Who we are
D8A Agency ("D8A", "we", "us") is a web-analytics agency based in Paris, France. We're the data controller for any personal data we collect through this website (d8a.agency).
For any privacy-related question or to exercise your rights, contact us at marius@d8a.agency.
What we collect & why
1. Audit request form
When you submit our free audit form, we collect: your name, email address, website URL, company name, industry, traffic range, page count, CMS, analytics tools you use, ad platforms, and any free-text message.
Purpose. To deliver your free audit, contact you about the results, and (if relevant) propose our subscription plans. Legal basis: performance of a service you requested and our legitimate interest in following up on it.
Retention. Up to 24 months after the last contact, unless you ask us to delete it sooner.
2. Booking calls
If you book a call with us, the booking is processed by Cal.com, which collects your name, email, and the time slot. Cal.com's privacy policy applies in addition to ours.
3. Analytics (Google Analytics 4)
If you accept the cookie banner, we use Google Analytics 4 to understand how visitors use this site (pages viewed, source of traffic, broad device info). The data is pseudonymous — we don't know who you are personally from GA. Legal basis: your consent.
You can withdraw your consent at any time by clearing this site's cookies, or by emailing us.
4. Server logs
Our hosting and Cloud Function providers automatically log technical info (IP address, user-agent, timestamps) for security and reliability. These logs are kept for a maximum of 30 days. Legal basis: legitimate interest in operating a secure service.
Cookies
This site uses cookies (and similar local-storage entries) only for the purposes listed below. We don't run advertising pixels, A/B-testing trackers, or session-replay tools.
| Name | Purpose | Duration | Type |
|---|---|---|---|
| d8a_consent_v1 | Stores your cookie banner choice (accept / reject) so we don't ask again. | 1 year | Essential |
| _ga, _ga_* | Google Analytics 4 — distinguishes visitors and sessions. Only set if you accepted. | 2 years | Analytics (consent) |
Until you accept, Google Analytics is loaded in Consent Mode v2 with all storage denied. Pings sent in that state contain no identifiers and are not used to track you.
Who we share data with
We don't sell or rent personal data. We share it only with the processors strictly needed to run the service:
- Google Cloud Platform — hosts our audit-submission backend (servers in Europe).
- Google Analytics — only if you consent.
- Cal.com — handles call bookings if you choose to book one.
- Our email provider — to send you the audit results and follow-ups.
Some of these providers may transfer data outside the EU. When they do, transfers are covered by the EU Standard Contractual Clauses or an equivalent safeguard.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Request deletion ("right to be forgotten")
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw your consent at any time
- Lodge a complaint with the CNIL (the French data protection authority) at cnil.fr
To exercise any of these rights, email us at marius@d8a.agency. We respond within 30 days.
Security
We use HTTPS for all data in transit and rely on Google Cloud's standard infrastructure security for data at rest. Access to client data inside D8A is limited to the founders.
Changes to this policy
If we change how we handle data, we'll update this page and the "last updated" date above. Material changes will be flagged on the homepage.