Privacy policy

Privacy Policy

Last Updated: 24 September 2026

At StudioBordo, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website or use our services, including web design, graphic design, book design and publishing support, leadership development, and personal debriefing. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

StudioBordo, LLC
1303 N. Elm, Guymon, OK 73942
Email: team@studiobordo.com

For any question about this policy or your personal data, please contact us at the email above.

2. Personal Data We Collect

We collect only the data we need for the purposes described below.

Data you provide directly: name, email address, phone number, postal address, organization name, and any information you include in contact forms, emails, project briefs, or booking requests.

Client project data: content, files, logos, photos, manuscripts, and account access details you share with us so we can deliver design, website, or publishing services.

Billing data: invoicing details and payment records. We do not store full card numbers; payments are handled by our payment providers.

Debriefing data: information you choose to share before, during, or after a debriefing session. This may include details about your experiences, emotions, relationships, or wellbeing. See Section 5 for how we handle this sensitive data.

Technical data: IP address, browser type, device information, pages visited, and similar data collected through cookies and our website platform.

3. How We Use Your Data and Our Legal Basis

Under the GDPR, we must have a lawful basis for every use of your data.

To respond to inquiries and provide our services (performance of a contract, or steps taken at your request before entering a contract).

To send invoices and keep accounting records (compliance with legal obligations under French tax and commercial law).

To send newsletters or promotional emails (your consent, which you may withdraw at any time by clicking "unsubscribe" or contacting us).

To analyze website traffic and improve our site (your consent, given through our cookie banner).

To keep our website secure and prevent misuse (our legitimate interest in protecting our business and users).

To provide debriefing sessions (your explicit consent for health-related data, as described in Section 5).

4. Cookies

Our website uses cookies and similar technologies. Strictly necessary cookies, which allow the site to function, are placed automatically. Analytics, marketing, and other non-essential cookies are only placed if you accept them through our cookie banner. You may accept, refuse, or customize your choices at any time through the cookie settings link at the bottom of our website. Refusing non-essential cookies will not prevent you from using the site. Cookie consent is kept for a maximum of 13 months, after which we will ask you again.

5. Debriefing Services: Sensitive Data and Confidentiality

Information shared during debriefing may reveal details about your emotional or mental wellbeing, which the GDPR treats as a special category of personal data. We process this data only with your explicit written consent, which we request before your first session. You may withdraw this consent at any time; withdrawal does not affect processing carried out before it.

Confidentiality. What you share in a debriefing session is kept confidential. We do not share session content with anyone, including your employer, sending organization, church, or any person or organization paying for your session, unless you give us specific written permission. If a third party pays for your session, we may confirm only that a session took place, and only if you agree.

Limits of confidentiality. Confidentiality may be set aside only where required by law or where it is necessary to protect life, including when:

  • there is a serious and imminent risk that you may harm yourself or someone else;

  • we learn that a child or vulnerable adult is being abused, neglected, or placed in danger;

  • we are required to disclose information by a court order or other legal obligation.

In these situations, we will share only the minimum information necessary and, where it is safe and possible, we will discuss this with you first.

Session notes. We keep only brief notes necessary to support continuity between sessions. We do not record sessions (audio or video) without your separate, explicit consent. Notes are stored securely with restricted access and are deleted [within 12 months after your final session], unless you ask us to delete them sooner or the law requires otherwise.

Supervision. Debriefers may seek professional supervision or consultation to maintain the quality of their practice. Any case discussed in this context is fully anonymized so that you cannot be identified.

Online sessions. When sessions take place by video call, we use reputable platforms and recommend that you join from a private space. No online platform can guarantee complete security.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We share data only with trusted service providers (processors) who help us operate our business and who are contractually bound to protect it, such as:

  • website hosting and platform services (Squarespace);

  • email and communication services (e.g., Google Workspace, Proton);

  • video conferencing services (e.g., Zoom);

  • payment and invoicing providers;

  • publishing platforms (e.g., Amazon Kindle Direct Publishing), only when you ask us to help publish your work.

We may also disclose data where required by law, or to establish, exercise, or defend legal claims.

7. International Data Transfers

Some of our service providers are located outside the European Economic Area, including in the United States. When data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, where applicable. You may contact us to learn more about these safeguards.

8. How Long We Keep Your Data

  • Inquiries and prospective clients: up to 3 years after our last contact.

  • Client project files: for the duration of the project and up to 12 months afterward, unless you ask us to keep or delete them sooner.

  • Invoices and accounting records: 10 years, as required by French law.

  • Newsletter subscriptions: until you unsubscribe.

  • Debriefing notes: as described in Section 5.

After these periods, data is securely deleted or anonymized.

9. Data Security

We use appropriate technical and organizational measures to protect your data, including encrypted connections (SSL), password-protected and access-restricted accounts, and limited access to sensitive information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to put your rights at risk, we will notify the CNIL and, where required, inform you without undue delay.

10. Your Rights

Under the GDPR, you have the right to:

  • access the personal data we hold about you;

  • correct inaccurate or incomplete data;

  • delete your data ("right to be forgotten"), subject to legal retention obligations;

  • restrict how we use your data;

  • object to processing based on our legitimate interests, and to direct marketing at any time;

  • receive your data in a portable format;

  • withdraw your consent at any time, without affecting earlier processing;

  • give instructions about what happens to your data after your death (a right specific to French law).

To exercise any of these rights, email team@studiobordo.com. We will respond within one month. We may ask you to verify your identity before acting on your request.

You also have the right to lodge a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), at www.cnil.fr, or with the supervisory authority in your country of residence.

11. Third-Party Links

Our website may contain links to other websites. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

12. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

13. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top shows when it was last revised. If we make significant changes, we will notify you by email or through a notice on our website.

15. Contact Us

If you have any questions or concerns about this policy or our privacy practices, please contact us at team@studiobordo.com.

Debriefing Services: Scope, Ethics, and Informed Consent

I recommend placing this on your debriefing page and including it in your booking or intake form, with a checkbox the client must tick before booking.

What debriefing is. Personal debriefing is a structured, confidential conversation that helps you reflect on and process significant experiences, such as cross-cultural service, transitions, ministry or leadership challenges, and stressful or difficult events. Our debriefers are trained and certified in personal debriefing.

What debriefing is not. Debriefing is not psychotherapy, counseling, psychological treatment, or medical care. It does not diagnose or treat any mental health condition. Our debriefers are not acting as licensed psychologists, psychotherapists, psychiatrists, or medical professionals in providing this service. Debriefing is not a substitute for professional mental health care.

Referral. If, during or after a session, it appears that you would benefit from support beyond the scope of debriefing, we will tell you openly and help you identify appropriate licensed professionals. We may recommend pausing or ending debriefing sessions if continuing would not be in your best interest.

Your participation is voluntary. You choose what you share. You may decline any question, take a break, or end a session at any time.

Confidentiality. Sessions are confidential, with the limits described in Section 5 of our Privacy Policy (risk of serious harm to yourself or others, abuse or endangerment of a child or vulnerable adult, or a legal obligation to disclose).

Third-party payers. If your organization or another person pays for your debriefing, they will not receive any information about what you discuss unless you give specific written permission.

Not an emergency service. Debriefing is not a crisis service. If you are in crisis or thinking about harming yourself or someone else, please contact emergency services immediately. In France, call 15 (SAMU), 112 (European emergency number), or 3114 (national suicide prevention line, available 24/7). Outside France, contact your local emergency number. In the US, call 911.