Privacy policy.

← Back to home

Last updated: 31 October 2026

Who is responsible

Tom Ghys, trading as sygh, is responsible for the personal data described here. Contact: [email protected].

What I collect, and why

• When you write to me: your name, email address and what you tell me, to reply to you and discuss a possible project. Basis: your request, and my legitimate interest in answering business enquiries.
• When you book an intro call: your name, email address, the time slot and any notes you add. Basis: your request. The booking tool is provided by Cal.com (see below).
• When you become a client: contact and billing details, and the files and information you share for the project. Basis: performing my contract with you, and my legal obligations (invoicing and accounting).
• When you visit the website: my hosting provider, Cloudflare, processes technical data such as your IP address to deliver the site and keep it secure. Basis: my legitimate interest in running a secure website.

I don’t sell your data, and I don’t use it for advertising.

Cookies and tracking

I don’t use analytics, advertising or tracking cookies on this website. The booking calendar is provided by Cal.com and embedded in the page: Cal.com may use cookies or similar technologies that it needs to run the calendar. I don’t use them to track you.

Who receives your data

• Cal.com, for the booking calendar.
• Cloudflare, for hosting the website.
• My email, invoicing and accounting tools.
• The design and AI software providers I use in my work, only with the content needed for the task.
• Designers or specialists I bring in on a project, only what they need and under confidentiality.

Some of these providers are based outside the European Union, notably in the United States. When that is the case, the transfer relies on safeguards recognised by the European Commission, such as standard contractual clauses or the EU–US Data Privacy Framework.

How long I keep it

• Enquiries and booking requests that don’t lead to a project: up to 3 years after my last contact.
• Client files and project materials: for the duration of the project, then as long as needed to support you, unless you ask me to delete them.
• Invoices and accounting records: 10 years, as required by French law.

Your rights

You can ask me for access to your data, to correct it, to delete it, to limit how I use it, or to receive a copy of it. You can also object to me using it, where I rely on my legitimate interest. Write to [email protected] and I will answer within one month.

If you think I am not handling your data properly, you can complain to the French data protection authority, the CNIL (cnil.fr).

Changes

If I change this policy, I update the date at the top of this page.