PRIVACY POLICY

Last updated: October 11, 2026

Thank you for visiting cecilyamestres.com. This Privacy Policy explains how I, Cecilya Mestres, collect, use, and protect your personal information when you use my website.

As an individual residing in France, I process your personal data in compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller
The data controller responsible for your personal information is:

• Name: Cecilya Mestres

• Contact Email: info[at]cecilyamestres.com

• Location: France

2. Website Hosting and Information Collected
This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including: [1, 2]

• Information about your browser, network, and device

• Web pages you visited prior to coming to this website

• Web pages you view while on this website

• Your IP address [1, 2]

Squarespace needs this data to run this website, and to protect and improve its platform and services. Squarespace analyzes the data in a de-personalized form. [1]

3. Website Analytics
This website collects personal data to power our site analytics. In addition to the details listed above, this information may also include details about your use of this website, such as: [1]

• Clicks

• Internal links

• Pages visited

• Scrolling

• Searches

• Timestamps

We share this information with Google Analytics (subject to your cookie consent) and Squarespace, our website analytics provider, to learn about site traffic and activity. [1]

4. Cookies
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. [1]

• Functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

• Analytics and performance cookies are used on this website only when you acknowledge our cookie banner. We use these cookies to view site traffic, activity, and other data. [1, 2, 3]

5. Fonts
This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site to you, these third parties may receive personal information about you, including: [1, 2]

• Information about your browser, network, or device

• Information about this site and the page you’re viewing on it

• Your IP address [1, 2]

6. Contact Form
When you submit information to this website via a web form, we collect the data requested in the form in order to track and respond to your submissions. We provide this information to Squarespace, our website hosting provider, so they can provide website services to us. The legal basis for this processing is your consent. [1, 2]

7. Third-Party Links and External Payments (BigCartel & Stripe)
Our website contains links to an external shop hosted by BigCartel. When you click on these links to purchase products, you leave cecilyamestres.com. Your payment and transaction data are processed directly by BigCartel and their integrated payment gateways, such as Stripe. [1]

We do not store or collect your payment card details on our website. We encourage you to read the privacy policies of BigCartel and Stripe to understand how they handle your financial information.

8. Data Retention
I will only keep your personal data for as long as necessary to fulfill the purposes for which it was collected, such as replying to your contact form message, or as required by law.

9. Your GDPR Rights
Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of your data.

• Right to Rectification: You can ask to correct inaccurate information.

• Right to Erasure: You can request that I delete your personal data.

• Right to Restrict or Object to Processing: You can ask to limit how your data is used.

• Right to Withdraw Consent: You can withdraw your consent at any time.

To exercise these rights, contact me directly at info[at]cecilyamestres.com . You also have the right to lodge a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés).

10. Updates to This Policy
This Privacy Policy may be updated from time to time to reflect changes in our practices or for legal reasons. Any updates will be posted directly on this page with an updated revision date.