Purpose and scope
This policy explains how TEFOUET FRED, operating individually under the name HuginMboa collects, uses, stores and protects the personal data of website visitors, prospects and clients.
It is prepared in accordance with Cameroonian Law No. 2024/017 of 23 December 2024 on the protection of personal data, and with Regulation (EU) 2016/679 (GDPR) where it applies.
Data controller
TEFOUET FRED
Activity operated individually under the name HuginMboa
Professional address: Douala, Cameroon
Email address: contact@huginmboa.com
Telephone / WhatsApp: +237 698 139 904
Data-protection contact: TEFOUET FRED, reachable at the email address above.
Data collected
We only collect the data needed for the purposes described below. No data is collected without your knowledge and no unnecessary field is imposed.
Data you provide directly
| Source | Data | Required nature |
|---|---|---|
| Contact form | Name or company, email address, phone / WhatsApp, selected needs, message | Name, email address, phone and message required |
| Business exchanges | Professional contact details, correspondence and contractual information | Depending on the context |
Data collected automatically
The website uses Vercel Web Analytics, a cookieless audience-measurement tool. It counts, in aggregate, the pages viewed, the referring page, the country, the device type, the browser and the operating system. No identifier is placed in your browser; a visit identifier is computed server-side from the IP address and browser, salted, never kept beyond twenty-four hours, and the IP address is not stored. These statistics cannot identify you.
When you use the contact form, the submitted data is sent to our server endpoint hosted by Vercel, then sent by our email provider Resend to HuginMboa's contact address. The hosting provider and technical providers may process technical connection data, such as IP address, browser, date and time, in their logs, according to their own terms and retention periods.
Data we do not request
We do not request sensitive data under applicable law, including racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health, genetic or biometric data, or data concerning sex life or sexual orientation. Please do not send such data in a free-form message.
The website is not intended for minors and we do not knowingly collect data relating to them.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Respond to contact and quotation requests | Pre-contractual measures taken at your request |
| Perform ordered services and manage the client relationship | Performance of a contract |
| Issue and retain invoices and accounting records | Legal obligation |
| Manage exchanges sent by email | Pre-contractual measures or performance of a contract |
| Secure the website and prevent abuse | Legitimate interest |
| Measure website traffic in aggregate, without cookies | Legitimate interest |
No decision producing legal effects concerning you is made solely through automated processing, and we do not engage in profiling.
Retention periods
| Category | Period |
|---|---|
| Contact requests and exchanges without follow-up | For as long as needed to handle them, then deleted or anonymised when retention is no longer justified |
| Prospects and quotations not resulting in a contract | For as long as needed for commercial follow-up, unless you object or request erasure |
| Client data and project files | For the duration of the relationship, then for the periods needed to establish or defend rights |
| Accounting records and invoices | For the period required by applicable regulations |
| Connection logs | According to the hosting provider's retention policy |
At the end of these periods, data is deleted or irreversibly anonymised.
Recipients
Your data is accessible to TEFOUET FRED only to the extent necessary to handle your request and manage the business relationship.
Where necessary, it may be disclosed to the following technical providers, acting as processors and bound by confidentiality and security commitments:
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Website hosting, technical logs and cookieless audience measurement (Vercel Web Analytics) | United States |
| Resend | Technical sending and processing of messages submitted through the form | According to Resend's infrastructure and subprocessors |
No advertising or profiling tool is active on the website as of the date this policy was updated. Audience measurement is aggregated, cookieless and does not identify visitors.
Your data may also be disclosed to administrative or judicial authorities where required by law.
We do not sell, rent or exchange your data with third parties for commercial purposes.
Transfers outside Cameroon
Vercel Inc. is established in the United States and may process technical data on its own infrastructure and that of its subprocessors, subject to the terms applicable to its services. Resend may also process the data needed to send and deliver emails according to its infrastructure and subprocessors. Where a provider is established outside Cameroon, the transfer is governed by the requirements of Law No. 2024/017 and, where the GDPR applies, by the safeguards provided by that regulation.
Security
We implement appropriate technical and organisational measures to preserve the confidentiality, integrity and availability of your data: HTTPS encryption, access control and limitation, stronger authentication for administration accounts, regular backups, security updates and access logging.
We apply data protection by design: each new project is reviewed for data minimisation before implementation.
Where a personal-data breach is likely to create a risk to your rights and freedoms, we notify the competent data-protection authority within the applicable legal deadlines and inform you where the risk is high.
Your rights
You have the following rights concerning your data:
- Right of access: obtain confirmation that your data is processed and receive a copy.
- Right to rectification: have inaccurate or incomplete data corrected.
- Right to erasure: request deletion of your data, subject to our legal retention obligations.
- Right to restriction: request that processing be temporarily suspended.
- Right to object: object to processing based on our legitimate interest and, at any time, to direct marketing.
- Right to data portability: receive your data in a structured and commonly used format.
- Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Right to set instructions about what happens to your data after your death.
How to exercise your rights
Send your request to contact@huginmboa.com or by post to the professional address above. Specify the right you are exercising and, where needed for identification, attach proof of identity.
We respond within one month of receiving the request. This period may be extended by two months in the event of complexity, in which case we will inform you.
Complaints
If you believe that your rights have not been respected, you may contact the personal-data protection authority in Cameroon. If you reside in the European Union, you may contact the supervisory authority in your country of residence.
Cookies
The use of trackers is described in our Cookie Policy.
Changes
This policy may be amended to reflect legal developments or changes in our practices. The applicable version is the one published on the website on the date you visit it. Where a change is substantial, we will inform you by an appropriate means.