Privacy policy
This policy explains which data is processed on kodzclub.com, why it is processed and how to exercise your rights.
Data controller
The data controller is KODZ (KODZ CLUB), a French simplified joint-stock company registered with the Lille Métropole Trade and Companies Register under number 941 413 890.
Centre commercial Englos352 Route Nationale
59320 Ennetières-en-Weppes
France
Contact for personal data enquiries: contact@kodzclub.com.
Data we process
Contact form
When you contact KODZ, we process the information you provide: your name, email address, optional phone number, subject and message. Depending on your enquiry, the form may also collect the department you are applying to, Instagram or TikTok links for PR applications, venue hire or private event details, an optional date, an optional number of guests and up to four attachments.
This information is used only to receive, assess and handle your enquiry, and to respond to you. The legal basis is KODZ’s legitimate interest in managing correspondence and applications, or taking steps prior to entering into a contract where the enquiry concerns a service or private hire.
Enquiries are also stored in a private inbox in the WordPress administration area, accessible only to authorised people.
Security and abuse prevention
The server processes technical data necessary for the website’s operation and security, including the IP address, request date, requested URL and browser information. To limit contact form spam, a secure fingerprint of the IP address is stored for 10 minutes.
The form uses Cloudflare Turnstile to limit bots and abuse. For this purpose, Cloudflare processes technical signals such as the IP address, browser information and the website visited. Learn more in the Cloudflare Turnstile privacy policy.
Preferences stored in your browser
The website stores your chosen gallery layout locally and remembers, for the duration of the session, whether the introduction animation has already played. These preferences stay in your browser and are not used to track your browsing for advertising purposes.
Recipients and service providers
Data is accessible only to authorised KODZ team members and technical providers who need it to deliver their services:
- OVHcloud, for website hosting and technical email services;
- Google Drive, for displaying public gallery media;
- Google Analytics, only with your consent, to measure website traffic without advertising features;
- Cloudflare Turnstile, to protect the form against bots and abusive submissions;
- Shotgun, when you open embedded ticket booking or follow an event link;
- OpenFreeMap and jsDelivr, for displaying the contact map.
Opening content hosted by a third-party service may transmit technical data to that service, including your IP address. These services apply their own privacy policies. Some providers may process data outside the European Economic Area, subject to the safeguards set out in their contractual documentation.
Retention periods
- general enquiries, lost property and private hire: no more than 12 months after the last exchange;
- job applications: no more than 2 years after the last contact, unless earlier deletion is requested;
- attachments: stored with the enquiry in private server storage, outside the public part of the website, for the retention period applicable to that enquiry. Files not cleared by the antivirus remain in quarantine and cannot be downloaded or sent by email;
- technical security logs: no more than 12 months;
- form anti-spam rate limiting: 10 minutes;
- password access while the website is under maintenance: a secure cookie valid for 12 hours;
- Google Analytics audience data: no more than 14 months;
- your Analytics choice and local display preferences: until you delete them from your browser.
Cookies and trackers
Google Analytics 4 is used only with your consent to measure website traffic and improve the website. Advertising features and Google Signals are disabled. Before you make a choice, no Google Analytics script is loaded and no audience measurement cookie is set.
If you accept, Google Analytics may set cookies including _ga for no more than 13 months. You can withdraw your consent at any time using the “Cookie settings” link in the footer. Declining does not prevent you from using the website.
Other storage is strictly functional: local interface preferences, WordPress administration sessions for authorised users and a secure temporary access cookie when the website is password-protected.
Your rights
Depending on your circumstances, you have rights of access, rectification, erasure, restriction, objection and data portability. You may also withdraw your consent where processing is based on consent.
To exercise a right, write to contact@kodzclub.com or to KODZ’s postal address above, stating your request. Proof of identity may be requested only where there is reasonable doubt about your identity.
If you believe your rights have not been respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), the French data protection authority.
Security and policy updates
KODZ applies appropriate technical and organisational measures: HTTPS encryption, access controls, form validation, rate limiting, file filtering and server-side storage of secrets. This policy may change to reflect updates to the website or regulations; its revision date will then be updated.
Last updated: 10 September 2026.