Privacy notice
This notice explains what personal data Vu Audit collects when you visit this website or order an audit, why, who sees it, and what your rights are. In short: we collect only what is needed to answer you and deliver your audit, we use no analytics or advertising trackers, this site sets no cookies, and we never sell personal data.
1. Who is responsible for your data
The data controller is Allan Vu, sole trader (micro-entrepreneur), trading as Vu Audit. Address: 27 rue de l'Hôtel Dieu, 95100 Argenteuil, France. For any question about your data, write to hello@vuaudit.com.
2. What we collect, why, and on what basis
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Request form: website address, email address, type and size of site, report language, your notes, and whether you can give read-only access | To read your request, confirm scope and price, and reply to you | Steps taken at your request before a contract (Art. 6(1)(b)) |
| Emails we exchange, including any attachments you send | To run your order and answer your questions | Contract (Art. 6(1)(b)); our legitimate interest in answering enquiries (Art. 6(1)(f)) |
| Order and payment data: name, billing details, amount, payment confirmation. We never see your full card number. | To take payment, issue invoices and meet accounting obligations | Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) |
| Read-only access to Google Search Console and Analytics, only if you choose to give it | To include rankings, traffic and real-world speed in your report | Your consent (Art. 6(1)(a)). You can withdraw it at any time by removing the access. |
| Technical data when you visit the site: IP address, browser type, pages requested | To deliver the site securely and prevent abuse. Handled by our hosting provider. | Our legitimate interest in a secure site (Art. 6(1)(f)) |
3. What we do not do
- We do not use analytics, advertising or tracking tools, and this site sets no cookies.
- We do not sell your data or use it for anything other than the purposes above.
- We do not take decisions about you by automated means.
4. Who receives your data
Only the service providers needed to run the service, each for a specific purpose:
- Cloudflare: hosts this website, processes the request form and routes email sent to our address.
- Google (Gmail): the mailbox that receives your request and from which we reply.
- Brevo: sends our outgoing emails.
- Stripe: processes payments and issues payment confirmations.
- AI assistance: we use AI tools (Anthropic's Claude) to help analyse the public pages of your website and draft the report. They receive your website address and, where useful, the notes you wrote, but not your email address or payment details. A person reviews every report before it is sent to you.
5. Transfers outside the European Union
Some of these providers may process data in the United States or other countries. They rely on safeguards such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. How long we keep your data
- Requests that do not become an order: up to 3 years after our last contact, then deleted.
- Order records and invoices: 10 years, as French accounting law generally requires.
- Delivered reports: 12 months so we can answer follow-up questions, or until you ask us to delete them, unless the law requires us to keep them.
- Search Console and Analytics access: used only for your audit. We ask you to remove the access when the audit is delivered.
- Technical logs: kept by the hosting provider for a short period under its own policy.
7. Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, or to receive it in a portable format. You can object to processing based on our legitimate interest, and withdraw consent at any time. Write to hello@vuaudit.com. We answer within one month.
If you think we have not handled your data properly, you can complain to the French data protection authority, the CNIL, or to the authority in your own country.
8. Cookies and other sites
This site sets no cookies and loads no third-party scripts. The links to LinkedIn and to allan-vu.com lead to other websites with their own privacy policies.
9. Security
The site is served over HTTPS and access to your data is limited to the people and providers named above. Email is not perfectly secure, so please never send passwords or card numbers by email.
10. Changes to this notice
If we change this notice, the new version is published here with a new date.