Privacy & legal
Last updated: 25 August 2026
1. Who runs this site
- Publisher
- Andrii Hryhoriuk, sole proprietor (entrepreneur individuel, France)
- Trading as
- Pierrafort
- Postal address
- 540 1ère Avenue, 06600 Antibes, France
- Phone
- +33 7 82 45 57 81
- andrii@pierrafort.com
- Business ID
- registration in progress
- Hosting
- Netlify, Inc. — 101 2nd Street, San Francisco, CA 94105, USA
I am established in France, so this site follows the GDPR. If you are in the United Kingdom, Canada or the United States, the protections below apply to you as well — I do not run a second, weaker policy for people outside the EU.
2. Cookies and tracking
This site sets no cookies. There is no Google Analytics, advertising pixel, advertising identifier or tracking from one visit to the next.
Visitor statistics: the site's host, Netlify, produces an aggregate count from its own server logs: pages viewed, number of visits, and which sites linked here. This happens on the server, without cookies or an identifier that follows you between websites.
Real-world performance measurement: on production pages Netlify also loads a
small asynchronous script. It is served from this site itself, at
/.netlify/scripts/rum : your browser contacts no outside server to
load it. It measures only
aggregated technical display and responsiveness indicators — including LCP, FCP, CLS
and INP — together with device type and the production deploy being served. According
to Netlify's documentation, this feature requires no browser cookie. It is not used
for advertising, profiling, identifying a person or tracking anyone across websites.
Legal basis: the legitimate interest in knowing whether this site is being read and in detecting technical problems that harm its usability (GDPR Art. 6(1)(f)).
These measurements are limited to the operation and audience of this website. You can object by writing to andrii@pierrafort.com.
3. What the form collects
- Required
- your name, your email address, your website address
- Optional
- your phone number, your message
- Recorded automatically
- the IP address the message is sent from and your browser identification (“user-agent”). Netlify adds both to every form submission; they are used to screen out automated submissions and are kept with the message.
Why: to reply to you about your website, carry out the check you asked for and, if it goes that way, prepare a quote.
Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)). Your details are never sold, shared or used for advertising.
How long: twelve months from our last exchange if nothing comes of it. If we work together, project records are kept for the duration of the engagement, then ten years for accounting documents as French law requires.
4. Who else sees it
I am the only person who reads your message. Two technical providers act as processors:
- Netlify, Inc. (USA)
- site hosting, form delivery, visitor and performance statistics — 101 2nd Street, San Francisco, CA 94105, USA
- OVH SAS (France)
- business email — 2 rue Kellermann, 59100 Roubaix, France
Transfers outside the EU: email is hosted by OVH in France, so that data never leaves the European Union. Form submissions and technical audience and performance statistics are processed by Netlify, Inc., which is based in the United States. That transfer rests on Netlify's certification under the EU-U.S. Data Privacy Framework, covered by the European Commission's adequacy decision of 10 July 2023, backed by the standard contractual clauses of Implementing Decision (EU) 2021/914.
5. If I emailed you first
I may write to you without you having contacted me. When that happens:
The details I used — business name, business email address, website address — come from public sources: your own website, a public register or a trade directory. Nothing is bought from a list broker.
Legal basis: legitimate interest in offering a service directly relevant to the recipient's professional role. In Canada I rely on implied consent through conspicuous publication under CASL; in the United States commercial email is governed by CAN-SPAM, which this complies with; in the United Kingdom I write only to corporate bodies, as PECR requires.
You can stop it at any time, free and without explanation, by replying “no thanks” to any message or writing to andrii@pierrafort.com. Opt-outs are permanent and cover every future campaign. I act on them the same day.
6. Your rights
You can ask for access to your data, correction, erasure, restriction, portability, or object to its use. Write to andrii@pierrafort.com — I reply within one month, and may ask you to confirm your identity if there is genuine doubt.
If my answer does not satisfy you, you can complain to the French data protection authority, the CNIL: cnil.fr. If you are in the UK you may also contact the ICO, and in Canada the Office of the Privacy Commissioner.
7. Security
The site is served over HTTPS only. Access to the mailbox is protected by two-factor authentication. Form data passes through no intermediary other than those listed in section 4.
8. About the work shown on this site
The business names and contact details appearing in the redesign studies come from those businesses' own public websites. The studies are unsolicited personal work, with no connection to or approval from the businesses concerned, and are never presented as their official sites.
Prices shown are starting prices, not a contractual offer. Only a signed, named quote binds either party. The free site checks rely solely on publicly available information, exactly as any visitor's browser receives it. They are not a security audit or a penetration test.
9. Changes
This policy may change. If the technical measurement described in section 2 changed, if a cookie or advertising identifier were added, or if a processing operation required consent, the date above would change and a consent mechanism would be shown before that processing was enabled.
Back to the site