privacy policy

This policy explains how Oūna Consulting collects, uses and protects the personal data of visitors and prospects of www.ounaconsulting.com, in accordance with the General Data Protection Regulation (GDPR) and French data protection law.

1. Data controller

The data controller is Johanna Jourdain and Oudé Queta, co-founders of Oūna Consulting, acting jointly, reachable at contact@ounaconsulting.com.

2. Data we collect

SourceData concernedPurposeContact formName, email, company, message and any information you voluntarily provideRespond to your enquiry, discuss a project, prepare a quoteBrowsing the siteConnection and browsing data (pages viewed, time on site, device and browser type, traffic source) via Squarespace's native audience measurement toolTraffic statistics, site improvement

3. Legal basis and purposes

  • Pre-contractual steps / legitimate interest: handling contact requests and the business relationship with professional prospects and clients;

  • Consent: placement of non-essential audience measurement cookies, collected via the banner shown on your first visit;

  • Legal obligations: retention of certain data for accounting purposes or as evidence in the context of a contractual relationship.

4. Who receives your data

The data we collect is intended exclusively for Johanna Jourdain and Oudé Queta. It is never sold, rented or transferred to third parties for commercial purposes. It may be shared with technical service providers strictly necessary for the site's operation, currently Squarespace, Inc., which acts as our processor for site hosting and audience measurement.

5. Data transfers outside the European Union

Squarespace, Inc. is based in the United States. As a result, a transfer of data outside the European Union may take place in connection with the site's hosting. Squarespace, Inc. states that it adheres to the EU-U.S. Data Privacy Framework and/or implements the European Commission's Standard Contractual Clauses. For more details, see Squarespace's own privacy policy: www.squarespace.com/privacy.

6. Retention period

Data collected through the contact form is kept for 3 years from the last exchange, for business follow-up purposes, unless you request earlier deletion. Data strictly necessary to manage a contractual relationship is kept for the duration of that relationship, plus the applicable legal limitation periods (in particular for accounting and tax purposes).

7. Data security

Reasonable technical and organizational measures are in place to protect your data against unauthorized access, loss or alteration. These measures will be reinforced and formalized as the business grows (notably with the setup of a dedicated client database and associated retention rules).

8. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, and object to the processing of your data, and the right to data portability. You may exercise these rights by writing to contact@ounaconsulting.com. We will respond within one month at most. You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).

9. Cookies

Details of the cookies used on the site are available in our Cookie Policy.

10. Changes to this policy

This Privacy Policy may be updated to reflect changes in our practices or in applicable law. The date of the last update is shown below.

Last updated: 18 September 2026