Privacy Policy
Last updated: March 2026
Zero Limit (SASU), registered in France ("we", "us", "our"), is committed to protecting your privacy. This policy explains how we collect, use, and safeguard personal data when you visit zerolimit.es (the "Website").
1. Data Controller
The data controller responsible for your personal data is:
Zero Limit (SASU)
Paris, France
Contact: zerolimit.es/contact
2. Data We Collect
Contact Form
When you submit our contact form, we collect:
- Your name
- Email address
- Company name (optional)
- Your message
This data is submitted through Formspree, a third-party form processing service, and forwarded to us via email.
Analytics
We use Umami, a privacy-focused, cookieless analytics tool self-hosted on our own infrastructure at analytics.zerolimit.es. Umami collects:
- Page views and referrer URLs
- Browser type and operating system
- Device type and screen size
- Country of origin (derived from IP, which is not stored)
Umami does not use cookies, does not track users across websites, and does not collect personally identifiable information. All data is aggregated and anonymous.
Fonts
The Website loads typefaces from Google Fonts. When your browser requests these files, Google may receive your IP address. Google's privacy policy applies to this data. No cookies are set by Google Fonts.
3. How We Use Your Data
- Contact form submissions — to respond to your enquiry and, where relevant, to discuss potential engagements.
- Analytics data — to understand how visitors use the Website so we can improve its content and structure.
4. Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your data on the following bases:
- Consent (Article 6(1)(a)) — when you voluntarily submit the contact form, you consent to us processing your data to respond to your enquiry.
- Legitimate interest (Article 6(1)(f)) — for anonymous, cookieless analytics to improve the Website. This processing has minimal impact on your privacy as no personal data is collected or stored.
5. Third-Party Processors
We share personal data only with the following processors, solely for the purposes described above:
- Formspree, Inc. (United States) — processes contact form submissions on our behalf. Formspree Privacy Policy
- Scaleway (France) — hosts the Website and Umami analytics on EU-based infrastructure.
- Google LLC (United States) — serves font files. Google Privacy Policy
6. International Data Transfers
When you submit the contact form, your data is processed by Formspree in the United States. When the Website loads fonts, requests are made to Google servers which may be located outside the EU.
These transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses as appropriate. Our analytics data and website hosting remain entirely within the European Union (Scaleway, France).
7. Data Retention
- Contact form data — retained for the duration of our business relationship or enquiry, and deleted upon request or when no longer needed.
- Analytics data — aggregated and anonymous; retained indefinitely as it cannot be linked to any individual.
8. Cookies
The Website does not use tracking cookies. Our analytics solution (Umami) is fully cookieless. No consent banner is required.
The Website may use essential, strictly necessary cookies for basic functionality (e.g., theme preference stored in your browser's localStorage, which is not a cookie and is never transmitted to our servers).
9. Your Rights
Under the GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your personal data
- Restriction — request that we limit how we use your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us.
You also have the right to lodge a complaint with the French data protection authority:
CNIL (Commission Nationale de l'Informatique et des Libertés)
www.cnil.fr
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
If you have any questions about this Privacy Policy or how we handle your data, please get in touch.