Privacy Policy

Last updated: 08 October 2025

This privacy policy aims to inform users of the website https://shaalk.com about how Shaalk collects, processes, and protects their personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable French law.

By using our website, you acknowledge that you have read and agree to this policy.

1. Data Controller

The data controller responsible for processing personal data is:

• Shaalk SAS

• 66 rue des Champs-Élysées, 75008 Paris, France
• support@shaalk.com

Shaalk determines the purposes and means of processing the data collected on the website.

2. Personal Data Collected

Shaalk may collect the following categories of data:

• Contact data:

  name, surname, email address, phone number, message (via contact forms).

• Browsing data:

  IP address, connection logs, pages visited, time spent, browser used, cookies.

• Transaction data:

  information necessary for managing payments (via bank transfer or Stripe).

• Tracking and marketing data:

  via Google Analytics, Facebook Pixel, and Umami (self-hosted).

• CRM data:

  stored only in our self-hosted CRM Twenty on our servers.

• Emailing data:

  collected via Brevo (newsletter, marketing emails).

No sensitive data (as defined by Article 9 of the GDPR) is collected.

3. Purposes of Processing

The data collected is used for:

• Responding to requests sent via contact forms.

• Providing and managing the services offered by Shaalk.

• Managing billing and payments.

• Sending marketing or informational communications (with consent).

• Analyzing traffic and improving user experience (Google Analytics, Umami).

• Ensuring the security, maintenance, and proper functioning of the website.

4. Cookies and Trackers

Shaalk uses several types of cookies:

• Technical cookies:

  necessary for the website to function properly.

• Analytics cookies:

  Google Analytics and Umami (self-hosted) to measure audience and performance.

• Marketing cookies:

  Facebook Pixel for advertising campaigns.

Consent is collected via the Axeptio solution. You can modify your preferences or withdraw your consent at any time through the cookie banner.

Cookies are retained for a maximum of 13 months.

5. Data Recipients

The data collected may be transmitted to the following recipients:

• Shaalk internal team

  (managing requests, clients, and projects).

• Technical providers:

  hosting provider (OVH), payment tools (Stripe), emailing (Brevo), analytics (Google Analytics, Facebook Pixel).

• CRM Twenty and Umami

  are hosted on our own servers and are not shared with third parties.

6. Transfer of Data Outside the EU

Some data may be transferred to countries outside the European Union, particularly to the United States, when using services such as Google Analytics or Facebook Pixel.

Shaalk ensures that such transfers are governed by appropriate safeguards in accordance with regulations (standard contractual clauses, Privacy Framework, etc.).

7. Data Retention Periods

The retention periods are as follows:

• Contact data:

  3 years from the last interaction.

• Cookies:

  maximum of 13 months.

• Contractual data:

  retained for the legally applicable period (accounting, billing, etc.).

• User accounts

  (if applicable): duration of the account’s existence + deletion upon request.

8. Your Rights

In accordance with applicable law, you have the following rights:

• Right of access:

  obtain confirmation that your data is being processed and receive a copy.

• Right to rectification:

  correct inaccurate or incomplete data.

• Right to erasure:

  request the deletion of your data, subject to legal obligations.

• Right to object:

  object to certain processing (including marketing).

• Right to restriction:

  request temporary suspension of processing.

• Right to data portability:

  receive your data in a structured format.

9. Complaint

If you encounter difficulties in exercising your rights, you have the right to lodge a complaint with the CNIL (French Data Protection Authority):

10. Data Security

Shaalk implements all necessary technical and organizational measures to ensure the security and confidentiality of collected data and to prevent its loss, alteration, destruction, or unauthorized access.

11. Policy Updates

Shaalk reserves the right to modify this policy at any time, particularly to comply with legal or regulatory changes.

The date of the last update is indicated at the top of this page.