Privacy policy
Courtesy translation — the French version prevails.
Last updated: 24 September 2026
This page explains which personal data is collected when you use the thibaultlevent.com website, why it is collected, how long it is kept and what your rights are. We only collect what is needed to reply to your request and to run the site.
1. Who is responsible for your data?
The data controller is Thibault Lagrabette, sole trader (micro-entreprise), trading as THIBAULT L EVENT, SIRET 844 534 396 00016, whose registered office is at 7 avenue du Vallon, 33600 Pessac, France.
For any question about your data: contact@thibaultlevent.com.
2. What data do we collect, why, and on what legal basis?
| Situation | Data concerned | Why | Legal basis |
|---|---|---|---|
| Contact form (quote request) | Event type, date, venue name and city, times, venue access information, number of guests, services requested, indicative budget (optional), free-text message, first name, last name, email address, phone number (optional), preferred contact method and time slots | Reply to your request and prepare a quote | Pre-contractual steps taken at your request (Article 6.1.b GDPR) |
| Review form (« Client reviews » page) | First name, initial of last name, event type and year, review text, photo (optional), your two consents (publication of the review; publication of the photo) | Collect and, with your agreement, publish your review | Your consent (Article 6.1.a) |
| Anti-spam protection of the contact form (Cloudflare Turnstile) | IP address, technical information about your browser, result of the check | Prevent automated submissions by bots | Legitimate interest (Article 6.1.f): protecting the form |
| Technical log of our forms (contact and reviews) | Copy of the request or review, date and time, IP address, language | Avoid losing any request if email delivery fails; detect abuse | Legitimate interest (Article 6.1.f) |
| Limiting the number of submissions per visitor | Irreversible fingerprint (hash) of your IP address and submission times | Block abusive repeated submissions | Legitimate interest (Article 6.1.f) |
| Website hosting | IP address, connection date and time, pages viewed (technical logs) | Ensure the site works and is secure | Legitimate interest (Article 6.1.f) |
| Display of our Instagram feed (home page) | IP address and technical information about your browser, sent to Behold (feeds.behold.so, behold.pictures) and to Instagram (Meta, cdninstagram.com) when your browser loads the posts. No cookie is set for this in our checks | Display our latest posts | Legitimate interest (Article 6.1.f) |
| Audience measurement (Google Analytics) | Online identifier (cookie), pages viewed, type of device and browser, approximate origin | Understand how the site is used and improve it | Your consent (Article 6.1.a) |
| Advertising measurement (Meta Pixel) | Online identifier (cookie), pages viewed, actions taken on the site (for example submitting the form) | Measure the effectiveness of our ads on Instagram and Facebook | Your consent (Article 6.1.a) |
| Remembering your cookie choice | Your choice (audience measurement: yes or no; advertising: yes or no) and its date, stored only in your browser | Respect your choice | Legitimate interest (Article 6.1.f) |
| Follow-up to a request (accepted quote, contract, invoicing) | Identity, contact details, details of the service, invoices, payments | Perform the service and keep accounts | Performance of a contract (Article 6.1.b) and legal obligations (Article 6.1.c) |
No audience measurement or advertising cookie is set before you agree, and you can accept or refuse each one separately. You can withdraw your consent at any time, with no effect on your access to the site (see the Cookie policy).
Do not enter sensitive data (health, religion, political opinions, sexual orientation, etc.) in the free-text fields of the form: it is not needed to prepare a quote.
We take no automated decisions about you, and we do not sell your data.
3. Who receives your data?
Only Thibault Lagrabette reads the content of requests sent through the form. Some technical providers help the site run. They may only use your data to provide their service.
| Provider | Role | Country / entity |
|---|---|---|
| Hostinger International Ltd | Website hosting | Cyprus (European Union) |
| Resend | Sending the emails generated by the forms (internal notification and, for the contact form, confirmation of receipt) | United States |
| Cloudflare (Turnstile service) | Anti-spam check of the contact form. The script is loaded as soon as the form opens, whether you have accepted or refused cookies | United States |
| Behold and Instagram (Meta) | Retrieving and displaying our Instagram posts. These services receive your IP address as soon as the section is displayed, whether you have accepted or refused cookies | See their privacy policies |
| Google Ireland Limited (Google Analytics) | Audience measurement, only with your consent | Ireland, with possible processing in the United States |
| Meta Platforms Ireland Limited (Meta Pixel) | Advertising measurement, only with your consent | Ireland, with possible processing in the United States |
| WhatsApp (Meta) | Only if you choose to be contacted through this channel | See WhatsApp's privacy policy |
4. Is your data transferred outside the European Union?
Some of the providers listed above are based in the United States or may process data there. These transfers are covered by the safeguards provided for by the GDPR: the adequacy decision « EU–US Data Privacy Framework » where the provider is certified, or the European Commission's standard contractual clauses. You can write to us for further information.
5. How long do we keep your data?
| Data | Retention period |
|---|---|
| Contact request that led to nothing | 2 years after the last exchange with you |
| Data linked to an accepted quote or a contract | Duration of the contractual relationship, then 5 years (limitation period) |
| Invoices and accounting documents | 10 years (legal obligation) |
| Technical log of our forms (including IP address) | Same period as the request concerned (2 years after the last exchange) |
| Client review and photo | As long as the review is published or kept by us; deleted on simple request from you |
| Hosting provider's technical logs | Limited period set by the hosting provider |
Google Analytics audience measurement cookies (_ga, _ga_*) | 13 months maximum |
Meta Pixel advertising cookie (_fbp) | 3 months |
| Your cookie choice | 6 months, after which we ask you again |
| Google Analytics audience measurement data | 14 months maximum |
At the end of these periods, your data is deleted or anonymised.
6. Cookies and trackers
Google Analytics and Meta Pixel only run after you agree, through the banner shown on your first visit: « Decline all », « Accept all » or « Customise » to choose audience measurement and advertising separately. You can change your choice at any time via « Manage cookies », at the bottom of every page; withdrawing your consent deletes the corresponding cookies already set. The cookies used are detailed in our Cookie policy.
7. What are your rights?
Under the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights:
- access: obtain a copy of the data we hold about you;
- rectification: have inaccurate data corrected;
- erasure: ask for your data to be deleted;
- restriction: ask for the temporary freezing of the use of your data;
- objection: object to processing based on our legitimate interest;
- portability: receive your data in a structured format;
- withdrawal of consent: at any time, for processing based on your agreement;
- post-mortem directives: decide what happens to your data after your death.
To exercise these rights, write to us at contact@thibaultlevent.com. We reply within one month. We may ask for proof of identity if there is reasonable doubt.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL: Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
8. How do we protect your data?
The site is available over a secure connection (HTTPS). Requests received through the form are only accessible to Thibault Lagrabette. We choose providers that commit to protecting your data.
9. Changes to this policy
We may update this page, for example if the site changes. The date of the last update appears at the top of the page.