In short
Le-briand.fr is the website of Les Ateliers Le Briand, a maker of traditional bedding. You can browse it without telling us who you are: no account to create, no cookies, no advertising, no online payment. We measure traffic in aggregate, with no cookie and no persistent identifier: we see that a page was read, not who read it, and we have no way of recognizing you from one visit to the next.
Three things fall outside that rule, and we describe each of them below: our forms (contact, estimate requests, newsletter), where you provide your own contact details; aggregated, cookie-free audience measurement; and embedded content (videos, social media posts, a map), which loads only if you click on it.
This policy applies to le-briand.fr. It complies with the General Data Protection Regulation (GDPR — EU 2016/679) and the amended French Data Protection Act of January 6, 1978. This English translation is provided for convenience; in case of discrepancy, the French version prevails.
Data controller
The controller responsible for processing your data is:
Les Ateliers Le Briand, a SARL with share capital of 4 000 €
Registered office: 5, cité de l’Ameublement – 75011 Paris – France
SIREN: 925 113 722 — SIRET: 925 113 722 00019
Represented by its co-managers, Théo Courtial and Rosalie Hoedts
For any question about your data, contact us at contact@le-briand.fr
Given our size and the nature of our processing activities, we are not required to appoint a Data Protection Officer (DPO). Management handles your requests directly at the address above.
The data we collect
What you send us through our forms
Browsing the website requires no registration. If you fill in a contact form, an estimate request or the newsletter field, however, you send us personal data: first and last name, email address, telephone number, postal address or location (ZIP or postal code and city), along with details about your bedding project — the type of product, its dimensions, and anything useful you include in your message.
An asterisk indicates whether each piece of information is required or optional at the point of collection.
We collect data at the following points:
- The contact form: our “Contact Us” page;
- The estimate request for a wool mattress to be made, reachable from the wool mattress pages;
- The estimate request for a wool mattress refurbishment, reachable from the refurbishment pages;
- The estimate request for a box spring to be made, reachable from the box spring pages;
- The estimate request for a box spring refurbishment, reachable from the refurbishment pages;
- The newsletter subscription: email address only.
These forms are not served by the pages you are reading: they remain hosted on our WordPress installation, inside the European Union. We explain this below, under “Hosting and transfers outside the European Union”.
What we do not collect
This website has no customer account, no shopping cart and no online payment, so we receive no banking data. We carry out no advertising profiling and make no automated decisions about you. We ask you for no sensitive data: none of our fields concerns your racial or ethnic origin, your political, philosophical or religious opinions, your trade union membership, your health or your sex life. Our forms do, however, include a free-text message field whose contents we do not control: we invite you not to enter data of that nature there. Should you entrust us with any all the same, it is used solely to answer your request.
Browsing data (audience measurement)
To know which pages are read and which are not, we use Plausible Analytics, a privacy-friendly analytics tool that works without cookies and without storage on your device. Plausible writes no cookie, no local storage and no persistent identifier into your browser, and tracks you neither from one website to another nor from one device to another. The statistics it produces are aggregated: they describe traffic, not a person.
The measurement script is served from our own domain, and the measurements pass through a relay we operate at Cloudflare before reaching Plausible. That relay sends Plausible your IP address — which is personal data — together with the technical header by which your browser describes itself. Plausible uses them to derive an approximate location, filter out bots and compute the daily identifier described below; neither of them is retained. We draw that distinction rather than blur it: this information is indeed transmitted, it is not retained.
In practice, each page view produces the following information, aggregated and never tied to a person:
- the page viewed;
- the referring website, that is, where you came from;
- the browser, operating system and device type — derived from the technical header your browser sends, which is not retained;
- the country, region and approximate city — derived from your IP address, which is not stored;
- clicks on outbound links and file downloads: only the address of the link clicked is recorded.
To count visitors without identifying them, Plausible computes a daily identifier from a random salt that is renewed and destroyed every 24 hours. Neither your IP address nor your browser header is retained, and the day’s identifier becomes useless the next day.
We also measure clicks toward our four estimate journeys — mattress and box spring, for both making and refurbishment — which 36 links across the website lead to. Each click records the event name (one of the four journeys), the address of the page where the click happened and the address of the link followed. No information about you is added to it, and these events remain subject to everything written above.
To learn more about how Plausible works:
- Privacy Policy: https://plausible.io/privacy
- Data Policy: https://plausible.io/data-policy
- Compliance (GDPR, CCPA, PECR): https://plausible.io/compliance
- Terms of Service: https://plausible.io/terms
Purposes and legal bases
| Processing activity | Purpose | Legal basis (GDPR) |
|---|---|---|
| Contact form and estimate request forms | Respond to your request, prepare a quote and manage the customer relationship | Steps taken before entering into a contract / performance of a contract (Art. 6(1)(b)) |
| Customer follow-up and order management | Make and deliver your bedding and provide after-sales service | Performance of a contract (Art. 6(1)(b)) |
| Newsletter | Send you our news | Your consent (Art. 6(1)(a)), which you may withdraw at any time |
| Audience measurement (Plausible) | Understand website traffic and improve the website | Legitimate interests (Art. 6(1)(f)) — aggregated measurement, cookie-free |
| Accounting and tax obligations | Retain order-related records | Legal obligation (Art. 6(1)(c)) |
Recipients of your data
We alone decide how your data is used, and Les Ateliers Le Briand is its only commercial recipient: no one else exploits it on their own behalf. The technical service providers listed below do access it, but on our instructions and solely to carry out their task. Your information is never sold, rented or shared with third parties for their own marketing purposes. No advertising network, no data broker and no social media pixel is loaded by the pages of this website; the embedded content described below, for its part, loads only if you click on it.
To operate, we rely on a limited number of technical service providers — processors within the meaning of the GDPR — that act on our instructions and provide security safeguards:
Cloudflare (hosting and delivery of the website and its images, security, and the relay for our audience measurement);
Cloudways (DigitalOcean, LLC) (hosting of our WordPress installation, which serves the forms; servers located in Frankfurt, Germany — European Union);
Plausible Analytics (aggregated audience measurement, stored in the European Union);
Google Workspace (email and contacts, used to manage our correspondence);
Trello / Atlassian (tracking your requests through to an answer);
our internal automation tool, hosted on dedicated infrastructure, which synchronizes these services.
To learn more about our processors’ privacy and security commitments:
- Cloudflare — Privacy Policy: https://www.cloudflare.com/privacypolicy/; GDPR compliance: https://www.cloudflare.com/fr-fr/learning/privacy/what-is-the-gdpr/
- Cloudways (DigitalOcean, LLC) (hosting of the forms, Frankfurt — EU) — Terms of Service: https://www.digitalocean.com/legal/terms-of-service-agreement; Privacy Policy: https://www.digitalocean.com/legal/privacy-policy
- Plausible Insights OÜ (Tartu, Estonia) — Data Processing Agreement: https://plausible.io/dpa. Its own processors for this data are Hetzner (Germany), Bunny (Slovenia) and UpCloud (Finland).
- Google Workspace — Compliance and legal documents: https://knowledge.workspace.google.com/admin/compliance/google-workspace-legal-and-compliance?hl=fr
- Trello / Atlassian — Trust Center: https://trello.com/fr/trust; Privacy Policy: https://www.atlassian.com/legal/privacy-policy; Customer Agreement: https://www.atlassian.com/legal/atlassian-customer-agreement#overview
Hosting and transfers outside the European Union
This website rests on two distinct parts, and they are not hosted in the same place.
The pages you are reading are static files, hosted and delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, United States — cloudflare.com. Their images are served from img.le-briand.fr, storage entrusted to the same provider. Cloudflare is a US company and may therefore process technical connection data (IP address, request logs) outside the European Union. Those transfers are governed by the safeguards required under the GDPR, in particular the standard contractual clauses adopted by the European Commission.
The forms (contact, estimate requests, newsletter subscription) are served by our WordPress installation, hosted with Cloudways, a service of DigitalOcean, LLC, 105 Edgeview Drive, Suite 425, Broomfield, CO 80021, United States — cloudways.com, in a data center located in Frankfurt, Germany. What you type into them is therefore received and stored inside the European Union. DigitalOcean is a US company and may therefore access that data from outside the European Union. Such access is governed by the standard contractual clauses adopted by the European Commission and by DigitalOcean’s participation in the EU–U.S. Data Privacy Framework.
Audience data is processed and stored inside the European Union, by Plausible, on servers located in Falkenstein, Germany. It does, however, first transit through the Cloudflare network described above, which carries our measurement relay: its routing may therefore pass through equipment located outside the European Union, under the same contractual safeguards. Storage and transit are two distinct things, and we would rather write down both.
Our business email (Google Workspace) and our request-tracking tool (Trello) may also process data outside the European Union, under the same contractual safeguards. No data is sold or transferred to third parties for commercial or advertising purposes.
Retention periods
| Data | Retention period |
|---|---|
| Prospective customer who does not proceed (contact or estimate request that does not lead to an order) | 3 years from the last contact |
| Customer (completed order) | For the duration of the business relationship, then archived as required by law |
| Accounting records relating to orders | 10 years (legal obligation) |
| Newsletter subscriber | Until you unsubscribe, then deleted |
| Audience statistics (Plausible) | Aggregated statistics, kept with no time limit; neither IP address nor browser header is retained |
Cookies, and why there is no banner
The pages of this website set no cookies at all: no advertising, targeting, social media or analytics cookies. When they load, nothing is kept on your device: no cookie, no local storage, no persistent identifier.
So you did not have to click a banner when you arrived, and that is deliberate.
Why does this website not display a cookie consent banner?
The law makes reading or writing information on your device subject to prior consent. Our audience measurement tool reads and writes none: no cookie, no local storage, no persistent identifier. There is therefore nothing for you to accept, and nothing for you to do to protect your privacy while browsing here.
The law already exempts correctly configured audience measurement tools from consent. We go further: ours simply sets nothing at all.
Two caveats, which we would rather write down than leave unsaid. The forms are served by our WordPress installation: it may need strictly technical cookies, necessary to submit the form and to guard against automated submissions. Those cookies are exempt from consent, and they serve neither advertising nor tracking. And the embedded content described below may set its own trackers — but only if you choose to load it.
Embedded content: videos, social media, map
Some pages show content that belongs to other services: videos of our workshops (YouTube, plus Wistia, Dailymotion and Facebook on the press page), social media posts (Instagram, X, Facebook), an audio excerpt (SoundCloud) and the map that leads to our workshop (Google Maps).
None of this content loads on its own. Instead, you see a preview image served from our own website — or a simple text card —, a button to start the content, and a direct link to the original page. Until you click, nothing is requested from these services: not your IP address, not a cookie, not a request of any kind.
If you click, the service’s player opens at that moment. The service then receives your IP address and may set its own trackers, over which we have no control. That is exactly why we leave the decision to you. YouTube videos are loaded in youtube-nocookie.com mode, which limits advertising tracking without removing it.
To find out what each service does with your data:
- Google (YouTube, Google Maps): https://policies.google.com/privacy
- Meta (Facebook, Instagram): https://www.facebook.com/privacy/policy/
- X: https://x.com/en/privacy
- Wistia, Dailymotion and SoundCloud: their privacy policies are available on their respective websites.
Links to fabricantmatelas.com
We also publish fabricantmatelas.com, our library of bedding guides. It is a separate website: it has no form and no newsletter, and it is covered by its own privacy policy, distinct from this one.
Security
The entire website is served over HTTPS (TLS encryption). We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration or disclosure. Access to your data is limited to authorized members of management. The public pages are entirely static: they sit on no visitor database.
Your rights
Under Regulation (EU) 2016/679 (GDPR) and the French Data Protection
Act, you have the following rights concerning your data:
- right of access: to know what data we hold about you;
- right to rectification: to correct inaccurate data;
- right to erasure (“right to be forgotten”);
- right to restriction of processing;
- right to object, in particular to processing based on legitimate interests;
- right to data portability;
- the right to give instructions concerning your data after your death.
To exercise these rights, email us at contact@le-briand.fr or write to Les Ateliers Le Briand, 5 cité de l’Ameublement, 75011 Paris. We may ask you to provide proof of identity if we have reasonable grounds for doubt. We will respond within one month of receiving your request, or within three months if the request is complex.
You may also lodge a complaint at any time with the Commission nationale de l’informatique et des libertés (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
Minors
The website is not intended for minors. We do not knowingly collect data
about anyone under the age of 15 without the consent of the person who holds
parental authority. Any such data brought to our attention will be deleted
without delay.
Changes to this policy
We may amend this Privacy Policy to reflect changes in our practices or the law. If a tool, a form or a subscription were added to the website, this page would be updated before it went live, to describe precisely the data involved, its purpose, its legal basis and its retention period.
Last updated: September 24, 2026.
Contact
For any question about this policy or the processing of your data, contact contact@le-briand.fr or call +33 1 43 72 08 87.