in France, suggestions are offered by the geocoding service of IGN, the French national mapping agency (Géoplateforme); you can always type the address yourself. If you look up your company by its name, its SIREN or its SIRET number, the search is made with API Recherche d’entreprises, a French government service. If you give an EU VAT number, it is checked with VIES, the European Commission’s service, which queries the tax authority of the country concerned; the site keeps the date of that check. The name and registered address these registers return fill in the fields, and you can correct them. These services, all public bodies established in France or in the European Union, only receive what you type in the field concerned, sent by this site’s servers: no other information from your account, and not your IP address. The site keeps no geographic coordinates; address searches and their answers stay in the server’s memory for ten minutes, not linked to you, and the site’s records note each call (the service, its outcome, the number of results and the time taken), never what you typed. If they do not respond, nothing is blocked: you fill in the fields yourself. The address, the SIRET number and the VAT number are kept on your account and on each sale, for the invoice, for as long as stated below. This help rests, like the order, on the contract and the steps taken at your request before it; checking the VAT number, on the seller’s obligation to establish its customer’s status in order to apply the correct VAT.

Back to contents

Invoices and quotes

Each payment gives rise to an invoice, and each refund to a credit note. An invoice records, on the day it is issued, the payer’s name and address and, if they gave them, their company’s name, billing address and VAT number, as well as the VAT rule applied, the country used for VAT and what established it (the country of the address, of the card or of the connection, the answer from VIES); it can no longer be changed. It is attached to the confirmation email, can be found in the account of the person who paid, and is sent to the seller’s accountant with the month’s statement. Issuing invoices is a legal obligation of the seller. A quote carries the same information about its recipient, and stays in the conversation in which it was sent.

Back to contents

Questionnaires

Before a discovery call, and before buying a first pack of video call hours, you are asked to fill in a short questionnaire: your profile, your breadmaking experience, what you expect from your video calls and, if you wish, photos or recipe sheets. Compulsory questions are marked; without the answers to them, the booking or purchase is not possible. Your answers and files are used only to prepare your video calls with Tristan. Only Tristan reads them, in the site’s management tool; they are passed on to no one else and are never written into his calendar. You can update your answers to the video call questionnaire from your account. They are kept for as long as your customer record, and deleted with it: for someone who came only for a discovery call, according to the periods in the next paragraph.

Back to contents

The discovery call

For a discovery call, the site keeps your first name, your surname, your email address, your language and what you are interested in, to organise the call and to write to you about what follows. To book it, you first go through the site’s sign-in page, which opens your account at your address; you choose your password the first time you sign in, and you join the video call from your account, under “My video calls”. If you buy nothing and have not yet chosen your password, this information is deleted twelve months after our last exchange (three months if you tell us you are not interested). If you have chosen your password but bought nothing, your account is deleted three years after your last sign-in or our last exchange, whichever is later. If you buy something later, the periods in the other paragraphs apply. After the call, Tristan may note whether and when to get back in touch with you; he then writes to you himself, and no automatic marketing email is sent to you.

Back to contents

Payment

It is processed by Stripe. Your card details are entered in a frame provided by Stripe and sent directly to it: they do not pass through this site’s servers. If you pay for a place or a quote by deposit, Stripe keeps the card used in order to charge the balance on the announced day, with the consent you give when paying: the site keeps the time of that consent and the exact wording of the sentence you read. Of the card, the site only keeps its brand, its last four digits and its expiry date, to remind you of them; its identifier at Stripe can only be read by the site’s team. The card is detached as soon as the balance is paid, if the booking is cancelled or released, or if your account is deleted. Your customer identifier at Stripe is kept with your sales, as an accounting reference.

Back to contents

Video calls

A private video call, a discovery call or a project follow-up video call takes place on this site, through the video conferencing service of Daily (Daily.co, Inc., United States), acting as the seller’s processor. During the video call, Daily receives your image and voice, the name displayed (your first name and the initial of your surname), your IP address and technical connection data (browser, network quality). This data may be processed in the United States, with the safeguards described below. The video call is neither recorded nor transcribed, and its room is deleted afterwards. The site keeps the time each person joined and left, to establish that the video call took place, in the event of a dispute as in the seller’s accounts, which record the date on which each service was provided: for a video call that was bought, with the sale records, for ten years; for a discovery call, with the call. Messages and documents exchanged in the space of a video call or a project are kept on this site; only you and Tristan can access them. They are kept for as long as your account exists, including after a project is closed, and deleted with it. A discovery call has no messages or documents.

Back to contents

Tristan’s calendar

Each confirmed video call (private video call, discovery call, follow-up video call) is written into a Google Calendar calendar kept for these calls, which the site created in Tristan’s Google account: the site can only write to this calendar, and it reads nothing from Tristan’s other calendars. The event contains only the title of the video call (its type, your first name and surname and, for a follow-up, the quote number), its date, time and length, and a link to the video call’s page in the site’s management tool, which only Tristan can open. It never contains the subject of the video call, your answers to the questionnaires, your email address, your phone number or the link to the video call room. A moved video call is updated there, and a cancelled one is removed. Google (Google Ireland Ltd, Ireland) receives this information as the provider of Tristan’s account, and processes it on its own behalf, as set out in “Who receives it”. This site’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Back to contents

The waiting list for a date

When a course date is full, you can leave your email address to be told if a place frees up. It is recorded with your consent, for that date only, and is used to send you a confirmation and then an email each time a place frees up on that date, as long as you remain on the list; it does not sign you up to the newsletter. Every email carries the link to unsubscribe in one click, and your mail service can do it for you through its unsubscribe button: your address is then erased from that list straight away. Your entry ends on the first day of the course, if the date is cancelled or becomes private, or as soon as a booking at your address covers that date; it is then kept for twelve months, then erased. Deleting your account erases it too.

Back to contents

Legal bases

Carrying out a booking, a purchase or an accepted quote, the video calls and their messages rest on the contract; a discovery call, a questionnaire and a requested quote, on the steps taken at your request before a contract; invoices and keeping sales records, VAT evidence, payment disputes, the Stripe statement and what is sent to the accountant, on the seller’s legal and accounting obligations; answering a message, following up after a discovery call, writing video calls into Tristan’s calendar, the joining and leaving times of video calls and the site’s records, on the seller’s legitimate interest in answering those who write, organising his work, being able to establish that a service took place and protecting the site; the waiting list for a date, on your consent; the newsletter, on your consent or, for people who come from the former site, on the seller’s legitimate interest in writing to those who contacted him.

Back to contents

How long

The site’s records are erased after twelve months, as stated above. Accounting records (bookings, purchases, payments, refunds, invoices, credit notes and accepted quotes) are kept for ten years, as the law requires (Article L. 123‑22 of the French Commercial Code); if your account is deleted, they remain as they were issued, with your name and address, as do the joining and leaving times of the video calls linked to them. With each purchase, the site also keeps, to show the tax authorities which country sets the VAT, the country of your address, that of the payment card and, if you give a VAT number, the answer from VIES, with its date and, when VIES provides one, its consultation number; for a video call, a recipe, an eBook or a quote paid online, it also keeps the country indicated by the IP address you paid from, without keeping the address itself. This evidence is kept for ten years, like the accounting records, and it is not erased if your account is deleted, because the law requires it to be kept. If a payment is disputed with the bank, the site also keeps the record of that dispute (when it was opened, its reason, the sums withdrawn or returned, its outcome), and it keeps the statement of the seller’s Stripe account (each payment, refund, fee and payout to the seller’s bank account, linked to the payment it concerns): these are accounting records, kept for ten years like the others. A copy of each sending to the seller’s accountant, described under “Who receives it”, is kept for ten years exactly as it was sent, so that what was passed on can be established: it is not changed if your account is later deleted, and your name, your address and your email address remain in it. The data of a discovery call with no purchase is deleted according to the periods stated above, and an entry on the waiting list for a date twelve months after it ends, as stated above. The site does not erase the rest on its own: your newsletter sign-up is kept until you unsubscribe; your account, with your answers to the questionnaires and the messages and documents of your video calls and projects, until you, its holder, ask for it to be deleted, except an account with no purchase at all, which is deleted three years after your last sign-in or our last exchange, whichever is later; a message or a request for a quote, for as long as it is used to answer you and to follow up the relationship that comes from it. A quote that was not accepted is kept for five years after it was sent, with its PDF, so that what was offered can be established: if your account is deleted before then, it can no longer be paid or sent to you, and it is erased at the end of those five years. Events in Tristan’s calendar remain there under his control: every year he deletes those older than twelve months, and earlier at your request. In every case, you can ask for your data to be erased at any time, by writing to the contact address shown in the legal notice.

Back to contents

Who receives it

Your data is neither sold nor used for advertising. It is entrusted to the site’s technical providers: Vercel (hosting), Supabase (database and files), Stripe (payment), Resend (sending and receiving emails), Daily (video conferencing) and Cloudflare (domain name and mail routing). These companies are established in the United States or have their parent company there, and data may be transferred there. For each of them, the transfer relies on one of the safeguards provided by the GDPR that these providers offer in their terms: the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, for those certified under it, or the Commission’s standard contractual clauses. You can ask, by writing to the site’s contact address, which one applies to each provider, and for a copy of these safeguards. Stripe also processes some data on its own behalf, in particular to prevent fraud and meet its financial obligations, as described in its own privacy policy. Google (Google Ireland Ltd, Ireland) also receives the video call information written into Tristan’s calendar, described above, as well as the emails written to the site’s addresses (contact@ and tristan@), which are forwarded to Tristan’s Gmail mailbox. Google is not a processor of the seller: it provides Tristan’s Google account and processes this information on its own behalf, under its own privacy rules, and may process it in the United States. The monthly statement of payments and the log of the month’s invoices and credit notes, with the name and address of each customer, their company, the country used for VAT and what established it (including the check on VIES), the status of any payment dispute, their VAT number and their email address, together with the month’s invoices and credit notes, are also sent to the seller’s accountant.

Back to contents

Processors

Here, one by one, are the technical providers that process data on the seller’s behalf, and what each one does:

Vercel (Vercel Inc., United States): hosting the site;
Supabase (Supabase, Inc.): the database and files, hosted in its Paris region;
Stripe (Stripe Payments Europe, Ltd., Ireland): payment;
Resend (United States): sending and receiving emails;
Cloudflare (Cloudflare, Inc., United States): the domain name and mail routing;
Daily (Daily.co, Inc., United States): video conferencing for private video calls, discovery calls and follow-up video calls;
DeepL (DeepL SE, Germany): machine translation of the texts Tristan publishes, including the reviews and testimonials shown on the site, never your account data, your messages or your answers to the questionnaires;
Sentry (Functional Software, Inc.): technical error monitoring, with data hosted in the European Union.

Back to contents

Technical error monitoring

To detect and fix problems on the site, we use Sentry, a service provided by Functional Software, Inc., acting as our technical processor; the data is hosted in the European Union. When a page or an operation fails, Sentry receives a technical report: the error message, the part of the code involved, the page address without its parameters, the browser type and the date. This report contains no personal data: no name, email address, IP address, cookie or form content, and personal links (payment, sign‑in) are masked before sending. Your browsing is never recorded.

Back to contents

Your rights

You can ask for access to your data, its rectification or erasure, the restriction of its processing or its portability, object to processing based on legitimate interest, withdraw your consent to the newsletter or to the waiting list for a date at any time, and give instructions on what happens to your data after your death. Write to the site’s contact address. If you believe your rights are not respected, you can lodge a complaint with a supervisory authority, in particular the CNIL, the French authority (cnil.fr), or the authority of the country where you live.

This policy is written in French, English and Spanish; if the versions differ, the French version prevails.

Back to contents