Privacy Policy

This website is operated by PAPAIA COMMUNICATIONS Sàrl-S ("papaia", "we", "us"), 63, Route du Vin, 6841 Machtum, Luxembourg (TVA LU35435647, RCS/LBR B282906), represented by Cynthia Cocard.

We are the data controller for the personal data described in this policy. For any question, contact us at hello@papaia-marketing.com.

Getting in touch by email

This site has no contact form — the "Get in touch" buttons simply open your own email client addressed to hello@papaia-marketing.com. Nothing is collected or transmitted through this website itself when you click one. Once you choose to send that email, whatever you include (e.g. your name, email address and message) is processed by us like any other email correspondence, solely to respond to you and, if it leads somewhere, to discuss and deliver a potential project.

Legal basis: your consent, given by sending us the email (Art. 6(1)(a) GDPR), and where relevant, steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR).

Hosting & server logs

Like any website, ours generates basic technical logs when you visit it — e.g. IP address, browser type, and timestamps — recorded automatically by our hosting provider, Vercel Inc., to run and secure the site.

Legal basis: our legitimate interest in keeping the site secure and operational (Art. 6(1)(f) GDPR).

Cookies & analytics

This site does not currently use analytics, advertising or tracking cookies. It only sets cookies that are strictly necessary for the site to function, if any. If that changes — for example if we add analytics in the future — we will update this policy and ask for your consent first, where required.

We don't sell or trade your personal data. It's only shared with service providers who process it on our behalf, under contract, and solely to provide the site or respond to you:

• Vercel Inc. — hosting and infrastructure for this website.
• Our email provider — to send and receive email at hello@papaia-marketing.com, including any message you send us.

Some of these providers may process data outside the EU/EEA (e.g. in the United States). Where that's the case, we rely on appropriate safeguards recognised under GDPR, such as the European Commission's Standard Contractual Clauses.

Emails you send us are kept only for as long as needed to handle your enquiry and any resulting project discussion, and are deleted or anonymised after — at most 24 months of inactivity on the enquiry. Technical server logs are retained by our hosting provider for a short period for security purposes, per their own retention schedule.

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data;
• restrict or object to certain processing;
• request a portable copy of your data; and
• withdraw consent at any time, where processing is based on consent (this doesn't affect processing carried out before the withdrawal).

To exercise any of these rights, email us at hello@papaia-marketing.com. You also have the right to lodge a complaint with Luxembourg's data protection authority, the Commission nationale pour la protection des données (CNPD).

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse — including relying on infrastructure providers (like Vercel) that maintain their own industry-standard security practices.

We may update this policy from time to time, for example as the site evolves or the law changes. The version published here is always the current one.