Personal data

Privacy policy

Last updated: 12 October 2026

In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and amended French Law No. 78-17 of 6 January 1978 (“Informatique et Libertés”), this policy explains how your personal data is processed when you use the Chester Hill website. This English version is provided for convenience; the French version prevails.

1. Data controller

The data controller is [company name to be completed], whose registered office is located at [address to be completed]. For any question about your data: [dedicated email address to be completed].

2. Data collected

We only collect the data you choose to send us:

• Contact form: first name, last name, company, job title, email address, phone number, subject of the enquiry and message;
• Staff-only area (password-protected): information entered in its internal forms (title and address of shared links);
• Technical data: as with any website, the host processes connection data (IP address, date and time of the request, browser type) needed to display and secure the site.

Fields marked as required are needed to process your enquiry. No data is collected for audience measurement or targeted advertising.

3. Purposes and legal bases

• Responding to your requests for information, viewings or leases and managing the business relationship — legal basis: pre-contractual measures taken at your request (Article 6.1.b GDPR) and the publisher’s legitimate interest in developing its business (Article 6.1.f GDPR);
• Operating the staff-only area — legal basis: legitimate interest (Article 6.1.f GDPR);
• Ensuring the security and proper functioning of the site — legal basis: legitimate interest (Article 6.1.f GDPR);
• Complying with our legal and regulatory obligations, where applicable — legal basis: legal obligation (Article 6.1.c GDPR).

Your contact details are not used to send you electronic marketing outside the conditions laid down in Article L. 34-5 of the French Postal and Electronic Communications Code.

4. Recipients

• Authorised staff of the publisher responsible for marketing and managing the spaces;
• Webflow, Inc., as processor, for hosting the site and receiving form submissions;
• [where applicable, other providers: email, CRM… — to be completed or removed].

Your data is never sold or transferred to third parties for commercial purposes.

5. Transfers outside the European Union

As Webflow, Inc. is based in the United States, some data may be transferred there. These transfers are subject to appropriate safeguards within the meaning of Chapter V GDPR: standard contractual clauses adopted by the European Commission and, where applicable, the EU–US Data Privacy Framework recognised by the European Commission’s adequacy decision of 10 July 2023.

6. Retention periods

• Contact requests not followed up: 3 years from your last contact with us;
• If your request leads to a contract: for the duration of the contractual relationship, then archived for the applicable statutory limitation periods;
• Connection data: for as long as needed to secure the site, up to a maximum of one year.

7. Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to object (in particular to processing based on our legitimate interest) and to data portability, as well as the right to set instructions regarding your data after your death (Article 85 of the French “Informatique et Libertés” law).

To exercise these rights, write to us at [email address to be completed] or by post to our registered office, stating the purpose of your request. Proof of identity may be requested if there is reasonable doubt about your identity. We will reply within one month, which may be extended by two months depending on the complexity or number of requests.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

8. Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure: encrypted connection (HTTPS), data access restricted to authorised persons only, and password protection of the staff area.

9. Cookies and other trackers

The site uses no audience measurement, advertising or social media cookies, and no third-party trackers are placed while you browse. This is why no consent banner is shown to you.

Only cookies strictly necessary for the site to function may be placed, in particular the authentication cookie for the staff-only area, which is placed only when you access it. In accordance with Article 82 of the French “Informatique et Libertés” law and CNIL guidelines, these cookies are exempt from consent.

Should we use cookies requiring your consent in the future, a consent management tool would be put in place beforehand. You can also set your browser to block or delete cookies; blocking strictly necessary cookies may, however, prevent access to some features.

10. Changes to this policy

We may update this policy, in particular to reflect legal or technical changes. The date of the latest update appears at the top of the page. See also our legal notice.