Privacy Policy
Last updated: 1 October 2026
LE BOURHIS ART ADVISORY (“the Company”) respects the privacy of individuals who visit lebourhis.art or contact the Company regarding its art advisory services.
This Privacy Policy explains how personal data may be collected, used, stored and protected when using the Company’s website or interacting with its services. It also sets out the rights available to individuals under applicable data protection legislation, including the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for the processing of personal data is:
LE BOURHIS ART ADVISORY
Société par actions simplifiée unipersonnelle (SASU)
French simplified joint-stock company with a sole shareholder
229 rue Saint-Honoré
75001 Paris, France
SIREN / SIRET: [pending]
Email: contact@lebourhis.art
President: Nolwenn Le Bourhis
For any question concerning the processing of personal data or this Privacy Policy, the Company may be contacted at the email address above.
2. Information Collected
Depending on how an individual interacts with the website or the Company, the following categories of personal data may be collected:
name;
email address;
telephone number, where voluntarily provided;
information contained in messages, enquiries or correspondence;
information voluntarily provided regarding art interests, collecting objectives or art advisory requirements;
technical information relating to website visits, such as IP address, browser type, device information and pages visited, where applicable.
The Company seeks to collect only personal data that is reasonably necessary for the purposes described in this Privacy Policy.
3. Purposes of Processing
Personal data may be processed for the following purposes:
responding to enquiries and requests for information;
communicating with individuals regarding the Company’s art advisory services;
understanding clients’ or prospective clients’ collecting interests and requirements;
arranging consultations and providing professional services;
maintaining appropriate business, contractual and administrative records;
ensuring the security, functionality and proper operation of the website;
complying with applicable legal and regulatory obligations.
Personal data will not be sold or rented to third parties.
4. Legal Basis for Processing
Depending on the circumstances and the nature of the processing, personal data may be processed on one or more of the following legal bases:
Consent, where consent is required under applicable law;
Performance of a contract or pre-contractual measures, where processing is necessary to respond to a request or to take steps at the request of an individual prior to entering into a professional relationship;
Legal obligations, where processing is necessary to comply with applicable legal or regulatory requirements;
Legitimate interests, where processing is necessary for the legitimate interests pursued by the Company, provided that such interests are not overridden by the fundamental rights and freedoms of the individual concerned.
5. Contact Forms and Enquiries
Where a contact or enquiry form is available on the website, the personal data submitted through the form will be processed for the purpose of responding to the enquiry and, where relevant, discussing or providing art advisory services.
Individuals are requested not to submit confidential, sensitive or unnecessary personal information through the website or contact forms.
6. Cookies and Similar Technologies
The website may use cookies and similar technologies.
Certain cookies may be strictly necessary for the proper functioning and security of the website. Other cookies or similar technologies may be used for purposes such as analysing website traffic, improving the website or displaying embedded third-party content.
Where required by applicable law, non-essential cookies will only be placed following the user’s consent.
Cookie preferences may be managed or withdrawn through the cookie settings provided on the website, where available.
7. Third-Party Service Providers
The website may rely on third-party service providers for certain functions, including website hosting, contact forms, analytics, scheduling, embedded content and other technical services.
Where such providers process personal data on behalf of the Company, the Company takes appropriate steps to ensure that such processing is carried out in accordance with applicable data protection requirements and for the purposes for which the relevant provider has been engaged.
Third-party websites, platforms or services accessible through links or embedded content on the website are governed by their own privacy policies. The Company is not responsible for the privacy practices of such third parties.
8. Data Retention
Personal data will be retained only for as long as reasonably necessary to fulfil the purposes for which it was collected, taking into account the nature of the information, the context in which it was collected and any applicable legal, accounting, contractual or administrative requirements.
Different categories of personal data may therefore be retained for different periods.
Where personal data is no longer required, it will be deleted or otherwise handled in accordance with applicable data protection requirements.
9. Data Security
The Company takes reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
However, no method of transmission or storage of information over the internet can be guaranteed to be completely secure.
10. Data Subject Rights
Subject to applicable law and certain legal limitations, individuals may have the right to:
obtain confirmation as to whether their personal data is being processed and request access to such data;
request the correction of inaccurate or incomplete personal data;
request the deletion of personal data in certain circumstances;
request the restriction of processing in certain circumstances;
object to certain processing activities;
request the portability of personal data where applicable;
withdraw consent at any time where processing is based on consent.
Requests concerning these rights may be submitted to:
Individuals also have the right to lodge a complaint with the competent data protection authority.
In France, the relevant supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL).
11. International Data Transfers
Certain third-party service providers used in connection with the website may process personal data outside France or the European Economic Area (EEA).
Where personal data is transferred outside the EEA, the Company will take appropriate measures to ensure that such transfers are carried out in accordance with applicable data protection legislation and that an appropriate level of protection is maintained.
12. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to the website, the Company’s services, its data processing practices or applicable legal and regulatory requirements.
The date displayed at the top of this page indicates when the Privacy Policy was most recently updated.
13. Contact
For any questions concerning this Privacy Policy or the processing of personal data, please contact:
LE BOURHIS ART ADVISORY
229 rue Saint-Honoré
75001 Paris, France
Email: contact@lebourhis.art
President: Nolwenn Le Bourhis