Information
Privacy policy
What we collect, why, for how long, and how to use your rights. In short: only what we need to answer you, never sold, no tracking.
Last updated: 13 October 2026
This English version is provided for convenience only. In case of discrepancy, the French version prevails.
1. Who is responsible for your data?
IMPERA LUMEN (trade name Ensia), a SAS with share capital of EUR 100, SIREN 999 529 159, whose registered office is given in the legal notice. For any question about your data: contact@ensia-paris.fr or +33 7 56 93 64 33. Given its size and activity, the company has not appointed a data protection officer.
2. What data, for what, and for how long?
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering your mockup, quote or contact request (forms, email, phone, WhatsApp) | Business name, trade, area, first name or name, email, phone, link to your site, listing or Instagram, project description, preferred channel, content of our exchanges | Pre-contractual steps taken at your request (art. 6.1.b GDPR); when you write for a business, our legitimate interest in answering the requests we receive (art. 6.1.f) | 3 years after our last exchange initiated by you, then deleted |
| Carrying out the service you ordered, invoicing | Identity and contact details, project elements, quotes, invoices, payments | Performance of the contract (6.1.b); accounting and tax obligations (6.1.c) | Duration of the contract, then 5 years as evidence; invoices and accounting records: 10 years |
| Presenting our services to businesses (prospecting) | Business contact details and information about your establishment from public sources (listing, website, professional pages) | Our legitimate interest in developing our activity (6.1.f) | 3 years after collection or your last contact; clients: 3 years after the end of the relationship |
| Respecting your choices (objection, exercise of rights) | Identity, contact details, subject of the request | Legal obligation (6.1.c) | Objection list: 3 years; replies: legal limitation period |
| Protecting the site against abuse and automated submissions | Technical connection data (IP address, browser, date and time) | Our legitimate interest in securing the site (6.1.f) | A few days at most, at our host |
Fields marked with an asterisk are needed to answer you; without them we cannot handle your request. Please don’t include sensitive information (health, opinions and so on) in your project description. We don’t sell your data and make no automated decisions about you.
If we contact you without you having written to us first, your business contact details come from public sources: your establishment’s Google Maps listing, your website or your professional social media pages. We only offer services related to your activity, and you can object at any time, without giving a reason, with a simple message.
3. Who receives your data?
Your data is handled by the Ensia team only. We use the following providers, who act only on our instructions under a contract compliant with article 28 GDPR:
- Vercel Inc. (United States): hosting of the site and of the functions that send the forms.
- OVH SAS (France): email.
- Providers of the software tools we work with (design, development, office tools), some of them based in the United States, which may process the information about your business and your project.
If you choose to talk with us on WhatsApp, that service handles your messages under its own terms. Your data may also be disclosed to the authorities when the law requires it.
4. Transfers outside the European Union
Vercel Inc. and some of our tool providers are based in the United States. Transfers rely on the European Commission’s standard contractual clauses included in their contracts and, for companies certified under it, on the EU-US Data Privacy Framework, recognised by the European Commission as providing an adequate level of protection (decision of 10 July 2023). The functions that process your forms run in the Paris region. You can get a copy of these safeguards by writing to us.
5. Your rights
You can access your data, have it corrected or erased, restrict its use, ask for its portability and object to its processing, in particular to prospecting, at any time and without giving a reason. You can also set instructions for what happens to your data after your death. To exercise these rights, write to contact@ensia-paris.fr or to our registered office. We answer within one month, which can be extended by two months for a complex request; if we have reasonable doubts about your identity, we may ask you for proof.
If, after contacting us, you believe your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL): www.cnil.fr/fr/plaintes, or CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
6. Security
The site is served over an encrypted connection (HTTPS). Requests are not stored in a database on the site: they reach us by email, in a mailbox protected by a password. Filtering automated submissions relies on no third-party service and no CAPTCHA.
7. Cookies and local storage
This site uses no advertising cookies, no audience measurement tool and no external content that sets trackers (videos, maps, social networks). It only saves in your browser, using local storage, your choice of light or dark display and whether you closed the language suggestion. If you switch language with the language selector, a technical cookie named "ensia-lang" remembers your choice for one year, so the home page doesn’t send you back to the other language. When you go from the sketch to the mockup form, it also keeps the shop name and trade you chose in session storage, to fill in the form for you; this disappears when you close the tab. This information stays on your device; the language cookie is only read by the server to choose which version of the home page to show, and nothing is sent to us unless you submit the form. It only serves the use you asked for: they are therefore exempt from consent (article 82 of the French Data Protection Act). You can erase them at any time by deleting the site’s data in your browser settings. The typefaces are hosted with the site: loading them sends no data to a third party. If we ever add an audience measurement tool, this page will be updated before it goes live.
8. Changes
We may update this policy. The date of the last update is shown at the top of the page.