Privacy Policy
Last updated: 29 September 2026
Data controller
The controller of the data collected on www.onenationagency.com is:
One Nation Agency
Valéry Garrec, sole trader (entrepreneur individuel, EI)
6 rue Jean Colly
94140 Alfortville, France
SIRET: 518 212 162 00029
Telephone: +33 6 98 61 97 10
Email: contact@onenationagency.com
No data protection officer has been appointed, as this is not required given the nature and size of the business.
Data collected and purposes
The site creates no user accounts and carries out no profiling. Only three processing operations are in place.
1. Contact form
Data collected: first name, last name, email address, telephone number (optional), organisation or company (optional), subject of the request and message content.
Purpose: to answer your request and manage any commercial relationship that may follow.
Legal basis: your consent, given through the form's checkbox, together with pre-contractual steps taken at your request (Articles 6.1.a and 6.1.b GDPR).
Only the first name, last name, email address, subject and message are mandatory: they are needed to identify you and reply. Telephone and organisation remain optional.
2. Conversational assistant
The site offers an automated assistant. Exchanges take place in your browser and are not stored on a server.
Purpose: if, and only if, you have consented through the privacy banner, a summary of the conversation may be sent by email to One Nation Agency in order to better understand visitors' requests and improve the service.
Legal basis: your consent (Article 6.1.a GDPR), which you may withdraw at any time.
3. Form security
To prevent automated submissions, your IP address is processed temporarily when the form is submitted, and the Cloudflare Turnstile service checks that the request genuinely comes from a browser.
Purpose: preventing abuse and automated submissions.
Legal basis: the legitimate interest of One Nation Agency in protecting its website and mailbox (Article 6.1.f GDPR).
Recipients and processors
Your data is never sold, rented or transferred to third parties for commercial purposes.
It is accessible to Valéry Garrec, sole manager of the business, and is processed by the following technical providers acting as processors:
- Vercel Inc. (United States): website hosting and execution of the form submission function.
- Resend (United States): delivery of the emails sent by the contact form and by the assistant.
- Cloudflare, Inc. (United States): Turnstile service protecting the form against automated submissions.
Transfers outside the European Union
The providers listed above are established in the United States or may process data there. These transfers are governed by the European Commission's standard contractual clauses and, where applicable, by the EU–US Data Privacy Framework to which those providers have self-certified.
Retention periods
- Requests sent through the contact form: three years from the last contact, in line with the CNIL's recommendation on commercial prospecting.
- Summaries of conversations with the assistant: three years from receipt.
- IP address processed for submission limiting: one hour at most, in memory, with no durable storage.
- Record of your consent to trackers: kept in your browser, and erased as soon as you clear your browsing data.
Cookies and local storage
The site sets no cookies whatsoever, neither first-party nor third-party. It uses no audience measurement tool, no advertising pixel and no tracking network.
Only two items are stored in your browser, and neither is transmitted to anyone:
- ona_cookie_consent: your choice regarding the transmission of assistant conversations. This record is exempt from consent, since its sole purpose is to remember your choice.
- ona_intro_seen: records that the intro animation has already been seen, so it is not replayed. It disappears when you close the tab.
You may review or withdraw your choice at any time from the cookie management page.
Security
The site's typefaces are served by the site itself: no request is made to any third-party service to display them, so your IP address is not transmitted to anyone when you simply browse the pages.
The site is served exclusively over HTTPS. Data submitted through the form is not stored in a database: it is delivered by email and then kept in One Nation Agency's mailbox, access to which is password protected.
Your rights
Under the General Data Protection Regulation (EU Regulation 2016/679) and the French Data Protection Act as amended, you have the following rights over your data:
- right of access and to obtain a copy;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to object, in particular to commercial prospecting;
- right to portability of the data you have provided;
- right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, write to contact@onenationagency.com. You will receive a reply within one month. Proof of identity may be requested where there is reasonable doubt as to your identity.
Complaints
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Changes
This policy may be updated to reflect technical or regulatory developments. The date of the last update appears at the top of this page.
Contact us
For any question about this policy or about the processing of your data:
One Nation Agency
6 rue Jean Colly
94140 Alfortville, France
contact@onenationagency.com