Privacy Policy
Last updated: 22 August 2026
This Privacy Policy explains what personal information I collect through CarmenJean, why I collect it, how it is used and stored, who may process it on my behalf, and the rights you have over your information.
I aim to collect only the personal information I genuinely need to provide my services and run CarmenJean.
Who is responsible for your personal information?
CarmenJean is operated by:
Carmen Maidment
Individual entrepreneur (entrepreneur individuel)
Saint-Méard-de-Gurçon, France
SIRET: 832 933 304 00029
Email: hello@carmenjean.com
I am the data controller for personal information processed for CarmenJean.
What personal information do I collect?
The information I collect depends on how you interact with CarmenJean.
When you contact me
If you contact me by email or through a website contact method, I may receive information such as your name, email address and anything you choose to include in your message.
I use this information to read and respond to your enquiry and, where appropriate, to take steps requested by you before entering into a contract.
When you buy a digital product
Purchases made through the CarmenJean website are handled using WooCommerce and Stripe.
Information associated with an order may include your name, email address, the product purchased, order details, payment status and technical information associated with the transaction.
CarmenJean does not receive or store your full payment-card details. Payment information is processed by Stripe.
You can purchase digital products as a guest. You do not need to create a CarmenJean website account to place an order.
I process order information because it is necessary to fulfil your purchase and because some transaction records may need to be retained to meet legal, tax or accounting obligations.
When you book a call or one-to-one session
Bookings are managed through Calendly.
Depending on the type of appointment, information collected may include your name, email address, country, information you choose to provide about the purpose of the call, and booking details such as the date and time.
Paid bookings may also include information necessary to confirm that payment has been made through Stripe.
I use this information to arrange and provide the appointment or service you requested.
Before a one-to-one session
If you book a one-to-one ChatGPT session, I may ask you to complete a pre-session questionnaire.
This may include information about your goals for the session, your experience with ChatGPT, your business, the equipment and ChatGPT subscription you will be using, your time zone, accessibility requirements and your preferences regarding recording.
I collect this information so that I can prepare for and provide the service you have booked.
Please do not include sensitive or confidential personal information unless it is genuinely necessary for the service you are asking me to provide.
During and after one-to-one work
I may create notes necessary to prepare for, provide and follow up on your session.
These may include your contact details, session notes, links or resources relevant to your work and correspondence relating to the service.
Where you have chosen to allow a Zoom recording of your session, the recording is made available to you for a limited period as explained when consent is requested.
If you do not consent to recording, your session can still take place.
Where separate permission is requested for me to record my own camera footage for CarmenJean marketing or social-media content, this is optional and is treated separately from any client recording. Your image or voice will not be included in that footage.
When you join my email list
CarmenJean uses MailerLite to manage its email list.
When you subscribe, I collect your email address and any other information you voluntarily provide through the relevant subscription form.
CarmenJean uses double opt-in. This means you must confirm your subscription before being added to the mailing list.
The legal basis for sending marketing emails is your consent.
You can unsubscribe at any time using the unsubscribe link included in marketing emails.
When you browse the website
The website uses limited technical information and cookies necessary for functions such as remembering your cookie choices, operating the online shop, maintaining your shopping basket and supporting secure payment processing.
CarmenJean does not currently use Google Analytics or advertising cookies.
More information about the cookies currently used is available in the CarmenJean Cookie Policy.
Why do I use your personal information?
Depending on your interaction with CarmenJean, personal information may be processed:
To perform a contract or take steps before entering into a contract, for example when you buy a product, book a paid service, arrange a discovery call or provide information needed for a session.
With your consent, for example when you join the email list or choose to allow a recording.
To comply with a legal obligation, for example where transaction information must be retained for accounting, tax or other legal purposes.
For legitimate interests, where necessary for the reasonable administration, security and protection of CarmenJean, provided those interests do not override your rights and freedoms.
I do not use personal information collected through CarmenJean for automated decision-making or profiling that produces legal or similarly significant effects.
Who has access to your information?
CarmenJean is a small business and I do not employ staff who routinely access customer or client information.
I do, however, use specialist service providers to operate the business.
These include:
WooCommerce and WordPress, which provide website and online-shop functionality.
Stripe, which processes payments and provides payment-security and fraud-prevention services.
Calendly, which manages appointment bookings.
Google, whose services are used for email and, where applicable, forms, documents, calendar functions and secure client file storage.
Zoom, which is used for online sessions and, where you have agreed to it, session recordings.
MailerLite, which manages email subscriptions and marketing emails.
CookieYes, which manages the website’s cookie-consent controls.
Relevant website hosting and technical service providers may also process limited information where this is necessary to host, maintain or secure the website.
These providers process information only as required to provide their respective services and are subject to their own contractual and data-protection obligations.
I may also disclose personal information if required to do so by law, a court or a competent public authority.
I do not sell your personal information.
International transfers
Some of the service providers used by CarmenJean operate internationally. This means that personal information may sometimes be processed outside the European Economic Area (EEA).
Where this happens, an appropriate legal safeguard must be used. Depending on the provider and destination, this may include an adequacy decision, the EU-US Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses.
MailerLite states that subscriber data belonging to customers in the EEA, UK and Switzerland is stored within the European Union.
How long do I keep personal information?
I do not keep personal information indefinitely.
Different information has different retention periods depending on why it is held.
Pre-session questionnaires: normally retained for 60 days after the session because the information is primarily needed for preparation and immediate follow-up.
Zoom session recordings: where you have consented to a recording, it is normally made available for 30 days and then deleted.
Client records, session notes, relevant correspondence and feedback: normally retained for 12 months from the last meaningful contact, unless there is a legal reason to retain particular information for longer.
Website orders that are pending, failed or cancelled: normally retained in WooCommerce for 30 days.
Completed and refunded website orders: retained for 10 years where required for applicable business, accounting or legal record-keeping purposes.
Locally retained Stripe-related website data: configured to be retained for 30 days where it is no longer required for processing. Stripe separately retains information within its own systems in accordance with its legal obligations and policies.
Email marketing information: retained while you remain subscribed or until it is otherwise no longer necessary. You can unsubscribe at any time.
Other correspondence and enquiries that do not result in an ongoing client relationship are normally retained for no longer than 12 months, unless there is a legitimate or legal reason to keep them for longer.
Where information must be retained to comply with a legal obligation or to establish, exercise or defend a legal claim, it may be retained for the period required for that purpose.
How do I protect your information?
I take reasonable technical and organisational measures to protect the personal information under my control.
These include limiting access to client information, using password-protected services, using two-factor authentication where appropriate, separating client information from general business files where appropriate, and periodically deleting information that is no longer required.
No online system can be guaranteed to be completely secure, but I aim to minimise both the amount of personal information collected and the length of time it is retained.
Your rights
Under data-protection law, you may have the right to:
access the personal information held about you;
ask for inaccurate or incomplete information to be corrected;
ask for your personal information to be deleted where the law allows;
ask for processing to be restricted in certain circumstances;
object to certain types of processing;
receive certain information you have provided in a portable format where the right to data portability applies; and
withdraw your consent at any time where processing is based on consent.
Withdrawing consent does not affect processing that was lawful before consent was withdrawn, and it does not require information to be deleted where there is another lawful reason or legal obligation to retain it.
To exercise your rights, contact: hello@carmenjean.com
I will normally respond within one month of receiving your request.
I will not routinely ask you to send a copy of your identity document. If I have reasonable doubts about your identity, I may ask for additional information necessary to confirm that the request genuinely relates to you.
Complaints
If you believe your personal information has not been handled correctly, please contact me first if you would like me to investigate the matter.
You also have the right to make a complaint to the French data-protection authority:
Commission Nationale de l’Informatique et des Libertés (CNIL) CNIL website
You do not have to contact me before exercising your right to complain to the CNIL.
Cookies
Information about cookies and similar technologies used by CarmenJean is provided separately in the CarmenJean Cookie Policy.
You can also change your cookie choices at any time using the blue cookie settings button in the bottom-right corner of the website.
Changes to this Privacy Policy
I may update this Privacy Policy when CarmenJean’s services, data-processing practices or legal obligations change.
The date at the top of this page shows when the policy was last updated.