Privacy Policy
Last updated: Monday, July 27, 2026.
This Privacy Policy explains how MC Design ("I", "me", "my") collects, uses, and protects your personal data when you visit maryeliz.com (the "Site") or get in touch with me. I work with clients internationally, so this policy is written to meet the EU General Data Protection Regulation (GDPR) and French law (CNIL), the UK GDPR, Canadian privacy law (PIPEDA and Quebec's Law 25), and US state privacy laws including the California Consumer Privacy Act (CCPA/CPRA). I apply the same high standard to everyone, wherever you're based.
I am the data controller responsible for your personal data. You can reach me any time at design@maryeliz.com.
What I collect and why
When you use the contact or feedback form, I collect the information you choose to give me — typically your name, your email address or preferred contact method, where you're writing from, details about your project, timeline, and your message. I use this only to respond to you, discuss potential work, and keep a record of our correspondence.
Legal basis: your consent, and my legitimate interest in responding to enquiries and running my design practice.
When you browse the Site, my hosting platform (Framer) collects limited, anonymised analytics — things like page views, approximate location, browser, and device — to help me understand how the Site is used. Framer's built-in analytics is privacy-first: it does not use cookies or persistent identifiers and cannot be traced back to you, so no consent is required.
Legal basis: my legitimate interest in a secure, functional website.
I do not sell your data, and I do not use it for automated decision-making or profiling.
How long I keep it
I keep enquiry and correspondence data only as long as needed to handle your request and for any resulting working relationship, plus the period required to meet legal and accounting obligations. Analytics data is retained for a limited period in line with my analytics provider's settings. After that, it is deleted or anonymised.
Who I share it with
I don't share your data except with the service providers that make the Site and my practice run — for example my website host (Framer B.V.), form and email providers, and analytics tools. These providers process data on my behalf under agreements that require them to protect it. Some may process data outside the European Economic Area; where they do, appropriate safeguards such as Standard Contractual Clauses are in place. I may also disclose data where required by law.
Your rights
Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, and request portability. Where processing is based on consent, you can withdraw that consent at any time. To exercise any of these rights, email me at **design@maryeliz.com** — I'll respond within one month.
You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), if you believe your data has been mishandled.
Your regional rights
Depending on where you live, you may have additional or specific rights. In all cases, the easiest way to exercise them is to email design@maryeliz.com, and I won't discriminate against you for doing so.
EEA and United Kingdom. You have the full set of GDPR / UK GDPR rights described above (access, rectification, erasure, restriction, objection, portability, and withdrawal of consent). UK residents may complain to the Information Commissioner's Office, the ICO (www.ico.org.uk); EEA residents may complain to their national data protection authority.
Canada. Under PIPEDA and Quebec's Law 25, I collect personal information only with your knowledge and consent, use it only for the purposes described here, and give you the right to access and correct it. You may withdraw consent at any time and may complain to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or, in Quebec, the Commission d'accès à l'information.
United States (including California). I do not sell or "share" your personal information as those terms are defined under the CCPA/CPRA, and I don't use it for cross-context behavioural advertising. If you are a California resident, you have the right to know what personal information I collect, to access and delete it, and to be free from discrimination for exercising these rights. Residents of other US states with privacy laws (such as Virginia, Colorado, and Connecticut) have comparable rights. Email me to make a request.
Cookies
This Site does not use tracking or advertising cookies. Analytics is handled by Framer's built-in, cookieless system, so there is nothing that requires a consent banner. Only strictly necessary technical cookies that keep the Site working may be used. If I ever add cookie-based tracking (such as Google Analytics), I will introduce a consent banner that lets you refuse as easily as accept, and update this policy first.
Changes to this policy
I may update this policy from time to time. The "Last updated" date above shows the latest version. Significant changes will be reflected here.
Contact
Questions about this policy or your data? Email: design@maryeliz.com.