Privacy Policy
1. Data Controller
The data controller responsible for processing personal data is:
Kader DANI — WrittenForYou
Sole proprietor (micro-entrepreneur) — SIRET: 839 651 791 00023
15 Rue Andre Daste, 31400 Toulouse, France
Email: contact@writtenforyou.online
Phone: +33 7 83 75 44 38
2. Data We Collect
In the course of our business, we collect the following categories of data:
| Category | Data | Purpose |
|---|---|---|
| Identification | First name, email address | Communication and delivery |
| Order | Service type, chosen package, questionnaire responses | Fulfillment of the service |
| Personal content | Anecdotes, memories, names of the couple, personal details | Writing the personalized text |
| Payment | Processed exclusively by Stripe Inc. | Payment processing |
| Contact | Name, email, message | Responding to inquiries |
| Technical | IP address, browser type (server logs) | Website security and operation |
Important: We do not collect any banking data. Payment is handled entirely by Stripe Inc., certified PCI DSS Level 1.
3. Legal Basis for Processing (GDPR)
Our data processing is based on the following legal grounds under the General Data Protection Regulation (GDPR):
- Performance of a contract (Article 6(1)(b) GDPR): order data and questionnaire responses are necessary to fulfill the service you ordered.
- Legitimate interest (Article 6(1)(f) GDPR): technical data is processed to ensure website security.
- Consent (Article 6(1)(a) GDPR): for sending satisfaction surveys and post-delivery suggestions.
4. Data Retention Period
- Order and questionnaire data: 12 months after delivery of the text, then deleted.
- Contact data: 12 months after the last exchange.
- Billing data: 10 years (legal accounting obligation).
- Technical logs: 12 months.
5. Data Recipients
Your personal data is never sold, rented, or shared for commercial purposes. It may be shared with the following third parties, strictly for the purpose of fulfilling our services:
- Stripe Inc. (San Francisco, USA) — payment processing. Stripe Privacy Policy. Transfer governed by EU Standard Contractual Clauses.
- Contabo GmbH (Munich, Germany) — website and data hosting.
- LWS (France) — email service provider.
6. International Data Transfers
The only transfer of data outside the European Union concerns payment processing by Stripe Inc. (United States). This transfer is governed by Standard Contractual Clauses approved by the European Commission, in accordance with Article 46 of the GDPR.
7. Your Rights Under GDPR
In accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws, you have the following rights:
- Right of access (Article 15 GDPR): obtain confirmation that your data is being processed and receive a copy.
- Right to rectification (Article 16 GDPR): correct inaccurate or incomplete data.
- Right to erasure (Article 17 GDPR): request deletion of your data under the conditions provided by law.
- Right to restriction (Article 18 GDPR): request suspension of the processing of your data.
- Right to data portability (Article 20 GDPR): receive your data in a structured, machine-readable format.
- Right to object (Article 21 GDPR): object to the processing of your data on legitimate grounds.
- Right to withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, contact us at: contact@writtenforyou.online
We will respond within 30 days. In case of doubt about your identity, we may request proof of identification.
8. Cookies
The website writtenforyou.online uses only essential technical cookies required for the service to function:
- Stripe session cookies (required for secure payment)
- No advertising cookies
- No tracking or analytics cookies
- No third-party targeting cookies
Since these cookies are strictly necessary for the website to function, they do not require your consent (in accordance with applicable EU ePrivacy regulations).
9. Content Confidentiality
We place the utmost importance on the confidentiality of your personal content:
- Anecdotes, memories, and personal information shared through our questionnaires are strictly confidential.
- They are never published, shared, reused, or exploited for any purpose other than fulfilling your order.
- Delivered texts become your exclusive property after payment.
- We do not retain copies of your texts beyond the retention period stated above.
10. Data Security
We implement appropriate technical and organizational measures to protect your data:
- SSL/TLS encryption for all communications (Let's Encrypt certificate)
- Secure hosting with Contabo GmbH (Germany, EU)
- Data access limited to the data controller
- No banking data stored on our servers
11. Complaints
If you believe that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertes (CNIL), the French data protection authority:
CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Website: www.cnil.fr
If you are located outside of France, you may also contact your local data protection authority.
12. Changes to This Policy
We reserve the right to modify this privacy policy at any time. Any changes will be published on this page with the updated date. We encourage you to review it regularly.
Last updated: March 28, 2026