Privacy policy

1. Data controller

Tchi-n'grafu, independent technology studio based in Abidjan, Côte d'Ivoire. Contact: contact@tchingrafu.com

2. Data collected

Depending on how you interact with our site, we collect:

• Contact form: name, email address, phone number (optional), service concerned, message.
• Technical data: IP address (anonymised), browser type, pages viewed, time spent.
• Essential cookies: authentication session (admin area only), browsing preferences.
• Security logs: login attempts (IP, timestamp) for brute-force protection.

No banking data is collected through this site. No advertising or third-party tracking cookie is set.

3. Purposes

• Answering requests sent through the contact form.
• Establishing and performing a contractual relationship if you become a client.
• Securing access to the administration area (rate limiting, 2FA authentication).
• Measuring audience anonymously to improve the content.

4. Legal bases

Processing rests on your consent (contact form, tick box), on the performance of a contract (client relationship) and on our legitimate interest (site security, anonymous audience measurement).

5. Retention periods

• Contact form messages: 3 years after the last exchange.
• Client data (invoicing, contracts): 10 years (accounting obligation).
• Admin login logs: 12 months.
• Anonymised audience logs: 90 days.

6. Processors & hosting

Your data is processed by technical providers subject to the GDPR:

• an application host located in the United States, covered by a processing agreement and by Standard Contractual Clauses;
• a managed database hosted in the European Union;
• an anti-bot protection service for the contact form;
• email delivery and reception providers.

The identity of these providers is available on request at contact@tchingrafu.com.

7. Security

We apply technical and organisational measures appropriate to the risk: encryption of all communications, access to the administration panel protected by two-factor authentication, passwords stored as digests computed by a hash function with a configurable cost, request rate limiting, data partitioning and logging of administration access. These measures are reviewed periodically and strengthened when the state of the art requires it.

8. Your rights

Under the GDPR, you have the following rights:

• Right of access to your data.
• Right to rectification.
• Right to erasure (“right to be forgotten”).
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing.
• Right to withdraw your consent at any time.

To exercise these rights: contact@tchingrafu.com. A reply within 30 days at most. In case of disagreement, you may refer the matter to the competent supervisory authority (CNIL in France, ARTCI in Côte d'Ivoire).

9. Cookies

This site only uses cookies that are strictly necessary to its operation (admin session, anti-CSRF security). No analytics or advertising cookie is set without your consent.

10. Changes

This policy may change. The date of the last update appears at the top of the page. In case of a substantial change, we will inform you by email if you are a client.