Legal

Privacy & Cookie Policy

This policy explains what personal data MoveDev collects through movedev.site and in the course of client work, why we hold it, how long we keep it, and the rights you can exercise over it.

Last updated: 1 January 2026 · MoveDev · movedev.site

1. Who is responsible for your data

The data controller is the individual operator trading as MoveDev, based at 1 Impasse De Brinches, 77470 Villemareuil, France — contactable at contact@movedev.site or +33 6 47 50 79 74.

MoveDev is operated by an individual owner and is not an incorporated company. We have not appointed a data protection officer where the law does not require one; privacy enquiries should be addressed to the contact details above.

2. Data we collect

Data you give us

• Enquiry data: name, company, email address, telephone number, target launch date and the content of your message, submitted through our contact form or sent by email, phone or messaging.
• Client and contract data: the contact details of your named representatives, billing name and address, VAT number where applicable, project correspondence, proposals, contracts and invoices.
• Materials you supply: brand assets, copy, images and any credentials you give us for the purpose of the work. Credentials are used only to perform the agreed work and we ask you to revoke them at handover.

Data collected automatically

• Server logs: IP address, date and time of request, pages requested, referring page, browser and operating system — recorded by our hosting provider for security and troubleshooting.
• Measurement data: where you consent to analytics cookies, pages viewed, time on page, approximate region, device type and the events described in section 9.

We do not knowingly collect special-category data (health, political opinions, religious beliefs, biometrics and similar) and ask you not to send it to us. We do not buy contact lists and we do not use your data to train machine-learning models.

3. Why we use your data, and our legal basis

• Answering enquiries and preparing proposals — legal basis: our legitimate interest in responding to a request you initiated, and, for consumers, steps taken at your request prior to entering a contract (Art. 6(1)(b) and 6(1)(f) GDPR).
• Performing the contract — delivering the Services, managing revisions, handover and support (Art. 6(1)(b)).
• Invoicing, accounting and tax — compliance with our legal obligations under French commercial and tax law (Art. 6(1)(c)).
• Site security, fraud and abuse prevention — our legitimate interest in keeping the site available and safe (Art. 6(1)(f)).
• Analytics and improving the site — your consent, given through the cookie banner, and withdrawable at any time (Art. 6(1)(a)).
• Portfolio and case references — our legitimate interest in describing our work; you may object at any time and we will remove the reference.
• Establishing or defending legal claims — our legitimate interest, and compliance with legal obligations.

Providing the data marked as required in our contact form is necessary for us to answer you. Everything else is optional.

4. Who we share your data with

We do not sell personal data and we do not share it with third parties for their own marketing. We disclose it only to:

• Service providers acting on our instructions — website hosting and domain, business email, file storage and transfer, project management, invoicing and accounting, and analytics. Each acts as a processor under a contract meeting Article 28 GDPR. The current list of providers and their locations: CONFIRM — list hosting, email, storage, analytics and accounting providers by name.
• Our accountant, auditors and legal advisers, where necessary and under a duty of confidentiality.
• Public authorities, where we are legally required to disclose.
• A successor, if the business or part of it is transferred — in which case this policy continues to apply to the transferred data.

5. Transfers outside the EEA

We prefer providers that store data within the European Economic Area. Where a provider processes data outside the EEA, the transfer is covered by an adequacy decision of the European Commission or by the Commission's standard contractual clauses together with any additional safeguards required. You can ask us for details of the mechanism applying to a specific provider and, where applicable, a copy of the relevant clauses.

6. How long we keep your data

• Enquiries that do not become projects: up to three years from our last contact, then deleted.
• Client contract and project records: for the duration of the engagement and then as required to defend claims and meet statutory obligations.
• Invoices and accounting records: ten years from the close of the financial year, as required by the French Commercial Code.
• Server logs: up to twelve months.
• Analytics data: up to fourteen months, in line with CNIL guidance.
• Consent records: for as long as needed to evidence the consent, and for the period required by law after it is withdrawn.
• Client credentials: deleted at handover or on request, whichever is earlier.

7. Security

We apply measures appropriate to the risk: encryption in transit (HTTPS), access limited to those who need it, multi-factor authentication on business accounts, password management, regular updates of the software we run, and backups. Credentials you share with us are stored in a password manager and never in plain text in email.

No system is absolutely secure. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours where required and inform you without undue delay where the risk is high.

8. Your rights

Under the GDPR you have the right to: access your data and obtain a copy; have inaccurate data corrected; have data erased where one of the grounds in Article 17 applies; restrict processing; receive your data in a portable format; object to processing based on legitimate interests, including portfolio references; withdraw consent at any time, without affecting the lawfulness of processing already carried out; and not be subject to solely automated decision-making with legal or similarly significant effects — which we do not carry out. French law also allows you to give instructions about the fate of your data after your death.

To exercise any of these, email contact@movedev.site. We respond within one month, extendable by two further months for complex requests, and we may ask for information to verify your identity.

If you are not satisfied with our response, you may lodge a complaint with the French supervisory authority, the CNIL (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr), or with the authority in your country of residence.

9. Cookies and similar technologies

A cookie is a small file stored on your device by a website. We use them in three categories:

• Strictly necessary — session integrity, load balancing, security and remembering your cookie choice. These are exempt from consent because the site cannot function without them.
• Measurement / analytics — set only with your consent, to count visits and understand which pages and sections are used. Where configured in the CNIL-exempt manner (no cross-site tracking, IP truncation, limited retention), these may be used without consent; our current configuration: CONFIRM analytics tool and whether the CNIL exemption applies.
• Marketing and advertising — set only with your consent, and only if we run advertising for movedev.site. Current advertising or remarketing tags in use: CONFIRM — state "none" if you run no ad tags.

The precise cookie names, providers, purposes and lifetimes in use on movedev.site: CONFIRM — paste the cookie table from your consent tool once configured.

10. Managing your cookie choices

When you first visit movedev.site you are asked to accept or refuse non-essential cookies. Refusing is as easy as accepting, and refusal does not restrict access to any part of the site. You can change or withdraw your choice at any time through the cookie settings link in the footer of the site, and your choice is stored for a maximum of six months before we ask again, in line with CNIL guidance.

You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site working.

11. Children

Our services are sold to businesses and to adults. The site is not directed at children and we do not knowingly collect data from anyone under 15. If you believe a child has sent us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes in our tools, our services or the law. The current version and its date are always published here; where a change materially affects how we use data you have already given us, we will tell you directly.