Website privacy policy
Version of November 5, 2026
Translation for information only. The French version prevails.
Who is responsible
Sunday Orthodontics SAS ("Sunday") is the controller of the data collected on the sundayortho.com website, described here. Data of Sunday Studio accounts and platform use is governed by the platform privacy policy; patient data, by the data processing agreement.
Contact for personal data: studio@sundayortho.com.
Contact form and appointment booking
- Data: first name, last name, e-mail, phone, message (contact form); the information entered when booking and the time slot chosen (appointment booking); the page the request is sent from and, where applicable, where the visit came from (landing page, referring site, "utm" campaign parameters).
- Purpose: answering your request and arranging the onboarding.
- Legal basis: our legitimate interest or your request.
- Retention: three years after the last exchange.
The contact form and the appointment booking calendar are managed by HubSpot. The calendar is displayed in a frame on the free trial page; the website asks HubSpot not to perform any audience measurement in it.
Audience measurement
The website measures its traffic without cookies, with Vercel Web Analytics and Plausible Analytics: no identifier is stored in your browser and your IP address is not kept. Statistics are aggregated (page views, referrers, country, device and browser type, form submissions) and cannot identify you.
- Legal basis: our legitimate interest in measuring the website's traffic.
Hosting and technical logs
- Data: IP addresses, pages requested, server times and responses.
- Purpose: serving the pages and protecting the website. The website is hosted by Vercel.
- Legal basis: our legitimate interest in protecting the website.
- Retention: one day at most.
Cookies and storage in your browser
The website uses no cookies, whether for audience measurement, advertising or social networks. It therefore has no banner. Only the appointment booking calendar, provided by HubSpot, receives from its security provider Cloudflare a technical bot-protection cookie ("__cf_bm", 30 minutes).
For the duration of your visit, it keeps in your browser (session storage) the landing page, the referring site and the campaign parameters of the address: they are erased when the tab is closed and are only sent with the contact form, when you click, or to the appointment booking calendar when it is displayed (campaign parameters only).
Who receives this data
Sunday's authorized team, and its providers: HubSpot (forms, appointments and contact management), Vercel (hosting and audience measurement), Plausible (audience measurement, hosted in the European Union). HubSpot and Vercel may transfer data outside the European Union, under the EU-U.S. Data Privacy Framework or standard contractual clauses. Sunday sells no data.
Your rights
You can access your data, have it corrected or erased, restrict its use, object to a use based on legitimate interest, receive it in a readable format, and give instructions for after your death. Write to studio@sundayortho.com; you will get an answer within one month. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).