Last updated: 29/10/2026
Who is responsible for your data?
I LOVE COLOURS STUDIO Sàrl, trading as Alexandra Henry Interiors, is the controller of the processing described in this policy. Address: c/o MULTIBURO (SUISSE) SA, Rue de la Cité 1, 1204 Geneva, Switzerland. Swiss business identification number: CHE-211.651.177. For questions or requests about your data, contact thestudio@alexandrahenryinteriors.com.
This policy covers visits to our website, forms, email and telephone enquiries, and initial discussions about your project. If an engagement involves additional processing, we provide further relevant information when needed.
What data do we use, and why?
When you contact us, we process the information you provide: first and last name, email address, telephone number, message and details about your project. We use it to reply, arrange a discussion, understand your requirements, prepare a proposal and, where applicable, manage our contractual relationship. Form submissions are stored in the website’s WordPress database and sent to the studio by email. The website does not record telephone calls.
Fields marked as required are needed to submit the form in its displayed configuration. Without the information essential to replying, we cannot handle your request. Please do not use the form to send sensitive personal data or detailed information about your home’s security. Only provide another person’s information if you are authorised to do so.
When you visit, technical systems may process your IP address, the date and time, requested pages and resources, request status, and browser and device information. This data helps display the site, prevent abuse and resolve incidents. Local protections, including a spam honeypot field, help filter automated submissions. We do not make decisions with legal or similarly significant effects on you based solely on automated processing. If you believe your enquiry has not reached us, please email us directly.
Grounds for processing
We apply Swiss data protection law. Where the EU GDPR or UK GDPR applies, requests for proposals and communications needed for an engagement are processed to take steps at your request before entering a contract or to perform a contract. Other correspondence and website security rely on our legitimate interests in communicating and protecting our services, subject to your rights. Accounting and legal requirements rely on applicable legal obligations. Optional analytics and associated cookies rely on your consent. You can withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
Cookies and website analytics
Our consent manager, Complianz, remembers your choices and allows you to change them. Items strictly necessary for the website to work and to remember your consent preferences remain active. Analytics stays disabled until you accept it. Refusing analytics does not prevent you from browsing or contacting us. Use “Manage cookies” in the footer to withdraw consent or change your selection.
With your consent, we use Google Analytics 4 to understand website use: pages visited, referral sources, device information and interactions such as successful form submissions or contact clicks. Browser identifiers may be used; this data is not fully anonymous. Google states that GA4 does not log or store individual IP addresses; this does not eliminate other processing needed to collect data and operate the service. Names, email addresses, telephone numbers and enquiry contents are not intentionally sent to Analytics.
Google Tag Manager controls the triggering of tags. In our configuration, it loads only after your consent to analytics; it does not replace consent choices. We do not use these tools on this website for personalised advertising, and do not enable Google Signals or User-ID. Google Search Console provides the studio with information about the site’s visibility in Google search results; DNS verification does not add a tracking cookie to your device.
The analytics cookies _ga and _ga_<identifier> are configured to last no more than six months per setting. Your consent choice is remembered for six months, after which you are asked to renew it. The current cookie list, purposes and durations are available in the cookie manager. You can also delete cookies through your browser; this may require you to make your choice again.
Who may receive your data, and where?
Authorised people within the studio have access to the data they need for their work. Service providers may process it on our behalf: Infomaniak Network SA for website hosting in Switzerland; Apple for email; Simply Design for maintenance, SEO and support, with access from Switzerland; and Google for Google services, with processing potentially taking place in several countries, including the United States. We may also disclose necessary information to our advisers or authorities when required by law or justified to protect our rights.
Some processing may involve transfers outside Switzerland or the EEA. Depending on the country and recipient, we rely on an adequacy recognition or appropriate safeguards, including standard contractual clauses with the required adaptations. For a US recipient, the Swiss–U.S. Data Privacy Framework or EU–U.S. Data Privacy Framework is used only if that recipient is certified and the processing falls within its coverage. Otherwise, we assess the contractual safeguards and any additional measures needed. UK-specific safeguards are put in place where required. You can request further details about the transfers and safeguards applying to your data.
How long do we keep data?
The technical copy of a submission in WordPress is deleted no later than 90 days after receipt; information needed for an active project may be moved to the relevant client file. Enquiries that do not lead to an engagement and related correspondence are kept for no more than 12 months after the last meaningful exchange. If you become a client, necessary information is kept during our relationship and afterwards as required by law and justified evidential needs. Certain accounting records must, in particular, be kept for ten years. A legal obligation or dispute may justify keeping only the necessary information for longer.
GA4 user-level and event-level data is retained for two months, without resetting the period on new activity. This setting does not determine how long standard aggregated statistical reports remain available. Technical logs are retained for 30 days. Backups follow a seven-day cycle; deleted data may remain in these copies until the cycle expires, with access restricted to recovery and security purposes. Necessary deletions are reapplied if a backup is restored.
Security and external links
We apply proportionate technical and organisational measures to reduce unauthorised access, loss and misuse. No transmission or system can guarantee absolute security. Links to Instagram, Facebook, Houzz or other websites take you to third-party services governed by their own policies. Displaying a link does not itself embed their content on our website.
Your rights and how to contact us
Depending on the applicable law and its conditions, you may request access, rectification or deletion, restriction of processing, object to processing, or request delivery or transfer of certain data. You can withdraw consent to analytics through the cookie manager. For other requests, contact thestudio@alexandrahenryinteriors.com. We may verify your identity proportionately and respond within the applicable statutory time limits. Some retention obligations may restrict deletion.
You may contact the Swiss Federal Data Protection and Information Commissioner at www.edoeb.admin.ch. Where the EU GDPR or UK GDPR applies, you may also lodge a complaint with the competent supervisory authority, including the authority in your place of habitual residence in the EEA, or the Information Commissioner’s Office in the UK at ico.org.uk.
Changes to this policy
We update this policy when our practices or applicable requirements change. The date at the top identifies the published version. If a change requires new consent, we will request it before the relevant processing takes place.