Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains how Compass Immigration collects and uses your personal data when you visit compass-immigration.com, contact me through the website, or subscribe to my newsletter. I take your privacy seriously and process your data in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

1. Who is responsible for your data

The data controller is:

Charlotte Kieffer, EI, trading as Compass Immigration
c/o QG Business, 26 rue des Rigoles, 75020 Paris, France
SIREN: 929 652 196
Email: admin@compass-immigration.com

I am a sole practitioner and have not appointed a Data Protection Officer, as this is not required for my activity. For any question about your data, please contact me directly at the email address above.

2. What data I collect and why

2.1 When you visit the website

When you browse the site, my website host automatically processes technical data such as your IP address, browser type, device information, and the date and time of your visit. This is necessary to display the website, keep it secure, and prevent abuse.

Legal basis: my legitimate interest in operating a secure and functional website (Article 6 (1) (f) GDPR).

2.2 When you contact me through the contact form

The contact form asks for your email address (required), your name (optional), and your message. I use this information only to read and answer your inquiry and, if you wish, to discuss how I can support you.

Your message is delivered to my professional email inbox (Microsoft 365). A copy is also stored in my website provider's dashboard (GoDaddy).

Legal basis: steps taken at your request before a possible engagement (Article 6 (1) (b) GDPR), and my legitimate interest in answering inquiries (Article 6 (1) (f) GDPR).

Please do not send sensitive information through the contact form. A general description of your situation is all I need at this stage. If we decide to work together, I will explain how to share documents securely.

If your inquiry leads to an engagement, your data will then be processed under the terms of our client agreement.

2.3 Spam protection (Google reCAPTCHA)

The contact form is protected by Google reCAPTCHA, which checks whether a submission comes from a human or an automated program. To do this, reCAPTCHA collects data such as your IP address and information about your browser and your interaction with the page, and sends it to Google.

Legal basis: my legitimate interest in protecting the website and my inbox from spam and abuse (Article 6 (1) (f) GDPR).
More information: Google Privacy Policy and Terms of Service.

2.4 When you subscribe to The Compass Dispatch

You can subscribe to my newsletter, The Compass Dispatch, through the sign-up form on this website or through my newsletter page. Subscriptions are managed by beehiiv, the platform I use to send the newsletter. When you subscribe, beehiiv collects your email address and may record information about how you interact with the newsletter, such as whether emails are opened or links are clicked.

I will only send you the newsletter if you sign up yourself. You can unsubscribe at any time using the link at the bottom of every email.

Legal basis: your consent (Article 6 (1) (a) GDPR).
More information: beehiiv Privacy Policy.

2.5 Cookies and website statistics

This website uses cookies. Cookies are small files stored on your device.

Strictly necessary cookies are required for the website to work and to remember your cookie choice. They do not require your consent.

Analytics cookies help me understand how visitors use the site, for example which pages are visited and how often. They are provided through my website builder's built-in statistics, which rely on GoDaddy and Google Analytics. These cookies are only placed if you click "Accept" on the cookie banner.

If you click "Decline," no analytics cookies are placed. You can change your mind at any time by clearing your browser's cookies for this site, which will display the banner again.

Legal basis: your consent (Article 6 (1) (a) GDPR and Article 82 of the French Data Protection Act).
Duration: analytics cookies are kept for a maximum of 13 months.

2.6 Links to other websites

This website contains links to my LinkedIn profile and YouTube channel. These are simple links: no data is shared with LinkedIn or YouTube unless you click on them. Once you visit those platforms, their own privacy policies apply.

3. Who receives your data

I do not sell, rent, or share your personal data for marketing purposes. Your data is only accessible to me and to the following service providers, who process it on my behalf and under contract:

GoDaddy (United States): website hosting, contact form, and website statistics.
Microsoft (Microsoft 365) (EU and/or United States): professional email.
Google (United States): reCAPTCHA spam protection, and Google Analytics only if you accept analytics cookies.
beehiiv (United States): newsletter sign-up and delivery.

I may also disclose data if required by law, for example at the request of a court or public authority.

4. Transfers outside the European Union

Some of the providers listed above are based in the United States or may process data there. When this happens, your data is protected by appropriate safeguards under the GDPR. These are either the EU–US Data Privacy Framework, where the provider is certified under it, or the Standard Contractual Clauses adopted by the European Commission. You can contact me to obtain more information about these safeguards.

5. How long I keep your data

Inquiries that do not lead to an engagement: 3 years from our last contact.
Client files: for the duration of the engagement, plus 5 years (the legal limitation period).
Invoices and accounting records: 10 years, as required by French law.
Newsletter subscription: until you unsubscribe.
Analytics cookies: a maximum of 13 months.

When these periods end, the data is deleted or anonymized.

6. Your rights

Under the GDPR, you have the right to:

access the personal data I hold about you
correct inaccurate or incomplete data
delete your data
restrict how your data is processed
object to processing based on my legitimate interest
receive your data in a portable format
withdraw your consent at any time, without affecting processing carried out before your withdrawal
give instructions on what should happen to your data after your death (a right specific to French law)

To exercise any of these rights, email admin@compass-immigration.com. I will respond within one month. I may ask you to confirm your identity if I have reasonable doubts about it.

If you believe your rights have not been respected, you can file a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr

7. Security

I take appropriate technical and organizational measures to protect your data against loss, misuse, and unauthorized access. These include using reputable providers, encrypted connections (HTTPS), and restricted access to my accounts. No method of transmission over the internet is completely secure, but I work to protect your data as best I can.

8. Children

This website is intended for adults. I do not knowingly collect personal data from children under 15 through this website.

9. Automated decision-making

I do not use your data for automated decision-making or profiling.

10. Changes to this policy

I may update this Privacy Policy from time to time, for example when I change tools or when the law evolves. The date at the top shows when it was last updated.