Privacy Policy
Last updated: March  29,  2026

At Cavern Marketing, we place the highest importance on protecting your privacy and personal data. This privacy policy clearly and transparently explains how we collect, use, share, and protect your personal information, in compliance with applicable laws, including the GDPR (European Union) and, for users residing in the United States, the CCPA/CPRA (California).


1. Data Controller

Cavern Marketing
Legal form: EURL
SIREN: 940 815 855
SIRET: 940 815 855 00017
VAT number: FR68 940 815 855
RCS: Paris
Registered office: 50 avenue des Champs-Élysées, 75008 Paris
Email: contact@cavernmarketing.com


2. Data Collected

We only collect strictly necessary data, including:

a) Data provided voluntarily via forms:

  • First name, last name
  • Email address
  • Phone number (optional)
  • Message content

b) Technical and browsing data:

  • IP address
  • Browser type
  • Pages visited, session duration
  • Cookies (see dedicated section)

c) Marketing data (if subscribed to the newsletter):

  • Email address

3. Purpose of Processing

Your data is used to:

  • Respond to your requests via the contact form
  • Send you information or commercial offers if you have consented
  • Improve website performance and user experience
  • Ensure site security and prevent fraud

4. Legal Basis (GDPR)

  • Consent: for newsletters or messages sent via forms
  • Legitimate interest: for performance analysis and site security
  • Legal obligation: for accounting, tax, or legal requirements

5. Data Retention

  • Contact data: 3 years after the last interaction
  • Newsletter data: until you unsubscribe
  • Analytics cookies: up to 13 months

6. Data Recipients

Your data is never sold.
It may be shared with technical service providers (hosting, email solutions, CRM) to ensure proper website operation and processing of your requests.


7. Data Transfers Outside the EU

Some providers may transfer data outside the European Union, particularly to the United States (e.g., Google, Meta, Mailchimp).
In such cases, transfers are governed by standard contractual clauses approved by the European Commission, ensuring an equivalent level of protection.


8. Data Security

We implement appropriate technical and organizational measures to protect your data against loss, misuse, unauthorized access, or disclosure.


9. Your Rights (GDPR)

You may exercise the following rights at any time:

  • Right of access, rectification, and deletion
  • Right to object and restrict processing
  • Right to data portability
  • Right to withdraw consent

To exercise your rights, contact us at contact@cavernmarketing.com or by post.
You may also file a complaint with the CNIL (www.cnil.fr).


10. Cookies

Our website uses cookies to:

  • Measure audience (e.g., Google Analytics)
  • Improve user experience

You can accept or refuse cookies via the cookie banner or your browser settings.
For more information, see our Cookie Policy.


11. Policy Updates

We may update this policy at any time to reflect legal or technical changes.
The applicable version is the one displayed on this page, with its last update date.


12. Rights of U.S. Residents (CCPA/CPRA – California)

If you reside in California or in a U.S. state with similar legislation, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to know what personal data is collected, used, and shared
  • Right to access your data
  • Right to request deletion of your data
  • Right to request correction of inaccurate data
  • Right to opt out of the sale or sharing of your personal data
  • Right to non-discrimination for exercising your rights

Cavern Marketing does not sell your personal data.
To exercise your rights, contact us at contact@cavernmarketing.com.