This notice explains what personal information I collect through this website and in my work, why, and what rights you have. Last updated: September 2026.

Who I am

Fermata is the practice of Christopher Paton, a sole trader (entrepreneur individuel) based in France. I am responsible for your personal information. You can contact me at chris@fermatasafeguarding.com. Full details are in the mentions légales.

What I collect

When you use the enquiry form, I receive what you enter: your name, email address, school or organisation, role, country and time zone, the service you are interested in, and your message. If you email me, I receive your email address and what you write.

If we go on to work together, I also hold the contact and invoicing details needed to arrange sessions and bill you or your school.

Please do not include names or identifying details of children, families or colleagues in the form or in emails. If you do, I will delete them.

Why I use it, and on what basis

• To reply to your enquiry and arrange a first conversation. This is a step you ask me to take before we agree to work together.
• To arrange and deliver supervision, and to invoice for it. This is needed to carry out our agreement.
• To keep invoices and accounting records. French law requires this.

I do not use your information for marketing, I do not sell it, and I do not share it with your school or anyone else except as described here.

Supervision sessions

The content of supervision is covered separately, in the written confidentiality and data agreement we sign before we begin. That agreement explains what notes, if any, I keep, how they are stored and when they are deleted.

Who else handles it

I use a small number of service providers, who process information only on my behalf:

• Netlify, Inc. (United States), which hosts this website and receives enquiry form submissions
• OVHcloud (France), which hosts my email
• Google (Gmail), which I use to send and read email

Where information goes outside the European Economic Area, these providers rely on the safeguards the GDPR requires, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. When I reply to you, my email naturally goes to wherever you are based.

How long I keep it

• Enquiries that do not lead to work together: deleted 12 months after our last contact.
• Client contact details: kept while we work together and for up to three years afterwards, so that I can respond to any follow-up.
• Invoices and accounting records: kept for as long as French tax and accounting law requires.

Cookies

This website uses no cookies, analytics or tracking. Like any web host, Netlify keeps short-term technical logs (such as IP addresses) to run the site securely.

Your rights

You can ask me for a copy of the information I hold about you, and ask me to correct it, delete it, restrict how I use it, or send it to you in a portable form. You can also object to how I use it. Email me and I will reply within one month.

If you are unhappy with how I have handled your information, you can complain to the French data protection authority, the CNIL (www.cnil.fr), or to the data protection authority where you live.