ARTICLE 1: Preamble
This privacy policy is intended to inform users of the site:
• How their personal data is collected. Personal data is considered to be any information that can identify a user. This may include: their first and last name, age, postal or email address, location, or IP address (non-exhaustive list);
• The rights they have regarding this data;
• The person responsible for processing the personal data collected and processed;
• The recipients of this personal data;
• The site's policy on cookies.
This policy complements the Legal Notice and the Terms of Use, which users can consult at the following address:
Pending registration
ARTICLE 2: rinciples relating to the collection and processing of personal data
In accordance with Article 5 of European Regulation 2016/679, personal data must be:
• Processed lawfully, fairly and transparently in relation to the data subject;
• Collected for specified (see Article 3.1 hereof), explicit and legitimate purposes, and not further processed in a manner incompatible with those purposes;
• Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
• Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
• Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed;
• Processed in a manner that ensures appropriate security of the data collected, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Processing is lawful only if, and to the extent that, at least one of the following conditions is met:
• The data subject has consented to the processing of their personal data for one or more specific purposes;
• Processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract;
• Processing is necessary for compliance with a legal obligation to which the data controller is subject;
• Processing is necessary to protect the vital interests of the data subject or of another natural person;
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
• Processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
ARTICLE 3: Personal data collected and processed while browsing the site
Article 3.1: Data Collected
The personal data collected as part of our business activities are as follows:
• First and last name
• Email address
• Location
• Website
• Social media
The collection and processing of this data serves the following purpose(s):
• Creating a client file
• Managing this client file.
• Drafting contracts
Article 3.2: Method of Data Collection
When you use our site, the following data is automatically collected:
[List of data automatically collected when a user simply visits the site]
Other personal data is collected when you carry out the following actions on the platform:
Completing the contact form on the page https://wearesundaycollective.com/contact
This data is kept by the data controller under reasonable security conditions for a period of: 6 (six) months, or longer if a contract is entered into between the client and the service provider.
The company may retain certain personal data beyond the periods stated above in order to comply with its legal or regulatory obligations.
Article 3.3: Data Hosting
The site wearesundaycollective.com is hosted by:
Framer B.V
Rozengracht 207B,
1016 LZ Amsterdam,
Netherlands
ARTICLE 4: Data controller and data protection officer
Article 4.1: The Data Controller
Personal data is collected by Manon Lopez, a sole proprietorship whose registration number is pending registration.
The data controller can be contacted as follows:
By email: hello@wearesundaycollective.com
Article 4.2: The Data Protection Officer
The Data Protection Officer for the company is:
Manon Lopez, residing near Avignon (84), whose email address is hello@wearesundaycollective.com
If, after contacting us, you believe that your data protection rights are not being respected, you may notify the CNIL (the French Data Protection Authority).
ARTICLE 5: User rights regarding the collection and processing of data
Any user affected by the processing of their personal data may exercise the following rights, in accordance with European Regulation 2016/679 and the French Data Protection Act (Law No. 78-17 of 6 January 1978):
• Right of access, rectification and erasure of data (set out respectively in Articles 15, 16 and 17 of the GDPR);
• Right to data portability (Article 20 of the GDPR);
• Right to restriction of processing (Article 18 of the GDPR) and to object to the processing of data (Article 21 of the GDPR);
• Right not to be subject to a decision based solely on automated processing;
• Right to determine the fate of one's data after death;
• Right to lodge a complaint with the competent supervisory authority (Article 77 of the GDPR).
To exercise your rights, please send your request by email to hello@wearesundaycollective.com
In order for the data controller to process the request, the user may be required to provide certain information, such as: their first and last name, email address and website.
Visit cnil.fr for more information about your rights.
ARTICLE 6: Conditions for amending the privacy policy
The publisher of the site wearesundaycollective.com reserves the right to modify this Policy at any time in order to ensure that it complies with applicable law for the site's users.
Users are encouraged to review this Policy each time they use our services, without it being necessary to formally notify them.
This policy was last updated on 21 September, 2026
