Privacy Policy

Controller

Prakash Shapkota – Everest Web (EI)

Address

Gagny (93220), France

SIRET

78980989400049

Contact

contact@everestweb.fr

As a micro-enterprise, Everest Web is not required to appoint a Data Protection Officer (DPO). For any question, please write to the address above.

a) Contact form and quote requests

• Data: name, email address, phone number (optional), requested service and the content of your message.
• Purpose: answering your request, sending you a quote and following up on our business relationship.
• Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) and legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
• Retention period: 3 years from your last contact. If a contract is signed, accounting and contractual documents are kept for the legal periods (10 years for accounting records).

b) Audience measurement (Google Analytics)

• Data: pages viewed, visit duration, traffic source, device and browser type, approximate location, cookie identifier.
• Purpose: understanding how the website is used in order to improve its content and performance.
• Legal basis: your consent (Art. 6(1)(a) GDPR), collected through the cookie banner. No analytics cookie is set without your consent.
• Retention period: 14 months maximum for statistical data; 13 months maximum for cookies.

c) Technical browsing data

Our host automatically records technical logs (IP address, date and time, requested page, browser) needed for the security and proper operation of the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). These logs are kept for a limited period by the host.

Your data is intended solely for Everest Web. It is never sold, rented or used for third-party marketing, and it is not used to send newsletters. Only the following technical providers have access to it, on our behalf:

• Vercel Inc. – website hosting (USA).
• Google LLC / Google Ireland Ltd. – email (receiving contact form messages) and Google Analytics.

Some of our providers (Vercel, Google) may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework, under which these companies are certified, and/or by the European Commission's Standard Contractual Clauses.

We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), access restricted to authorised persons only, and accounts protected by strong authentication.

Under the GDPR, you have the following rights over your data:

• right of access and rectification;
• right to erasure ("right to be forgotten");
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw your consent at any time (in particular for cookies);
• right to give instructions about what happens to your data after your death.

To exercise these rights, write to us at contact@everestweb.fr. We will reply within one month at most. Proof of identity may be requested if there is reasonable doubt.

If you believe your rights have not been respected, you can lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.

To learn more about cookies and manage your preferences, see our cookie policy.

This policy may be updated to reflect changes in our practices or in regulations. The date of the last update is shown at the top of this page.