Privacy Policy

Last updated: June 18, 2026

Grand Bureau (“we,” “us,” or “our”) respects your privacy and is committed to being transparent about how we handle information in connection with your visit to our website (the “Site”). This Privacy Policy explains what limited information is collected when you browse the Site, why we collect it, and what rights you have regarding that information.

This Site does not feature any forms, account creation, newsletter sign-ups, or checkout functionality that would involve you actively submitting personal information to us. The only data processing that occurs is through the use of Google Analytics, a web analytics service, which is described in detail below.

Data Controller: Grand Bureau
Registered address: 6 rue Beaubourg, 75004 Paris, France
Company registration (SIRET): 948 814 546 00024
Contact email: bonjour@grandbureau.com
We have not appointed a Data Protection Officer (DPO), as this is not a legal requirement for our organization. Any questions regarding this Privacy Policy or your personal data should be directed to the contact email above.

We do not directly collect any personal information from you through forms, accounts, or other interactive features, as the Site does not offer any. However, when you visit the Site, Google Analytics automatically collects certain information about your browsing activity on our behalf. This may include:
Your IP address (which may be used to derive an approximate geographic location)
Device and browser information (type, operating system, screen resolution, language settings)
Pages visited, time spent on the Site, and navigation paths
Referring website or source (how you arrived at the Site)
Approximate session and click-level interaction data
Cookie identifiers and similar technologies used to distinguish unique visitors
We do not knowingly collect any sensitive categories of personal data (such as health information, racial or ethnic origin, religious beliefs, or financial account details) through the Site.

The information collected via Google Analytics is used solely for the following purposes:
To understand how visitors use the Site (audience measurement)
To analyze traffic trends and improve the Site’s content, structure, and performance
To identify technical issues affecting the user experience
We do not use this data for targeted advertising, profiling with legal effect, or automated decision-making, and we do not sell personal information to third parties.

Google Analytics uses cookies and similar technologies (such as local storage identifiers) to distinguish you from other visitors to the Site. These cookies collect information in an anonymous or pseudonymous form.
In accordance with applicable law (including the EU ePrivacy Directive and the French Data Protection Authority’s (CNIL) guidance), we request your consent via a cookie banner before any non-essential cookie, including Google Analytics cookies, is set on your device. You can withdraw your consent at any time through the cookie preference settings available on the Site.
If you do not consent, Google Analytics cookies will not be activated, and your browsing data will not be processed for analytics purposes.

For visitors located in the European Union / European Economic Area, our legal basis for processing your data through Google Analytics is your consent (Article 6(1)(a) of the General Data Protection Regulation), obtained via the cookie banner referenced above.

The information collected via Google Analytics is shared with Google LLC, which acts as a data processor on our behalf. Google may transfer this data to servers located outside the European Economic Area, including in the United States.
Where such transfers occur, Google relies on appropriate safeguards recognized under GDPR, including Standard Contractual Clauses and, where applicable, certification under the EU-U.S. Data Privacy Framework. You can find more information about Google’s data protection practices at:
https://policies.google.com/privacy
We do not share, rent, or sell any data collected via the Site with any other third party.

Google Analytics retains user-level and event-level data for a configurable period, which we have set in accordance with data minimization principles. By default, this data is retained for no longer than 14 months from your last interaction with the Site, after which it is automatically deleted by Google.
Aggregated, anonymized reporting data (which cannot be used to identify you) may be retained for longer periods for historical trend analysis.

If you are located in the European Union or European Economic Area, you have the following rights under the GDPR with respect to your personal data:

• Right of access — to obtain confirmation of whether we process data relating to you, and to receive a copy of it
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data, where applicable
• Right to restrict processing — to limit how your data is used in certain circumstances
• Right to object — to object to processing, including withdrawing consent at any time
• Right to data portability — to receive your data in a structured, machine-readable format, where applicable
• Right to lodge a complaint — with the French data protection authority (CNIL) or your local supervisory authority

To exercise any of these rights, please contact us at bonjour@grandbureau.com. Given the limited nature of the data we process (anonymized/pseudonymized analytics data), we may not always be able to identify a specific individual within Google Analytics data, which can limit our ability to fulfill certain requests (e.g., access or erasure of a specific visitor’s session data).

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), with respect to personal information collected through the Site. These rights include:

• The right to know what categories of personal information we have collected about you and the purposes for collection
• The right to request deletion of personal information we have collected from you, subject to certain exceptions
  The right to correct inaccurate personal information
• The right to opt out of the “sale” or “sharing” of personal information, to the extent applicable
• The right to non-discrimination for exercising any of your CCPA rights

We do not sell personal information, and the only information processed through the Site relates to anonymized or pseudonymized browsing analytics via Google Analytics. We do not knowingly collect or process personal information from California residents under the age of 16 in a manner that would require opt-in consent for sale or sharing.
California residents may submit a privacy request by contacting bonjour@grandbureau.com. We will respond in accordance with the timeframes required under the CCPA/CPRA.

The Site is not directed at children, and we do not knowingly collect personal information from individuals under the age of 16. If you believe a child has provided information to us through the Site, please contact us so we can take appropriate action.

While we do not directly store personal information ourselves, we take reasonable measures to ensure that the Site and any third-party tools integrated with it (such as Google Analytics) are configured securely and in accordance with current best practices.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. The “Last updated” date at the top of this page indicates when this Privacy Policy was last revised. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or how your information is handled, please contact us:
Grand Bureau
6 rue Beaubourg, 75004 Paris, France
Email: bonjour@grandbureau.com