Privacy policy
Last updated: May 27, 2026
BRX Digital, as data controller, takes the protection of your personal data seriously. This privacy policy describes what data we collect on brxdigital.com, why, how it is protected, and how you can exercise your rights — in compliance with the General Data Protection Regulation (GDPR).
Data controller
BRX Digital — Florent Breux. Contact: hello@brxdigital.com.
Data we collect
We collect strictly what is necessary:
- Contact form: name, email address, company (optional), request type and message content.
- Analytics: anonymised technical data (approximate country, device type, page viewed, load time) via Vercel Analytics and Speed Insights — cookie-free, no unique visitor fingerprinting.
- Technical cookie: a preference cookie storing your theme choice (light/dark). See our cookie policy.
We do not collect banking data, phone numbers, postal addresses or any sensitive data within the meaning of article 9 of the GDPR.
Purposes of processing
- Reply to your requests sent via the contact form — legal basis: your explicit consent (art. 6.1.a GDPR).
- Improve site performance and reliability via aggregated statistics — legal basis: legitimate interest (art. 6.1.f GDPR).
- Keep your display preferences across visits — legal basis: legitimate interest (strictly necessary cookie).
Retention
- Inbound contact-form messages: 3 years after the last exchange.
- Analytics data: 30 days, then auto-deletion.
- Preference cookie: 1 year, or manual deletion via your browser.
Recipients
Your data is neither sold, rented, nor shared for commercial purposes. It is accessible only to BRX Digital and hosted by the following sub-processors:
- Vercel Inc. (hosting and analytics) — DPA and Standard Contractual Clauses in place.
- Resend (contact-form email delivery) — DPA in place.
International transfers
Some sub-processors may process data in the United States. Transfers are framed by the European Commission's Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable.
Your rights
Under the GDPR you have the following rights at any time:
- Right of access and to a copy of your data.
- Right to rectify inaccurate data.
- Right to erasure ("right to be forgotten").
- Right to restrict processing.
- Right to object to processing.
- Right to data portability.
- Right to withdraw consent at any time.
To exercise these rights, write to hello@brxdigital.com. You will receive a response within 30 days. In case of disagreement, you may file a complaint with the French data protection authority (CNIL).
Security
Transfers between your browser and our servers are encrypted via HTTPS (TLS 1.3). Inbound emails are stored in a mailbox protected by a strong password and multi-factor authentication.