Privacy Policy - Emilien Hamel

Last updated: 29 sept. 2026

This page explains what personal data I collect when you use the website https://emilienhamel.fr (and its English version) or when you use my vocal coaching, voice assessment, training and singing lesson services. It explains why I collect it, who receives it, how long I keep it and how to exercise your rights.

1. Who is responsible for your data?

The data controller is Emilien Hamel, sole proprietor, trading as “Emilien Hamel coach vocal expert voix” (SIRET 831 669 908 00038), 56 boulevard Maréchal Foch, 38000 Grenoble, France.

For any question about your data: contact@emilienhamel.fr

I have not appointed a data protection officer.

2. What I collect, why and for how long

Browsing the website

Data: IP address, browser type, pages viewed (technical logs kept by the host).
Purpose: keeping the website secure and working.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Retention: [TO CONFIRM: log retention period at Infomaniak].

Contact requests and free introductory call

Data: name, email address, phone number, content of your message, time slot chosen (via Calendly, email, phone or WhatsApp).
Purpose: answering your request and scheduling a call.
Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b)) or legitimate interest.
Retention: 3 years from the last contact, the period the French data protection authority (CNIL) applies to prospects.

Booking and purchasing a service

Data: identity, contact details, service and time slot chosen, order history, billing details (Bookly, Calendly, WooCommerce). If you create an account on the site, you can view, edit or delete your information at any time, except your username.
Purpose: performing the contract, scheduling sessions, invoicing.
Legal basis: performance of the contract (Article 6(1)(b)); legal obligation for accounting (Article 6(1)(c)).
Retention: for the duration of the contract, then archived for the statutory periods of 5 years for commercial limitation and 10 years for accounting records.

Payment

Data: processed directly by PayPal or Stripe depending on the service. I do not receive or keep your card number. I keep the transaction reference and the invoice.
Purpose: collecting payment for the service.
Legal basis: performance of the contract.
Retention: see above for invoices; each provider’s own periods for the rest.

Voice assessment and coaching

Data: answers to the general information questionnaire, the Voice Handicap Index and the intake form; goals; audio or video recordings of recording tasks and sessions; acoustic measurements (fundamental frequency, jitter, shimmer, HNR, CPPS); perceptual rating (GIRBAS scale); report; where applicable, daily vocal log (Premium programme).
Purpose: analysing your voice, tailoring the coaching, measuring your progress and keeping a record of what was discussed (Article 4.1 of my terms of sale).
Legal basis: performance of the contract (Article 6(1)(b)); explicit consent for information relating to your health (see section 3).
Retention: recordings kept for 12 months after coaching ends; report, questionnaires and log kept for 3 years after the last session.

Testimonials and reviews

Data: name, job title, photograph and testimonial text. Google reviews shown on the site are public content pulled from Google by the Trustindex service.
Purpose: presenting feedback from my clients.
Legal basis: your consent.
Retention: until you withdraw your consent.

3. Information relating to vocal health

Certain services, in particular the voice assessment and coaching for people with a voice disorder, may lead me to collect information about your voice and, where relevant, your health: a diagnosis made by a doctor, phoniatrician or speech-language pathologist, medical history, a self-assessment questionnaire on voice handicap, acoustic measurements.

My work is coaching, not care. I do not make medical diagnoses, I do not treat voice disorders and I do not replace a healthcare professional.

However, the GDPR defines data concerning health by what it reveals about a person’s health status, whatever the status of the person who collects it (Article 4(15) and Recital 35). As a precaution, I therefore treat information of this kind as sensitive data:

I collect it only with your explicit consent, requested separately in the questionnaires (Article 9(2)(a));
you can withdraw this consent at any time by writing to the address above, without affecting the processing already carried out;
it is accessible only to me, is never used for marketing and is not passed on to third parties without your agreement, except where required by law;
it is stored in protected spaces (see section 9).

You are not obliged to give me this information. Without it, I may however be unable to tailor the coaching to your situation.

Your voice recordings are not used to identify you or for biometric voice recognition.

4. Who has access to your data

Your data is neither sold nor passed on for advertising purposes. It is processed by me and by the following providers, who act on my behalf:

Infomaniak Network SA (Switzerland): hosting of the website and of the monitoring tools hosted on my server;
Google (Drive, Forms, email): storage of questionnaires and reports, email exchanges;
Calendly: appointment booking, and payment via Stripe for services billed in Canadian dollars;
Bookly and WooCommerce (plugins installed on my site): bookings, shop and orders;
PayPal and Stripe: online payment;
Automattic (WordPress.com, Gravatar) and Titan: business email and the Gravatar service;
Trustindex: display of Google reviews;
Googlemeet, Zoom, Teams and Whatsap

For training paid for by your employer, only the information needed for invoicing and the attendance certificate is shared with them. The content of sessions, your recordings and your health data are not.

Authorities may obtain data where the law requires it.

5. Transfers outside the European Union

Infomaniak is established in Switzerland, a country that the European Commission considers to offer an adequate level of protection. Some other providers (Google, Calendly, Stripe, PayPal, Automattic) may process data in the United States or in other countries outside the European Union. These transfers rely on an adequacy decision (for example certification under the Data Privacy Framework) or on standard contractual clauses. You can ask me for the reference.

6. Your rights

You have the right to access, rectify, erase, restrict the processing of, object to and port your data. Where processing is based on your consent, you can withdraw it at any time.

To exercise these rights, write to contact@emilienhamel.fr. I reply within one month, which can be extended by two months if your request is complex, and I may ask for proof of identity where I have reasonable doubts.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL: https://www.cnil.fr/fr/adresser-une-plainte.

7. Cookies and embedded content

This website only sets technical cookies. They are used for the shop basket and login, for remembering your language (pll_language, one year) and, on payment pages, for securing transactions through Stripe (__stripe_mid, one year, and __stripe_sid, 30 minutes). No advertising or audience measurement cookies are used. You can delete or block cookies in your browser settings, at the risk of impairing some features of the site.

8. Minors

Services for a minor (for example support through voice change) are ordered by their legal representative, who receives the information in this policy and, where applicable, gives consent to the processing of the child’s data.

9. Security

The site is served over HTTPS and hosted at Infomaniak. Access to the spaces where client files are stored is password protected. In the event of a data breach likely to create a risk to your rights, I will inform you and the CNIL as provided by law.

10. Changes

I may update this policy, in particular if I change providers or if my activities change. The date of the last update appears at the top of this page.

11. If you live in Canada, or if my activities are carried out from Alberta

I offer my services to people in Canada. Depending on where you live and where I operate from, the Canadian laws below apply in addition to the GDPR.

Alberta (Personal Information Protection Act, PIPA). It applies to private-sector organisations handling personal information in Alberta. Before or at the time of collection, I tell you why I am collecting your information and who can answer your questions (section 13). I keep it only as long as reasonably required for legal or business purposes (section 35).
Federal law (PIPEDA). It applies to exchanges of personal information between provinces and with other countries in the course of commercial activity. It therefore covers most of my clients located outside Alberta or outside Canada.
Quebec. If you live in Quebec, the Act respecting the protection of personal information in the private sector (Law 25) also applies.
Service providers outside Canada. Some providers listed in section 4 process information outside Canada, notably in the United States and Switzerlan], for the purposes described in section 2. To obtain my policies and practices regarding these providers, or to ask a question about them, write to, at contact@emilienhamel.fr (section 13.1).
Health information. Alberta’s Health Information Act applies to designated “custodians”, including regulated health professionals. I am not a custodian under that Act . My commitments in section 3 apply in all cases.

Your rights. You can request access to your information and its correction. I reply within the time limits of the applicable law: 45 days in Alberta, extendable by 30 days (sections 28 and 31), and 30 days under federal law.

Breach of information. If a loss of, or unauthorised access to, information presents a real risk of significant harm, I report it without unreasonable delay to the Information and Privacy Commissioner of Alberta (section 34.1) and, where applicable, to the federal Office of the Privacy Commissioner. I notify you where the law requires it.

Complaints. You can contact the Alberta Commissioner (https://oipc.ab.ca), the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or, for Quebec, the Commission d’accès à l’information.

12. If you live in the United States

I offer my services online to people in the United States. There is no general federal privacy law: the applicable rules depend mainly on your state of residence.

Commitments for everyone. I comply with this policy and with every promise it contains. I will notify you of a data breach as required by the law of your state.
HIPAA. My services are not provided by a covered entity under the federal HIPAA law, which covers only healthcare providers, health plans, their business associates and certain intermediaries.
Washington State. If you live in Washington State, the My Health My Data Act protects your “consumer health data”. I collect this data only with your separate consent (section 3). You can request access, withdrawal of your consent and deletion of this data, including from backup copies, by writing to contact@emilienhamel.fr.
California and other states. I do not sell or share your data for advertising purposes. My activity does not reach the thresholds of the California law (CCPA/CPRA). If your state gives you rights of access, deletion or objection, you can exercise them by writing to me: I treat them like the rights described in section 6.
Children. My website is not aimed at children under 13, and I do not knowingly collect their data online without their parents’ consent. Services for minors are ordered by a parent or legal representative (section 8).
Voiceprints. I do not use your recordings to create a voiceprint or to identify you, including under US biometric data laws.