Privacy policy

Version of 11 September 2026.

This page says which data we process, why, who receives it and how long we keep it. Cookies and the advertising click identifier have their own page: Cookies.

Who processes your data

Z29K, SAS, 60 rue François Ier, 75008 Paris, RCS Paris 991 809 658. For any question or request: contact@z29k.com or from the contact form.

What we process, and why

Six processing operations, and nothing else.

The order

Your identity, your billing address, your email address, your phone number, the address of the site to audit, the language you want your documents written in, and the comment you attach to the order if you write one. We need them to perform the contract: to survey the site, to deliver the report, to invoice you. The comment is used for the audit you are ordering and nothing else. Payment takes place at Stripe, the sole recipient of your card details: we never see them.

The audit

To produce the report, we go through the pages of your site and keep a working copy of them. These pages are public, but some publish personal data: a team page, signed reviews, a directory. We process them because performing the contract requires it, we use them for nothing else, and we share them with nobody.

Counting visits

We count visits to this site to know which pages are read. The counter runs on our own server, in France: the measurement goes to no third party, and it writes nothing into your browser. We turn it into totals, and we never match them to an order. This processing rests on our legitimate interest in knowing whether what we write is read. The detail is on the Cookies page.

Measuring our ads

If you arrive from a Google ad, we pass the click identifier to Google when an order is attributed to that ad. That is the only case. The detail, and how to object, are on the Cookies page.

Your messages

When you write to us, through the form or by email, we process your name, your address, your website address if you give it, and your message. They serve to answer you, and nothing else. The basis is the pre-contractual relationship your message opens: without it, there is nothing to answer. The server that relays the form keeps none of what you write — it counts the hour's submissions, and nothing more. To have an exchange deleted, write to contact@z29k.com or from the contact form.

The free audit

If you ask for the free audit, we process the site address you give us, the pillar you pick and your email address. We first send you a confirmation link: until you open it, the request goes to nobody, and it deletes itself if the link is never opened. They then serve to look at the page and to send you the report, nothing else. This processing rests on your consent, and you can withdraw it at any time by writing to contact@z29k.com or from the contact form. The terms are on the Free audit terms page.

Who receives it

Three providers, and no others. Stripe handles payment. Scaleway, a French company, hosts the site, the visit counter and our working files, in Europe. Google receives the click identifier, in the single case described above.

We neither sell nor transfer your data, and we share it with nobody else. Stripe and Google belong to American groups: the data they receive may be processed outside the European Union, within the framework set by their own commitments. What Scaleway hosts stays in Europe.

How long we keep it

The pages we went through and the audit artefacts: one year after delivery, then we delete them. They serve to answer your questions about the report and to compare measurements if you order a second time.

Invoices and accounting records: ten years. That is not a choice: the French commercial code requires it.

Visit measurements: we keep them without a time limit. They say what was read, not by whom, and we never match them to an order.

Email exchanges: for as long as we are doing business together, then three years.

Your rights

You may ask for access to your data, its correction, its erasure, the restriction of its processing, its portability, and you may object to processing based on our legitimate interest. Write to contact@z29k.com or from the contact form: we handle the request within one month.

If you are not satisfied with our answer, you may refer the matter to the CNIL, the French supervisory authority: www.cnil.fr.

What this site stores on your device