Privacy Policy

At Kymono, we value the protection of your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (GDPR – EU 2016/679).

1. Data collected automatically (via cookies and trackers)
• Browsing behavior (clicks, navigation paths).
• Approximate location (IP address, GPS if enabled).
• Technical information (device type: computer, mobile, tablet; browser used).
2. Data you provide directly (via forms or communications)
• First name and last name.
• Email address.
• Phone number.
• Company name.
• Additional information you choose to share (e.g. description of a project or free text).

We use your data for the following purposes:

• To respond to your inquiries and provide quotes.
• To follow up on projects and manage client relationships.
• To communicate about our services, offers, and events (with your prior consent).
• To improve the quality and performance of our website (traffic analysis).

Depending on the processing activity, we rely on:

• Your consent (e.g. newsletters, marketing cookies)
• Performance of a contract or pre-contractual measures (e.g. responding to project requests).
• Our legitimate interests (e.g. website improvement).
• Legal obligations (e.g. invoice retention).

Your data may be shared only with:

• Our authorized internal teams.
• Our technical service providers (hosting, CRM/marketing tools, analytics solutions) acting as processors under the GDPR.

We do not sell or rent your data to third parties.

• Contact form data: stored for a maximum of 3 years after the last interaction.
• Client data: kept for the duration of the contractual relationship, then archived according to legal obligations.
• Browsing data (cookies): stored for 6 to 12 months, in line with CNIL recommendations.

Under the GDPR, you have the following rights:

• Right of access to your data.
• Right to rectification if it is inaccurate or incomplete.
• Right to object or restrict processing.
• Right to erasure ("right to be forgotten"), unless legal obligations require retention.
• Right to data portability.

You can exercise your rights by contacting us at: laura@kymono.co

We will respond within a maximum of 30 days.

We implement appropriate technical and organizational measures to protect your data (encryption, access controls, secure backups).

If some of our providers (e.g. Google, HubSpot, Meta) are located outside the EU, we ensure that data transfers are covered by appropriate safeguards (such as the European Commission's Standard Contractual Clauses).

If you believe your rights are not respected, you may lodge a complaint with the CNIL (www.cnil.fr) or with your local data protection authority.

For any questions about this policy or your personal data, you can reach us at:

Kymono SAS - 8 rue danielle Casanova, 75002 Paris