Privacy Policy
Last updated: 26 October 2026
This policy explains what personal data we collect through santimontesquieu.com, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
Santiago Montenegro (“Santi Montesquieu”)
99 rue de Roquebillière, 06300 Nice, France
contact@santimontesquieu.com
What data we collect
- Identity & contact data: name, email address and phone number — provided through the contact form, WhatsApp or bookings.
- Booking & payment data: session type, date and related details. Payments are handled by Stripe; we never receive or store your full card number.
- Technical & usage data: IP address, browser type, device and pages viewed, collected via cookies and analytics tools.
Why we use your data & legal bases
- To reply to your enquiries — based on our legitimate interest and pre-contractual steps at your request.
- To manage bookings and payments — based on the performance of a contract.
- For analytics and marketing — based on your consent, given through the cookie banner.
Cookies & trackers
We use Google Tag Manager, Google Analytics 4, Google Ads, the Meta (Facebook) Pixel and Microsoft Clarity (heatmaps and session recordings) for analytics and marketing. Google Analytics 4 and Google Ads load with consent denied by default and can send cookieless measurement pings before you accept. Google Tag Manager, the Meta Pixel and Microsoft Clarity load only after you accept via our cookie banner, which uses Google Consent Mode v2. Bookings are arranged on WhatsApp; booking buttons open WhatsApp. Your cookie choice is stored in your browser’s local storage. You can change your choice at any time using Cookie settings, also available in the footer of every page.
Third-party processors
We share data only with service providers needed to run this business:
- Stripe — secure payment processing
- Cal.eu — online booking management (temporarily paused)
- Google — analytics & tag management
- Meta — advertising measurement
- Microsoft Clarity — heatmaps and session recordings
- WhatsApp (Meta) — booking conversations
- Formspree — contact-form delivery
- Hostinger — website hosting
Some of these providers may process data outside the European Union under appropriate safeguards (e.g. standard contractual clauses).
Photos from your session
I publish photos from your session in my portfolio, on this website and on Instagram (a Meta service) only with your consent, which you give by ticking the optional box when you book or by replying YES to my confirmation message. Declining does not affect your booking. You can withdraw your consent at any time by email or WhatsApp and I will remove the photos within 7 days; copies already shared by third parties or kept by Instagram may remain outside my control. I keep a record of your consent for as long as the photos are published. For photos of children, pregnancy or intimate moments, and for the other person in a surprise proposal, I ask for a specific consent before publishing.
How long we keep your data
- Contact & booking data: up to 3 years after our last contact.
- Accounting and invoicing records: as required by French law (up to 10 years).
- Analytics data: up to 14 months.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, the right to data portability, and the right to withdraw your consent at any time. To exercise these rights, email contact@santimontesquieu.com.
You also have the right to lodge a complaint with the French data protection authority, the CNIL — cnil.fr.
Updates
We may update this policy from time to time. The “last updated” date above always reflects the current version.