Privacy Policy

1. Who We Are

This website is operated by Samuell Goldfinch (“we”, “us”, “our”), a Paris-based creative direction, film production, and event curation studio. Our brands include Blaze Production and Kolasi Agency.

For any privacy-related questions, contact us at: contact@samuellgoldfinch.com

The data controller’s full legal identity (registered name, address, and registration number) is set out in our Legal Notice (Mentions légales).

2. What Data We Collect

We collect data in the following ways:

• Contact & quote forms: Name, email, phone number, event details, budget range, and any message you provide. This data is stored securely in our CMS and used solely to respond to your inquiry.
• Venue inquiry form: Venue name, address, contact details, goals, budget range, and decision-maker role. Used to assess partnership fit and prepare proposals.
• Analytics & advertising (with consent): Page views, session duration, referral source, device type, and conversion events via Google Analytics 4 and Meta Pixel. These cookies process online identifiers, including your IP address and device data, which are personal data under the GDPR.
• Cookies: We use essential cookies for site functionality and, with your consent, analytics cookies from Google and Meta for performance measurement.

3. How We Use Your Data

• To respond to your inquiries and provide requested services
• To send confirmation emails after form submissions
• To improve our website performance and user experience (anonymized analytics)
• To measure the effectiveness of our marketing campaigns (with consent)

We never sell, rent, or share your personal data with third parties for their marketing purposes.

4. Legal Basis for Processing (GDPR)

Under the EU General Data Protection Regulation (GDPR), we process your data based on:

• Consent (Art. 6(1)(a)): For analytics and advertising cookies (you can withdraw at any time)
• Pre-contractual measures & contractual necessity (Art. 6(1)(b)): To respond to the inquiry you submit and to prepare or fulfil a service agreement at your request
• Legitimate interest (Art. 6(1)(f)): For the security and proper operation of our website; you may object at any time

5. Third-Party Services

We use the following third-party services that may process data:

• Google Analytics 4 — Website analytics (anonymized IP, no PII). Google Privacy Policy
• Meta Pixel — Conversion tracking for advertising. Meta Privacy Policy
• Calendly — Meeting scheduling. Calendly Privacy Policy
• Resend — Transactional email delivery. Resend Privacy Policy
• Cloudinary — Image hosting and optimization. Cloudinary Privacy Policy
• Mux — Video streaming. Mux Privacy Policy
• MongoDB Atlas — Secure database hosting for form submissions. MongoDB Privacy Policy
• Twilio — WhatsApp/SMS notifications. Twilio Privacy Policy
• Vercel — Website hosting and delivery. Vercel Privacy Policy

International Data Transfers

Several of our processors are established in, or transfer personal data to, the United States or other countries outside the European Economic Area (Google, Meta, Resend, Twilio, Cloudinary, Mux, Vercel). Where such transfers occur, we rely on appropriate safeguards under GDPR Chapter V — the EU Standard Contractual Clauses and/or the provider’s EU–U.S. Data Privacy Framework certification. You can request details of these safeguards at the contact address above.

6. Cookies

Our website uses the following types of cookies:

• Essential: Required for the website to function (theme preference, session). These cannot be disabled.
• Analytics: Google Analytics cookies (_ga, _ga_*) to understand how visitors use our site. Loaded only with your consent.
• Marketing: Meta Pixel cookies (_fbp) for measuring ad effectiveness. Loaded only with your consent.

You can manage your cookie preferences at any time using the cookie settings option in the bottom-left corner of every page, or by clearing your browser cookies.

7. Data Retention

• Form submissions: Retained for 24 months, then archived or deleted
• Analytics data: Retained per Google/Meta default retention policies (14 months for GA4)
• Email communications: Retained for the duration of the business relationship

8. Your Rights (GDPR)

As an EU resident, you have the right to:

• Access — Request a copy of all personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your personal data (“right to be forgotten”)
• Restriction — Request that we limit processing of your data
• Portability — Request your data in a structured, machine-readable format
• Objection — Object to processing based on legitimate interest
• Withdraw consent — Withdraw consent for analytics/marketing at any time

To exercise any of these rights, email us at contact@samuellgoldfinch.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication for our CMS, and restricted access to personal data on a need-to-know basis.

10. Changes to This Policy

We may update this privacy policy from time to time. The “last updated” date at the top of this page indicates when the policy was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.