Privacy notice
My name is Elian Marque. I analyse how French online retailers’ product pages are read by AI search and shopping answers, and I work alone from western France — direct-sales retailers, e-commerce stores and product-led brands, in French and English. This page stays short because the practice is: one form, one inbox, one purpose. Below, plainly, is what the form sends me, how I use it, and what you may ask of me about your own data.
Who handles your data
The data this page describes belongs to me. I, Elian Marque, am the sole analyst running aisearchoptimizationfrance.com, with no partner and no internal department — one person reads every message that arrives. Under the General Data Protection Regulation (GDPR), I am its controller. For any question, or to exercise a right, write to hello@aisearchoptimizationfrance.com.
What is collected
There is a single path to me: the form. It asks for three things and nothing beyond them —
- A name, so my reply can address you properly.
- An email address, so the reply has somewhere to land.
- A free-text message, where you describe the case — the AI shopping answer that worries you, the shopper query that produced it, the product page or listing involved, the bilingual pair of pages whose French and English versions disagree.
That is all of it. No account, no login, no payment details entered here, no profile assembled behind the scenes. The message lands in an inbox and stays a message. Against automated submissions, the timestamp is kept with a salted SHA-256 hash of the sending IP; the IP itself in readable form, browser fingerprints and device traits are never stored.
What is not collected
It is worth naming what this site deliberately refuses:
- No tracking cookies, in any form. Visits are counted by a self-hosted, cookieless, privacy-respecting analytics tool served through a first-party proxy on this domain; nothing is shared across sites and no visitor is singled out.
- No advertising pixels, no remarketing tags, no marketing-automation trackers.
- No automated profiling, no automated decision producing a legal effect on you.
- No sale, rental or sharing of personal data: there is no commercial machinery here to feed.
Why the law allows it
When you send the form, processing your name, email and message rests on Article 6(1)(b) GDPR — steps taken at your request before any agreement. The IP hash that protects the form from abuse rests on legitimate interest under Article 6(1)(f). Should payment-status data appear for a paid engagement, the contractual basis would cover it.
How long it is kept
- Form messages and the email exchange that follows: kept for the duration of the engagement, then 24 months to preserve the history of the exchange, and erased thereafter. A message that leads to no engagement is kept 12 months, then deleted.
- IP hashes: kept 90 days, enough to recognise abuse patterns, then erased.
- Any payment records: if a paid engagement produces them, they are kept only for as long as tax and accounting rules require, then deleted.
Your rights
Over the data you send me, the GDPR gives you rights of access, rectification, erasure, portability, restriction and objection. An email to hello@aisearchoptimizationfrance.com is enough to start any of them, and you will get a reply within one month. If you believe your data was mishandled, you may also lodge a complaint with the data-protection authority of the country where you live.
Where the data is hosted
The servers behind aisearchoptimizationfrance.com sit in European Union (Germany). In the rare case where an additional processor (email provider) operates outside the European Union, the transfer relies on standard contractual clauses and the additional safeguards that party publishes.
Changes to this policy
If the way data is handled changes in a way that matters, this page is revised to say so, and the “Updated” date at the top moves accordingly. A change of real significance stays flagged on the home page for 30 days, so any returning visitor notices it.