Privacy Policy

Pre-publication draft — not ready for publication. The marked items must be completed and verified before this page is published.

Who is responsible

Eric Thao, France, is the data controller for the enquiry handling described here: he determines its purposes and how it is carried out. For privacy requests, contact aipm.execution.consultant@gmail.com. Postal details are in the Legal Notice.

Information handled

This static website has no native contact form, user accounts or payment collection. Its code includes no intentional advertising trackers or analytics. Appointment scheduling takes place on Google Calendar and online meetings use Google Meet; the selected website host is Cloudflare Pages Free.

Booking and correspondence may contain first and last name, email address, optional telephone number, a description of the project challenge, appointment details, related exchanges and any brief prospect notes maintained by the publisher. Meetings may involve the audio, video and chat information participants choose to share through Google Meet. Contact by email also provides the information you choose to include in your message. Please avoid confidential project details and sensitive personal information.

Google Sheets may be used in future, within the same personal Google account, for basic professional prospect tracking for the enquiry and follow-up purposes described below. It is optional and is not represented here as already in use. If used, entries may contain a prospect or company name, the date of the last meaningful exchange, a follow-up action, a scheduled review or deletion date, and brief, non-sensitive professional notes where necessary. The intended spreadsheet is for the publisher’s own use, not public sharing. No CRM, external database or marketing automation is planned.

Hosting and communication services may process technical information such as IP addresses, request times, browser information and service logs to deliver and protect their services. This is distinct from booking information, which is not collected by the landing-page code.

Purposes and legal basis

Enquiry information is used to arrange and conduct introductory conversations, respond to relevant follow-up questions and assess potential professional collaboration.

• Requested steps towards an engagement: Article 6(1)(b) applies only to processing necessary for pre-contractual steps requested by the person who would be a party to the contract. It does not automatically cover a contact acting for a company that would be the contracting party.
• General professional enquiries and relevant follow-up: Article 6(1)(f) is the intended basis for responding to professional enquiries and proportionate follow-up, subject to a documented assessment of necessity and the balance with the person’s rights. It does not authorize unrelated marketing.
• Website delivery and security: where the publisher determines the processing, the intended basis is Article 6(1)(f), the legitimate interest in delivering and protecting this website, limited to necessary technical data. Providers’ own processing is governed by their applicable privacy notices; the publisher’s basis does not replace theirs.

Voluntarily sending information is not, by itself, blanket GDPR consent.

[VERIFY BEFORE PUBLICATION: complete and record the legitimate-interest assessment for enquiry follow-up and any publisher-controlled technical processing, confirming necessity, reasonable expectations, risks and safeguards.]

Recipients and service providers

Eric Thao receives booking information and correspondence. Google services support scheduling, meetings and email; Cloudflare supports website hosting and delivery. A LinkedIn visit is handled separately by LinkedIn. Only information needed for the relevant service should be shared.

The publisher uses the personal, free Gmail account aipm.execution.consultant@gmail.com for Gmail, Google Calendar appointment scheduling and Google Meet. It is not a Google Workspace account. Only Eric Thao has access to this account, email and calendar; this does not exclude processing by the service providers.

The Google Terms of Service for France identify Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the EEA service provider. Google’s Privacy Policy identifies it as controller for processing covered by that policy for EEA users, unless a service-specific notice says otherwise. This is separate from Eric Thao’s responsibility for handling enquiries. No Google Workspace processing agreement is claimed.

Cloudflare hosting uses a personal Free account with no separate contract known to the publisher. Section 6.1 of its Self-Serve Subscription Agreement incorporates its Data Processing Addendum for qualifying personal data in Customer Content. Cloudflare also describes its own processing in its Privacy Policy; not all processing is on the publisher’s behalf.

[VERIFY BEFORE PUBLICATION: assess whether the consumer-service arrangements are appropriate for the actual enquiry data and document any additional processing terms required for those data flows. If Google Sheets is introduced, verify that the prospect spreadsheet remains restricted to the publisher in the same personal account.]

Provider information: Google Privacy Policy and Cloudflare Privacy Policy.

International processing

Provider services may involve processing outside France or the European Economic Area. Google describes worldwide processing and its transfer mechanisms in its data-transfer framework information. Cloudflare describes international processing in its Privacy Policy and applicable processing terms. Their applicability must be checked for the actual entities, services and data flows; this notice does not promise EU-only storage or assert that one safeguard covers every transfer.

[VERIFY BEFORE PUBLICATION: identify applicable transfers and safeguards from the actual service terms and explain how a copy or further information can be obtained.]

Retention and manual deletion

Inactive or unsuccessful introductory enquiries are subject to a deletion deadline of six months after the last meaningful exchange. A meaningful exchange is substantive contact about the enquiry, not an automated notification. The publisher will review records monthly and delete them manually by that deadline, deleting records due before the next monthly review early where necessary. No automated deletion is in place.

The same period applies to relevant Gmail correspondence (including sent and archived copies), Google Calendar booking records and any Google Sheets prospect entries and notes, if used. At expiry, these records and unnecessary copies should be deleted through the relevant service or local storage, including their trash where applicable. Archiving an email is not deletion.

Deletion from the publisher’s account does not guarantee deletion of copies held by the enquirer or immediate removal from provider backups. Provider retention and recovery periods must be checked separately. A genuine legal preservation need or a subsequent engagement requires a documented purpose, restricted access and an appropriate separate retention period.

[VERIFY BEFORE PUBLICATION: confirm the practical deletion and recovery limits of Gmail and Calendar before applying this procedure; check Google Sheets version history and recovery if it is introduced. Monthly review does not extend the six-month deadline.]

Cookies and similar technologies

The supplied site code does not set cookies or browser storage, embed scheduling widgets, or load analytics. Google and LinkedIn are accessed only when you follow their links and apply their own policies.

[VERIFY BEFORE PUBLICATION: inspect the actual Cloudflare-hosted response and enabled account features for technical cookies or similar technologies and record their purpose and duration.] No cookie banner has been added to this local package. Whether consent is needed must be assessed against the technologies actually enabled; optional tracking must not be added without that assessment.

Your rights

Depending on the applicable legal basis and conditions, you may request access, correction, erasure, restriction of processing, portability, or object to processing. If processing relies on consent, you may withdraw it without affecting prior lawful processing. These rights are not absolute.

Send requests to aipm.execution.consultant@gmail.com. Only proportionate information necessary to verify identity should be requested. A response is normally due within one month; a permitted extension must be explained within that period.

You may also lodge a complaint with the French supervisory authority, the CNIL, without first contacting the publisher.

Providing information and decisions

Contact and appointment information is needed to arrange a discussion; the telephone number is optional. Without necessary contact details, a booking or response may not be possible. This site does not make automated decisions or profile visitors for commercial eligibility.