Privacy policy
This page explains what personal data the seamset.com website collects, why, how long we keep it, who else handles it, and your rights. It covers the website only.
1.1 Who is responsible
The data controller is PrimeFocus, a French simplified joint-stock company with a sole shareholder (SASU) with a share capital of 1,000 euros, registered with the RCS of Paris under number 988 608 055, whose registered office is at 46 rue Blanche, 75009 Paris, France. PrimeFocus publishes the SeamSet website until the SeamSet company is created. In this policy, “we” means PrimeFocus.
Contact for anything about your data: [email protected].
We have not appointed a data protection officer. We are not required to, given what the site does.
1.2 What we collect, why, and on what basis
a. Booking a call (“Talk to us”)
You book a call on Google Calendar’s booking page, which is shown on Talk to us, with a link that opens it in a new tab. This booking page is Google’s, not ours. What you enter there reaches us through our Google Workspace account: your first name, surname, email address, company and role, and the time you pick. Google sends you the confirmation email.
We use it to set up the call and prepare it.
Legal basis: our legitimate interest in answering the people who ask to talk to us (GDPR Article 6(1)(f)).
You do not have to book a call: no law or contract requires it. Without the fields the booking page asks for, the call cannot be booked. You can also write to [email protected].
Google handles the booking for us as part of Google Workspace (section 1.4). Google’s own terms, privacy policy and cookies apply to its booking page, including when it is shown inside our page.
We do not use your data for newsletters or marketing emails, we do not sell it, and we do not share it with anyone other than the providers listed in section 1.4. If we ever want to use it for another purpose, we will tell you first.
We take no decision about you based solely on automated processing that has legal effects on you or similarly significantly affects you (GDPR Article 22).
b. Emails you send us
When you write to an address at seamset.com, or reply to us, we receive your name, email address, the content of your message and its attachments. We use them to answer you. Legal basis: our legitimate interest in answering the people who write to us (GDPR Article 6(1)(f)).
c. Server logs
Our host, Cloudflare, processes technical data each time a page of the site is requested, on our behalf, such as your IP address, the date and time, the address of the page requested, your browser’s user agent (browser and device type), the referring page, the country the request comes from, and other information about the traffic to and from the site. Purpose: keep the site running and secure, and investigate an incident. Legal basis: our legitimate interest in a secure, working site (GDPR Article 6(1)(f)).
d. Audience measurement (no cookies)
This site sets no cookies of its own: no advertising cookies, no social network cookies, and none for measurement. The Google booking page embedded on Talk to us is Google’s own content and can set Google’s cookies (see section 1.2 a).
We count visits to improve the site: pages visited, clicks on links and buttons (such as the use cases), time spent on a page, the domain of the site you came from, and browser and device type. We use PostHog, provided by PostHog, Inc. (United States), from its European Union cloud hosted in Frankfurt, Germany. It sets no cookie and stores nothing in your browser. To count visits, PostHog’s servers compute a code from your IP address, your browser’s user agent, this site and a secret that changes every day and is then deleted, so the code changes every day too. Your IP address itself is not stored, and no location is derived from it. It does not record what you type, including on Google’s booking page. We read only statistics, not individual visits. We do not combine them with anything else, including your booking or your emails, and they do not follow you on other sites. PostHog processes this data only on our behalf and for no purpose of its own. How long it is kept: section 1.3. PostHog, Inc. is based in the United States: section 1.5 explains how your data is protected.
Legal basis: our legitimate interest in knowing which pages are read and improving the site (GDPR Article 6(1)(f)). Under these conditions this measurement does not need your consent (French Data Protection Act, Article 82, as applied by the CNIL).
You can object at any time. . Your browser then keeps a small record of your choice, which is the only thing this site stores on your device, and the measurement service no longer loads. If you clear your browser data, or use another browser, click the link again. For any question: [email protected].
1.3 How long we keep it
| Data | How long | Then |
|---|---|---|
| Bookings and emails | Three years after our last contact with you | Deleted |
| Server logs | For a limited period set by Cloudflare under its own policy, which gives no fixed period | Deleted by Cloudflare |
| Audience measurement | Anonymous statistics: no limit, they identify nobody. Raw events in PostHog, each tied to a daily code: one year | Deleted by PostHog |
| Your choice to turn measurement off | Kept in your browser until you clear it | - |
If you ask us to delete your data, we delete it sooner, unless we must keep it to comply with the law or to establish, exercise or defend a legal claim.
1.4 Who handles it
Inside PrimeFocus: only the people who work on SeamSet and need it to answer you.
Our providers (processors), who act only on our instructions, under a contract that meets GDPR Article 28:
| Provider | What for | Data | Where |
|---|---|---|---|
| Google, Google Workspace | Email and calendar: the booking page and the calendar event it creates, receiving and answering emails | Booking details, emails | EU and outside the EU, including the United States (see 1.5) |
| Cloudflare, Inc. (United States), Cloudflare Pages | Hosting the site, server logs | Server logs | Server logs processed in Cloudflare data centers in the United States and Europe (see 1.5) |
| PostHog, Inc. (United States), PostHog Cloud EU | Audience measurement | Pages visited, clicks on links and buttons, time on page, referring domain, browser and device type; IP address and user agent read to compute the daily code, not stored | Stored in the EU (Frankfurt, Germany); PostHog, Inc., its UK subsidiary and its network provider Cloudflare (global edge locations, data in transit) may process it outside the EU (see 1.5) |
| CRM or other tool | None | - | - |
We will update this table before we add a provider.
1.5 Transfers outside the European Union
Google Workspace may process your data outside the European Union, including in the United States. These transfers rely on:
- the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework of 10 July 2023 (Implementing Decision (EU) 2023/1795), to which Google LLC is certified;
- and the standard contractual clauses adopted by the European Commission, which Google includes in its Cloud Data Processing Addendum for Google Workspace.
You can check Google LLC’s certification on the official Data Privacy Framework list (dataprivacyframework.gov) and read the clauses in Google’s Cloud Data Processing Addendum (cloud.google.com/terms/data-processing-addendum), or ask us for a copy.
Our audience measurement provider, PostHog, Inc., is a US company. The data is stored in its European Union cloud in Frankfurt, Germany, but PostHog, Inc., its UK subsidiary and its network provider Cloudflare (global edge locations, data in transit) may process it outside the EU to run the service. These transfers rely on:
- the same adequacy decision for the EU-U.S. Data Privacy Framework, to which PostHog, Inc. is certified;
- and the standard contractual clauses adopted by the European Commission, which PostHog includes in its data processing agreement (posthog.com/dpa).
Our host, Cloudflare, Inc., is a US company. It processes the server logs in its data centers in the United States and in Europe. These transfers rely on:
- the same adequacy decision for the EU-U.S. Data Privacy Framework, to which Cloudflare, Inc. is certified;
- and, if that certification lapses or the framework is invalidated, the standard contractual clauses adopted by the European Commission, which Cloudflare includes in its data processing addendum (cloudflare.com/cloudflare-customer-dpa).
1.6 Your rights
You can, at any time:
- access your data and get a copy (GDPR Article 15);
- have it corrected (Article 16);
- have it deleted (Article 17);
- restrict its use (Article 18);
- object to its use, on grounds relating to your particular situation (Article 21);
- set instructions for what happens to your data after your death (French Data Protection Act, Article 85).
The right to data portability (Article 20) applies to data processed on the basis of consent or a contract. We rely on legitimate interest, so it does not apply here.
To use these rights, write to [email protected]. We answer within one month; for a complex request, we may extend this by two more months and tell you why (GDPR Article 12(3)). We may ask you to confirm your identity if we have a reasonable doubt about it.
If you think we have not respected your rights, you can lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés), online at cnil.fr/fr/adresser-une-plainte or by post: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. You can also complain to the authority of the EU country where you live or work.
1.7 When the SeamSet company is created
PrimeFocus runs the site until the SeamSet company exists. When it does, it will take over the site and this policy will name it. We will tell you before your data moves to it, and you can object.
1.8 Changes to this policy
We update this page when what the site does changes, and before any new use of your data. The date below shows the last change.
Last updated: 25 September 2026