Privacy Policy

Who is responsible

Aurès (the "studio"), run by Fatima Zahra, is the data controller. For any question about your data, or to make a request, write to hello@aures-studio.com.

What I collect, and why

• Contact form: your name, email and message, so I can reply to you. Sent via Resend.
• Newsletter: your email, if you choose to subscribe, so I can send you the letter. Handled by Substack. You can unsubscribe at any time.
• Bookings: your name, email and any details you share when you book a call. Handled by Cal.com and added to my calendar (Google).
• Orders: when you buy, payment is processed securely by Stripe. I never see or store your card details.
• Technical data: basic, anonymised information (like page visits and approximate region) from the site's hosting on Cloudflare, to keep the site running and secure.

Legal basis

I process your data on the basis of your consent (for the newsletter), to take steps at your request and fulfil orders (contract), and my legitimate interest in running and protecting the studio.

Who I share it with

Only the services that make the studio work: Resend (email), Substack (newsletter), Cal.com and Google (bookings), Stripe (payments) and Cloudflare (hosting). Each handles your data under its own privacy terms. Some may process data outside the EU, with appropriate safeguards in place. I never sell your data.

How long I keep it

Only as long as needed for the purpose it was collected, or as the law requires (for example, order records for accounting). Newsletter data is kept until you unsubscribe.

Your rights

Under the GDPR you can ask to access, correct, delete, restrict or port your data, object to its use, and withdraw consent at any time. To do so, email hello@aures-studio.com. You also have the right to complain to the French data protection authority, the CNIL.

Cookies

The site itself uses no tracking or advertising cookies. Embedded tools (such as the Cal.com booking calendar or the Substack signup) may set their own cookies when you use them.