the hive of growth.

Privacy policy.

How Humari collects, uses and protects your personal data, in accordance with the EU General Data Protection Regulation (GDPR) and the French Loi Informatique et Libertés.

Last updated: 5 May 2026.

Data controller

The data controller for personal data processed through humari.eu is Humari, the digital consultancy operating under the registered French trademark FR5147714, co-owned by Martin Geffrault and Noémie Christien Deléage. Correspondence address: 14 allée du Gacet, 35000 Rennes, France.

For any question regarding the processing of your data or to exercise your rights, please write to: [email protected].

Humari has not appointed a Data Protection Officer (DPO). Given the scale of our activity, this is not required by article 37 of the GDPR. Requests related to your data are handled directly by the brand co-owners.

What we collect and why

Humari only collects personal data in the following contexts:

Email exchanges. When you write to [email protected] (or any @humari.fr address), we collect your email address, your name if you mention it, your company name if you provide it, and the content of your message. This data is used solely to respond to your request and, if applicable, to formalise a commercial engagement.
Contact form. When you submit the form on humari.eu, the fields collected are: name, email, optional company, message. The data is used solely to respond to your request, transmitted via our self-hosted Postfix relay, stored in our mail logs only, and never shared with third parties for commercial purposes.
Anonymous audience measurement. See the section on analytics below.
Technical hosting logs. The hosting server and the Cloudflare CDN keep technical logs (anonymised IP address, user-agent, page requested, timestamp) for security and proper operation of the website. These logs are not used for marketing purposes.

Analytics: Plausible, cookieless

The website humari.eu uses Plausible Analytics for audience measurement. Plausible is the only analytics tool deployed on this website and is hosted by us on our own infrastructure (self-hosted, first-party).

Plausible does not use cookies. It does not track you across other websites. It does not generate a personal profile, an advertising identifier or a persistent fingerprint. The aggregated metrics collected (page views, referrer, country, browser family, device type) are derived from a stateless hash that is rotated daily and cannot be reconciled with an individual person.

Because no cookies and no personal identifiers are stored, no consent banner is required under article 82 of the French Loi Informatique et Libertés or under article 5(3) of the ePrivacy directive.

The website does not use Google Analytics, Facebook Pixel, advertising trackers or third-party cross-site tracking tools.

Legal bases

The above processing activities rely on:

Legitimate interest of Humari in responding to inbound requests and maintaining a commercial or professional relationship (GDPR article 6.1.f).
Pre-contractual measures taken at your request when your message concerns a project proposal (GDPR article 6.1.b).
Compliance with legal obligations (IT security, hosting logs) under GDPR article 6.1.c.
Legitimate interest in measuring audience (GDPR article 6.1.f), strictly limited to anonymous, aggregated, cookieless statistics.

Retention periods

Emails you send are kept for the duration of our active relationship. After the last exchange, they are archived for up to three years for legitimate prospection purposes, in line with the recommendations of the French data protection authority (CNIL). They are deleted on request.

If a commercial engagement is formalised, your contractual data is kept for the duration of the engagement and ten years after its end, to comply with French accounting and tax obligations.

Technical hosting logs are kept for a maximum of thirteen months, in line with CNIL recommendations and applicable law.

Plausible Analytics aggregated metrics are retained indefinitely as anonymous, non-personal statistics. They cannot be linked back to an individual.

Recipients and processors

Your data is strictly reserved for the Humari team (brand co-owners and authorised collaborators) and is never sold or transferred to third parties for commercial purposes.

Technical processors used by humari.eu:

Scaleway SAS, hosting (France).
Cloudflare, Inc., CDN, DNS and network security. Transfers outside the EU are framed by the European Commission’s Standard Contractual Clauses.
Google LLC (Google Workspace), email service. Transfers outside the EU are framed by the Standard Contractual Clauses.

Each of these processors is bound to Humari by a contract compliant with article 28 of the GDPR.

Your rights

Under the GDPR, you have the following rights over your personal data:

Right of access - obtain a copy of the data we hold about you.
Right to rectification - have inaccurate or incomplete data corrected.
Right to erasure - request deletion of your data, within the limits set by law.
Right to restriction of processing - temporarily suspend the processing of your data.
Right to object - object to processing on legitimate grounds.
Right to data portability - receive your data in a structured, machine-readable format.

To exercise any of these rights, write to [email protected]. We respond within one month, in line with article 12 of the GDPR.

If you consider that the processing of your data does not comply with the GDPR, you also have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.

Cookies

The website humari.eu does not set any audience-measurement, advertising or personalisation cookies. Plausible Analytics is cookieless, as explained above.

The website may use a single browser-storage entry to remember your light or dark theme preference (localStorage key: humari-theme). This is a strictly functional preference, not a tracker, and does not require consent under article 82 of the French Loi Informatique et Libertés. You can clear it at any time via your browser settings.

If the activity of the website evolves and analytics or marketing cookies become necessary, this policy will be updated and a consent mechanism will be deployed in line with the GDPR and CNIL recommendations.

Security

Humari implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure. These include encryption of communications (HTTPS), access limited to duly authorised persons and the selection of GDPR-compliant processors.

Changes to this policy

This policy may be updated at any time to reflect regulatory changes or changes in our processing activities. The date of the latest update is shown at the top of this page.