Privacy Policy

1. Data Controller

HI AI Design, trading as HI AI Works ("we", "us", "our") is the data controller for personal data collected through this website and our services.

• Entity: HI AI Design (micro-enterprise), trading as HI AI Works
• Location: Paris, France: 13th Arrondissement
• Contact: contact@hiaiworks.com

2. Data We Collect

We collect the minimum data necessary to provide our services:

3. How We Collect Data

Personal data is collected only when you voluntarily submit it through:

• Contact forms on our website
• Early access or interest signup forms
• Order forms for AI Brewery products
• Direct email correspondence

We do not use tracking pixels, analytics platforms (Google Analytics, etc.), or third-party advertising scripts.

4. Cookies

We use only strictly necessary cookies to store your cookie consent preferences. We do not use analytics, advertising, or third-party tracking cookies.

For full details, see our Cookie Policy.

5. Data Processing & Third Parties

The website is hosted on Cloudflare. Form submissions are sent by Cloudflare's email service to our business inbox, which is hosted on Google Workspace. This involves:

• Cloudflare, Inc.: Data processor for website hosting and for delivering form submissions by email (Cloudflare Workers, Cloudflare Email Service). Cloudflare's privacy policy applies to their processing.
• Google LLC: Data processor for our business email inbox (Google Workspace). Google's privacy policy applies to their processing.

We do not sell, rent, or share your personal data with any other third parties. We do not use your data for profiling or automated decision-making.

6. Data Retention

We retain personal data only for as long as necessary:

• Contact form data: Retained in our email inbox for the duration of the business relationship or inquiry, then deleted within 12 months of last contact.
• Order data: Retained for the statutory period required by French commercial law (10 years for accounting records).
• Cookie consent: Stored locally in your browser for 12 months.

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access: Request a copy of data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Restrict processing in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at contact@hiaiworks.com. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• HTTPS encryption on all pages
• No unnecessary data collection (data minimisation)
• Limited access to personal data on a need-to-know basis

9. International Transfers

Form submission data may be processed by Cloudflare, Inc. and Google LLC on servers located outside the European Economic Area (EEA). Both companies participate in the EU-U.S. Data Privacy Framework. By submitting a form, you acknowledge this transfer.

10. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the French data protection authority:

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.