Skip to main content

Privacy Policy

Last updated: April 2026

Data Controller

Nommade (Dominique SONDECK), reachable at contact@nommade.io.

Data Collected via the Contact Form

When using the contact form, we collect the following data:

  • Name
  • Email address
  • Company name (optional)
  • Subject and message content

Legal basis: your consent (GDPR art. 6.1.a), materialised by submitting the form.

Technical Data Processed Automatically

To protect the form from spam, your IP address and a submission counter are temporarily stored in a Cloudflare Workers KV cache for up to 60 minutes, then automatically deleted. No other browsing data is retained.

Legal basis: legitimate interest (GDPR art. 6.1.f) — protection against automated abuse and attacks.

Purpose of Processing

Data collected through the contact form is used solely to respond to your inquiry and, where applicable, to handle commercial follow-up if you become a client. It is never sold, rented, or shared with third parties for commercial purposes.

Third-Party Services and Sub-processors

  • Cloudflare, Inc. — Hosting (Cloudflare Pages), CDN, DNS, and serverless execution of the contact form (Pages Functions). HTTP requests transit through Cloudflare's infrastructure. Cloudflare privacy policy.
  • Google LLC (Google Workspace / Gmail API) — Sending and receiving emails at contact@nommade.io. When you submit the form, the message content is sent to the Gmail API over OAuth 2.0 to be deposited in our inbox, and a confirmation email is sent back to you through the same channel. Google privacy policy.
  • Cal.com, Inc. — Third-party booking service accessed via an external link (“Book a slot” button). No data is transmitted to Cal.com until you click that link. Cal.com privacy policy.

Cookies and Trackers

This site does not use any tracking cookies, analytics, or advertising. The only local storage used is for your theme preference (light/dark), stored in localStorage; it never leaves your browser.

Data Retention

  • Contact messages: retained in our Google Workspace mailbox for the time needed to handle your request, then deleted within a maximum of 24 months.
  • IP address (anti-spam): retained at most 60 minutes in Cloudflare KV, then automatically deleted.

Transfers Outside the European Union

Sub-processors Cloudflare and Google are US companies. Data processed may transit through their infrastructure located outside the European Union. These transfers are framed by the European Commission's Standard Contractual Clauses and, where applicable, by the EU – US Data Privacy Framework to which both Cloudflare and Google are certified.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access to your data
  • Right to rectification
  • Right to erasure
  • Right to data portability
  • Right to object and to restrict processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with the CNIL (www.cnil.fr) — French data protection authority

To exercise these rights, contact us at: contact@nommade.io.