In short
No account and no cookie. Audience measurement without cookies, as aggregated statistics. No advertising, no advertising tracker, no data sold. The listings in the United Kingdom section present companies, never individuals.
Data controller
Grégory Payotte, publisher of Payotte (natural person), Mirabel (Quebec), Canada. Form: payotte.com/contact. Email: gregory@payotte.com.
What we process, why and on what basis
| Processing | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Website hosting | IP address, browser, page requested, date and time (server logs) | Serving the pages and keeping the site secure; legitimate interests (UK GDPR Art. 6(1)(f)) | At most 6 months |
| Audience measurement (Cloudflare Web Analytics) | Page viewed, referring page, type of browser and device, country; no cookie, no identifier stored on your device | Knowing which pages are read, in aggregated figures; legitimate interests (UK GDPR Art. 6(1)(f)) | Aggregated statistics, with no IP address or identifier |
| Counting visits coming from our emails | Only if the link carries an src parameter: that campaign code, and your IP address | Counting one visit per person per day for each mailing; legitimate interests (UK GDPR Art. 6(1)(f)) | IP address automatically erased after 2 days; afterwards, only totals per mailing, per hour and per day |
| Messages you send us (form or email) | Your address, your name if given, the content of the message | Replying to you and handling your request; legitimate interests (UK GDPR Art. 6(1)(f)), or legal obligation (UK GDPR Art. 6(1)(c)) for a request to exercise your rights | 3 years after the last exchange |
The listings link to third-party sites (firms, registers) whose practices are not covered by this policy.
Cookies and trackers
The site sets no cookie and uses no advertising tracker. Audience measurement works without cookies or any identifier stored on your device; this is why no consent banner is shown.
Recipients and processors
GoDaddy (site hosting), Cloudflare (audience measurement, server and storage for the visit count), Resend (sending the contact form messages) and Google (the Gmail inbox that receives them). No data is sold, rented or handed over.
Transfers outside the United Kingdom
Payotte is operated from Canada. GoDaddy and Cloudflare process data in the United States. Transfers to Canada rely on Commission Decision 2002/2/EC, which the Data Protection Act 2018 (Schedule 21, paragraph 5) keeps in force for the United Kingdom; transfers to the United States rely on the Data Protection (Adequacy) (United States of America) Regulations 2023 (the UK–US data bridge).
Your rights
Under the UK GDPR and the Data Protection Act 2018, you may ask for access to your data, its rectification, its erasure, the restriction of processing, and object to processing based on legitimate interests, by writing to gregory@payotte.com. We reply within one month at most. You may also lodge a complaint with the Information Commissioner's Office (ICO), the UK data protection authority (helpline 0303 123 1113; ico.org.uk/make-a-complaint).