Privacy Policy

Last updated: 12 September 2026.

Who is responsible for your data

CF Garage
58 rue de Monceau, 75008 Paris, France
SAS, registration number 815 191 560
Contact: [email protected]

CF Garage is a one-person consulting business. There is no data protection officer, as none is required under Article 37 of the GDPR for an activity of this nature and size.

What we collect, and why

Simply visiting the site

The site is served by Cloudflare. Its network records technical connection data, including your IP address, the requested address, the date and time, your browser's user agent and the country the request came from. This data is used to deliver the pages, to keep the service available and to block abusive traffic. Legal basis: our legitimate interest in operating and protecting the site.

Anti-bot verification

The contact form, the chat widget and the legal notice page use Cloudflare Turnstile to tell human visitors from automated traffic. Turnstile analyses technical browser signals and your IP address. It does not profile you and is not used for advertising. Legal basis: our legitimate interest in preventing abuse.

The contact form

When you use the contact form, we collect the email address you enter and the content of your message. They are sent to our support mailbox so that we can answer you. We keep the resulting correspondence for as long as needed to handle your request and, where a business relationship follows, for the duration of that relationship. Legal basis: our legitimate interest in responding to people who contact us, and, once an engagement begins, performance of the contract.

The chat widget

The chat widget asks for your email address with your first message, so that we can still reach you if the conversation is interrupted. Your messages, your email address and our replies are stored so that the conversation survives a page reload. Each message is forwarded to a private Telegram conversation used as a notification channel, and may also be processed by an automated assistant running on Cloudflare Workers AI in order to draft a first answer. A human reads every conversation. Your IP address is used to apply rate limits, at most three new conversations and twenty messages per hour. Legal basis: our legitimate interest in offering a written support channel and in preventing abuse.

Chat conversations are currently kept without an automatic expiry date, and only the two hundred most recent messages of a conversation are retained. You can ask us to delete a conversation at any time using the contact address above.

Ordering and payment

Payments are handled entirely by Stripe. We never see or store your card details. During checkout, Stripe collects your email address, your name, your company name, your billing address and, where applicable, your VAT number, and issues an invoice. We access this information through our Stripe account in order to invoice you and to meet our accounting obligations. Legal basis: performance of the contract, and compliance with a legal obligation for accounting records, which French law requires us to keep for ten years.

When you click the order button, a notification containing your IP address, the country, city and region derived from it, your browser's user agent and the offer selected is sent to an internal channel. This alerts us that an order is in progress. Legal basis: our legitimate interest in monitoring and securing the ordering process.

Emails sent after a purchase

Once a payment is completed, we send you an order confirmation and an onboarding email at the address collected by Stripe. These emails are operational, not promotional. We do not run a newsletter and we do not send marketing emails.

Advertising measurement

Every page of this site loads the Google Ads tag, which measures the effectiveness of our advertising campaigns and may store identifiers in your browser. This tag is provided by Google. You can prevent it from working by blocking third-party scripts or cookies in your browser, or through the advertising settings Google makes available on its own services. Blocking it has no effect on your ability to use this site.

What is stored on your device

A language preference, saved locally when you use the language selector, so that your choice is respected on your next visit.
A conversation identifier, saved locally when you use the chat widget, so that you find your conversation again.
A cookie recording that you have passed the anti-bot verification on the legal notice page, so that it is not shown to you repeatedly.
Identifiers set by Cloudflare for security purposes, and by the Google Ads tag for advertising measurement.

Clearing your browser's site data removes the first three. The others are governed by the policies of Cloudflare and Google respectively.

Who else processes your data

Cloudflare, Inc. (United States): hosting, content delivery, security, anti-bot verification, storage of chat conversations, and the automated chat assistant.
Stripe (Ireland and United States): payment processing and invoicing.
Resend (United States): sending the contact form and post-purchase emails.
Telegram: relaying chat notifications to us.
Google (Ireland and United States): advertising measurement and internal order notifications.

Some of these providers are established outside the European Union or process data there. Such transfers rely on the safeguards those providers put in place, in particular the European Commission's standard contractual clauses. We do not sell your data and we do not share it for any purpose other than those described above.

Your rights

Under the GDPR, you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing relies on your consent, you may withdraw that consent at any time.

To exercise these rights, write to [email protected]. We answer within one month. If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL, at cnil.fr.

Changes to this policy

This policy may be updated when the site changes. The date at the top of the page always reflects the version in force.