This notice explains what personal information I collect through this website and in my work, why, and what rights you have. Last updated: October 2026.

Who I am

Fermata is the practice of Christopher Paton, a sole trader (entrepreneur individuel) based in France. I am responsible for your personal information. You can contact me at chris@fermatasafeguarding.com. Full details are in the mentions légales.

What I collect

When you use the enquiry form, I receive what you enter: your name, email address, what your enquiry is about, and your message. On our first call, I also ask for your school or organisation, role, and country and time zone, so that I can arrange sessions. If you email me, I receive your email address and what you write.

For an initial professional introduction, I may also use a school leader’s name, role, school and work email address taken from publicly available school information.

If we go on to work together, I also hold the contact and invoicing details needed to arrange sessions and bill you or your school, and I keep brief notes of each supervision session: the themes we discussed and any actions we agreed, with no names of children, families or colleagues.

Please do not include names or identifying details of children, families or colleagues in the form or in emails. If you do, I will delete them.

Why I use it, and on what basis

• To reply to your enquiry and arrange a first conversation. This is a step you ask me to take before we agree to work together.
• To arrange and deliver supervision, and to invoice for it. This is needed to carry out our agreement.
• To keep invoices and accounting records. French law requires this.
• To introduce Fermata’s supervision service to relevant school leaders, where professional outreach is permitted. I use publicly available work contact details only for that purpose and, where applicable, rely on legitimate interests. You can object to further emails by replying to me.

I do not use information you send me through an enquiry for unsolicited marketing. I do not sell your personal information, and I do not share it with your school or anyone else except as described here.

Supervision sessions

The content of supervision is covered separately, in the written confidentiality and data agreement we sign before we begin. That agreement sets out in more detail what my session notes contain, how they are stored and when they are deleted.

Who else handles it

I use a small number of service providers, who process information only on my behalf:

• Netlify, Inc. (United States), which hosts this website and receives enquiry form submissions
• OVHcloud (France), which hosts my email and through which I send it
• Google (Gmail), which I use only to be alerted when new email arrives

Where information goes outside the European Economic Area, these providers rely on the safeguards the GDPR requires, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. When I reply to you, my email naturally goes to wherever you are based.

How long I keep it

• Enquiries that do not lead to work together: deleted 12 months after our last contact.
• Professional outreach contacts who do not become clients: deleted within 12 months of the last contact. If you object to further emails, I retain only the minimum information needed to respect that request.
• Client contact details: kept while we work together and for up to three years afterwards, so that I can respond to any follow-up.
• Session notes: kept for five years after supervision ends.
• Invoices and accounting records: kept for as long as French tax and accounting law requires.

Cookies

This website uses no cookies, analytics or tracking. Like any web host, Netlify keeps short-term technical logs (such as IP addresses) to run the site securely.

Your rights

You can ask me for a copy of the information I hold about you, and ask me to correct it, delete it, restrict how I use it, or send it to you in a portable form. You can also object to how I use it. Email me and I will reply within one month.

If you are unhappy with how I have handled your information, you can complain to the French data protection authority, the CNIL (www.cnil.fr), or to the data protection authority where you live.