Privacy Policy

1. Data controller

The data controller responsible for your personal data is:

PubliKrea
Operated by Mohammed Shafwat Hossain (Rabby Raz)
Paris, France
Email: hello@publikrea.com

As a company based in France, PubliKrea is subject to EU Regulation 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978 on information technology, files, and civil liberties (Loi Informatique et Libertés), as amended.

2. What data we collect

We collect personal data only when you voluntarily provide it or when it is generated through your use of our website. This includes:

• Contact and quote requests: name, email address, phone number, and any information you include in your message
• Newsletter/content sign-ups: name and email address
• Client engagement: billing information, project briefs, communications, and any assets you share with us during a project
• Website usage data: pages visited, browser type, device type, referring URL, and approximate location (collected via server logs or analytics tools)

We do not collect sensitive personal data (special categories under GDPR Article 9).

3. Legal basis for processing

We process your personal data on the following legal bases:

• Contractual necessity (Article 6(1)(b) GDPR): to communicate with you about a quote request, deliver services you have engaged us for, and manage our client relationship
• Legitimate interest (Article 6(1)(f) GDPR): to improve our website, respond to enquiries, and market our services to prospective clients who have expressed interest
• Consent (Article 6(1)(a) GDPR): to send you newsletters or content updates, where you have explicitly opted in. You may withdraw consent at any time.
• Legal obligation (Article 6(1)(c) GDPR): to comply with applicable accounting, tax, and regulatory requirements

4. How we use your data

We use your data to:

• Respond to quote requests and enquiries
• Deliver, manage, and invoice our services
• Send content ideas or newsletters you have signed up for
• Maintain business records required by French accounting and tax law
• Improve the performance and user experience of our website
• Communicate with you about relevant services or updates, where permitted

We do not use your data for automated decision-making or profiling that produces legal effects.

5. Data sharing and third parties

We do not sell, rent, or trade your personal data. We may share data with trusted third parties strictly to operate our services:

• Email and communication tools (e.g. email service providers) — to send and receive messages
• Website hosting providers — to serve and secure the website
• Accounting and invoicing tools — to manage billing and comply with French tax obligations
• Analytics tools — to understand how visitors use our website (using privacy-respecting, cookieless solutions where possible)

All third-party processors we use are required to comply with GDPR and to process data only on our documented instructions.

We do not transfer your data outside the European Economic Area (EEA) unless appropriate safeguards are in place (e.g. Standard Contractual Clauses).

6. Data retention

We retain your data only for as long as necessary:

• Quote requests and enquiries: up to 3 years from the date of last contact, unless an engagement follows
• Client project data: up to 10 years from the end of the engagement, as required by French commercial and accounting law
• Newsletter subscribers: until you unsubscribe or request deletion
• Website logs: typically up to 13 months

7. Cookies

Our website may use cookies or similar technologies to ensure basic functionality and, where consent is given, to analyse traffic. We aim to minimise the use of tracking cookies.

• Essential cookies: required for the website to function correctly — no consent required
• Analytics cookies: used only with your consent, to understand how our site is used and improve it

You can manage your cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect website functionality.

8. Your rights under the GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access (Article 15): to request a copy of the personal data we hold about you
• Right to rectification (Article 16): to ask us to correct inaccurate or incomplete data
• Right to erasure (Article 17): to ask us to delete your data where it is no longer necessary or where you withdraw consent
• Right to restriction of processing (Article 18): to ask us to limit how we use your data in certain circumstances
• Right to data portability (Article 20): to receive your data in a structured, machine-readable format
• Right to object (Article 21): to object to processing based on legitimate interests, including direct marketing
• Right to withdraw consent: at any time, where processing is based on consent, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at hello@publikrea.com. We will respond within 30 days. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr.

9. Data security

We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These include secure data storage, access controls, and use of encrypted communications.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours and inform affected individuals where required by law.

10. Links to third-party websites

Our website may contain links to external platforms (Instagram, TikTok, YouTube, LinkedIn). These services have their own privacy policies, and we have no control over how they collect or use your data. We encourage you to review their privacy policies before interacting with them.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised effective date. We encourage you to review this policy periodically.

12. Contact

For any questions, requests, or concerns regarding this Privacy Policy or the way we handle your personal data, please contact us at hello@publikrea.com.