Last updated: 26 February 2026
Papillon Creative Solutions (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or engage with us. It also describes your rights under the General Data Protection Regulation (GDPR).
1. Controller
Papillon Creative Solutions
Address: 6 An Der Uecht, Schuttrange L-5371
Email: nicole@papilloncreativesolutions.com
Phone: +352 621 468 103
2. What personal data we collect
We may collect, use, store, and transfer various kinds of personal data about you. This includes:
- Identity Data: name, title, business name
- Contact Data: email address, telephone number, postal address
- Technical Data: IP address, browser type and version, time zone setting, browser plug‑in types and versions, operating system, device information
- Usage Data: how you use our website, pages visited, date/time of visit, time spent on page, referring/exit pages, crawl errors, etc.
- Marketing & Communications Data: your preferences in receiving marketing from us, and your communication with us
3. How we collect your data
We obtain personal data:
- Directly from you when you provide it to us (e.g. by filling out a contact form, subscribing to a newsletter, making enquiries, registering for services)
- Automatically as you interact with our website (technical & usage data)
- From third parties, if any (for example via analytics services, social media, etc.)
4. Legal basis for processing & purposes
We will only process your personal data when we have a lawful basis to do so. The lawful bases include:
- Your consent (e.g. where you subscribe to marketing)
- Performance of a contract with you (e.g. where you engage us for consulting or branding services)
- Legitimate interests (provided they do not override your rights) — for instance, to improve our website, understand how it is used, and to protect our services
The purposes for which we process your data include:
- Providing services to you (consulting, branding, marketing)
- Responding to enquiry and communications
- Improving our website, analytics and user experience
- Sending you marketing communications if you consent or where permitted by law
- Compliance with legal obligations
5. Disclosure of your personal data
We may disclose your personal data:
- To service providers, contractors, or agents who perform functions on our behalf (e.g. website hosting, email delivery, analytics)
- To comply with legal obligations, regulation, lawful requests by public authorities
- In connection with business transfers (sale, acquisition, merger)
- With your consent, if we ask you first
We will take reasonable steps to ensure any third parties we share data with are GDPR compliant and use appropriate safeguards.
6. International transfers
If we transfer your personal data outside of the European Economic Area (EEA), we will ensure that such transfers are made with appropriate safeguards (e.g. standard contractual clauses) and in compliance with applicable law.
7. Retention of personal data
We will retain your personal data only for as long as is necessary for the purposes for which it was collected. When the data is no longer needed, we will securely delete or anonymize it. Specific retention periods will depend on the type of data and purpose (e.g. inquiries may be kept for 3 years, marketing data until you opt-out, etc.).
8. Your rights
Under the GDPR, you have certain rights in relation to your personal data. These include:
- Right to be informed (you can request details of how and why we use your data)
- Right of access (you may request copies of the personal data we hold)
- Right to rectification (correction of inaccurate or incomplete data)
- Right to erasure (“right to be forgotten”) in certain circumstances
- Right to restrict processing
- Right to data portability (receive your data in a structured, machine‑readable format)
- Right to object to processing, including for direct marketing or profiling based on legitimate interests
- If processing is based on your consent, right to withdraw consent at any time
9. Cookies & tracking technologies
We use cookies and similar tracking technologies to improve your experience on our website, understand usage patterns, and deliver content tailored to your interests.
You can manage or disable cookies via your browser settings. For non‑essential cookies (e.g. analytics, marketing), we will seek your consent before placing them on your device.
10. Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These include using secure servers, encryption, limited access to data, and regular reviews of our processes.
11. Changes to this policy
We may update this Privacy Policy from time to time. When changes are made, we will revise the “Last updated” date. If changes are significant, we may provide more prominent notice (e.g. via email or on the homepage).
12. Complaints
If you believe that we have not complied with applicable data protection laws, you have the right to lodge a complaint with the data protection supervisory authority in Luxembourg:
National Commission for Data Protection (CNPD)
Address: 15, Boulevard du Jazz, L‑4370 Belvaux, Luxembourg
Website: https://cnpd.public.lu/en.html
You may contact us first via our contact details above, and we will endeavour to resolve your concern.