Last updated: 4 October 2026.
Data controller
The data controller is Louis Choquet, a sole trader operating under the trading name “Pharelia”. You can email contact@pharelia.com. Available identification details are listed in the legal notice (in French).
Contact, audit and conversation requests
The forms collect your name, email address, objective, language choice and, if you provide them, your website address and company name. Name, email, objective and consent to be contacted are required. The website is optional when requesting a conversation through Contact or Consultation; it is required for an audit request, to identify the pages to review. Company is optional. A random reference is associated with each submission.
This information is used to read your request and reply by email. An audit request does not trigger an automatic audit. A conversation request does not book a time slot: Pharelia contacts you by email to agree the next steps. The form does not automatically create a subscription, customer account or marketing registration.
The legal basis for contacting you is the consent given in the form. Securing submissions, preventing abuse and deduplicating requests rely on Pharelia’s legitimate interest in protecting the service and preventing repeated sends.
Verification and deduplication
Cloudflare Turnstile checks forms for automated submissions. It processes the information needed for this check, including the IP address. Pharelia does not use this verification for audience measurement.
After validation, the form content is sent to Pharelia by email. The Cloudflare D1 database stores only a technical receipt containing a reference, a content signature, a delivery status and timestamps. It stores neither the message nor the contact details entered. This receipt prevents repeated sends of the same request. Receipts older than 24 hours are deleted when the next request is processed.
Cloudflare performance monitoring
Cloudflare Web Analytics automatically adds a RUM (Real User Monitoring) beacon to the site’s pages to monitor loading and usage. It is separate from Turnstile and optional PostHog/Google Analytics measurement: choosing “Reject” as described below does not stop this Cloudflare beacon.
The beacon sends Cloudflare the page address, referring page, a random identifier for the page load and performance measurements: response time, resource loading, rendering, visual stability and responsiveness. According to Cloudflare’s documentation, it neither reads nor sets cookies and does not access browser storage. Its identifier relates to the loaded page, without a persistent visitor identifier.
The connection transmits the IP address to Cloudflare. Cloudflare states that it discards it at the data center receiving the measurement, without retaining it in the RUM service’s databases or logs. Processing may take place in a different country from the visit.
Optional audience measurement
Pharelia uses PostHog and Google Analytics 4 to measure journeys on this site pseudonymously. This measurement remains disabled until you accept it. Adding Google Analytics requires a new choice if your previous consent covered only PostHog. Measurement also remains disabled in private previews, during tests and when the browser sends a Global Privacy Control or Do Not Track signal supported by the site.
After acceptance, events may describe the page viewed, language, device category, visit source, calls to action used, form steps and errors, script errors, LCP, INP and CLS performance measurements, and technical confirmation of a transmitted request. Free-form page URL parameters are removed or filtered. Entered values, contact details, messages, verification tokens, IP addresses and user agents are not included in these events.
PostHog events pass through a route on pharelia.com to its European collection endpoint. A random identifier limited to the session links these events. Google Analytics receives permitted events directly and uses its own browser and session identifiers. Loading and cookies begin only after your consent; the site does not enable advertising features or Google Signals. Transport to Google transmits the technical information needed for the connection, including the IP address, separately from the event parameters chosen by Pharelia.
Session recordings
The site has not started session recordings since 13 September 2026. Accepting cookies authorizes only the audience measurement described above. Previous consent for replays is disabled when opening a page in this version of the site.
Cookies, session storage and withdrawal
Your choice is stored in the __Host-pharelia_analytics_consent cookie for 180 days. The __Host-pharelia_replay_consent cookie stores only the refusal of replays for the same duration. An older __Host-pharelia_replay_sdk cookie may remain until expiry; this version no longer loads the recording module. These preference cookies do not contain a visitor identifier. The anonymous identifier and landing page are kept in the browser’s session storage for the current session. A marker without an identifier synchronizes consent changes between tabs through local storage and is then immediately removed.
After consent, the Google Analytics cookies _ga and _ga_… are configured for 180 days, without automatic extension on each visit. A separate preference cookie stores your Google Analytics consent. The “Privacy preferences” control at the bottom of the page lets you change your choice. Clicking “Reject” withdraws previous consent, stops new PostHog and Google Analytics measurements, and deletes session identifiers managed by Pharelia and Google Analytics cookies managed by this integration. Withdrawal does not automatically delete data already received by providers; you can request deletion at the address below.
Retention periods
D1 technical receipts older than 24 hours are deleted when the next request is processed. Preference cookies are kept for 180 days, browser PostHog identifiers for the current session and Google Analytics cookies for the duration stated above.
Requests and conversations useful for commercial follow-up are kept for at most three years from the prospect’s last contact, unless a legal obligation requires longer retention.
PostHog retains events for up to 84 months and any replays received before recordings were disabled for 30 days. Event retention is not locked at project level. For data processed only by other technical providers, retention depends on the service and its security or operational purpose. You can request the information applicable to your request at contact@pharelia.com.
The Google Analytics property is configured to retain event data for 2 months and user data for 14 months, with the latter period renewed on new activity. These settings do not limit aggregated reports in the same way. See Google Analytics retention rules.
Recipients and providers
Messages are intended for Pharelia. Cloudflare provides hosting, RUM performance monitoring, Turnstile, the receipt database and message transport to the configured address. PostHog and Google Analytics receive the optional data described above when the required consents exist. Sanity publishes articles and client case studies; form responses are not published there.
The site does not send these requests to a CRM or calendar and does not automatically generate an audit. Any change to these recipients or purposes would require this policy to be updated before being put into service.
Processing outside the European Economic Area
PostHog collection uses its European endpoint. Some providers may nevertheless involve entities or subprocessors outside the European Economic Area. You can request available information about the countries concerned and applicable safeguards at contact@pharelia.com.
Your rights
Depending on the processing and its legal basis, you can request access, rectification, erasure, restriction or portability of your data, object to certain processing and withdraw consent at any time. Withdrawal does not affect processing carried out before it.
To exercise a right, email contact@pharelia.com with your request. Pharelia responds within the period provided by the GDPR, normally one month. Proof of identity is requested only if there is reasonable doubt about the requester’s identity.
Complaints
If you believe, after contacting Pharelia, that your rights are not respected, you can submit a complaint to the CNIL (in French).