Privacy Policy
Last updated: 23 October 2026
Who we are
HEKA DESIGN is the data controller for any personal data collected through this website (heka.design).
Data controller: Linford Lof, sole proprietorship trading as HEKA DESIGN
Registered office: 3 cours Vincent Scotto, 95820 Bruyères-sur-Oise, France
SIRET: 888 543 428 00013
Contact for data requests: hello@heka.design
What data we collect
| When | What we collect | Collected through |
|---|---|---|
| You submit the contact form | Your name and email address. If you choose to give them, your phone number, company and website. What you tell us about your project: the service you need, whether it is a new or an existing project, what you want us to take on, your budget range, and any details you write in the message field. How you found us. | Formspark, which forwards it to our email inbox |
| You book a call | Your name, your email address, the time slot you choose, your time zone, and anything you add in the notes or as guests. | Cal.com |
| You browse the site | Pages viewed, clicks, page performance and technical errors, measured without cookies. To count visits without cookies, technical data sent by your browser, such as your IP address and browser type. | PostHog |
| You submit the contact form | Technical signals from your browser (such as your IP address and browser characteristics), used only to check that the form is sent by a person and not a bot. | Cloudflare Turnstile |
| You visit any page | Standard technical logs (such as IP address and browser information) needed to serve and secure the site. | Sevalla, our host |
PostHog is set to discard IP addresses: they are used to count visits without cookies, then dropped and never stored.
Some pages are prepared for a single company and sent to it directly. We measure them page by page, as we do the rest of the site: without cookies, and without building a profile of any individual. A visit tells us that the page was read, not who read it.
We do not ask for anything else. We set no tracking cookies. Our host's network sets one strictly necessary security cookie, and the booking tool sets its own when you open it; all of them are listed in our Cookie Policy.
Why we collect it
We use contact-form data to understand your project and reply to you, and "how you found us" to understand which channels bring us projects. We use the Turnstile check only to protect the form from spam and automated abuse. We use booking data to schedule and hold the call you asked for. We use audience measurement to understand how the site is used and improve it. We do not use any of this data for advertising, profiling, or automated decision-making.
Legal basis
We process contact-form and booking data on the basis of your consent, and of the steps taken at your request before any possible engagement (pre-contractual measures), under Article 6 of the GDPR. We process audience-measurement data on the basis of our legitimate interest in understanding and improving our website (Article 6(1)(f) of the GDPR), and the Turnstile spam check on the basis of our legitimate interest in protecting the contact form from abuse (Article 6(1)(f) of the GDPR).
Who has access
Your data is handled by HEKA DESIGN. It is also processed by our service providers acting on our instructions:
| Provider | What it does for us | Where |
|---|---|---|
| Kinsta Inc. (Sevalla) | Hosts this website | United States; site files on Cloudflare R2, served through Cloudflare's network |
| Formspark (Trampoline Software SRL) | Receives contact-form submissions, keeps a copy and forwards them to our inbox | Belgium; data stored in Ireland and Germany |
| Cloudflare, Inc. | Runs Turnstile, the spam check on the contact form | United States |
| Our email hosting provider | Hosts the inbox where contact-form submissions are delivered | Data hosted in Switzerland |
| Cal.com, Inc. | Runs the booking tool, stores your booking and sends its confirmation | United States |
| PostHog, Inc. | Measures the site's audience | Data hosted in the European Union (Frankfurt, Germany) |
We do not sell your data, and we do not share it for advertising.
International transfers
Some of our providers are based in the United States (Kinsta, which runs our host Sevalla, and Cloudflare for hosting and the spam check, Cal.com for booking), so part of your data is processed outside the European Union. These transfers are covered by appropriate safeguards under the GDPR: Kinsta, Cloudflare and Cal.com are certified under the EU-U.S. Data Privacy Framework, and Cloudflare and Cal.com also rely on the European Commission's Standard Contractual Clauses. The inbox where your messages arrive is hosted in Switzerland, which the European Commission recognises as providing an adequate level of data protection. Contact-form submissions are stored by Formspark in the European Union, and audience-measurement data is hosted in the European Union.
How long we keep it
We keep your message and your booking for three years after our last contact, unless we start working together, in which case they become part of the project records. This applies to our inbox, to the copy kept by Formspark and to the booking kept by Cal.com.
Audience-measurement data is kept for one year, then deleted by PostHog.
How we protect it
We take reasonable technical and organisational measures to keep your data secure, including hosting on a managed platform and limiting access to the people who need it to reply to you.
Your rights
Under the GDPR and the French Data Protection Act, you have the right to access, correct, delete, or port your data, and to object to or restrict its processing. To exercise any of these rights, write to hello@heka.design.
You also have the right to lodge a complaint with the CNIL, the French data-protection authority (www.cnil.fr).
Cookies
We set no tracking cookies, and we measure the site's audience without cookies. Our host's network sets one strictly necessary security cookie on every page, and if you open the booking tool, Cal.com places a few strictly necessary cookies. Full details are in our Cookie Policy.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of the page always reflects the current version.
A question about your data? Write to hello@heka.design.