Privacy policy

Last updated: 26 October 2026

This English version is provided for convenience. If there is any difference, the French version prevails.

This policy explains what personal data is collected when you use flywithmel.com and the related sales pages (flywithmel-coaching.systeme.io), why it is collected, how long it is kept and what rights you have over it.

It is written in line with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the French Data Protection Act. Fly with Mel also respects the Australian Privacy Principles.

1. Who is responsible for your data

The data controller is Mélanie Roukoz, trading as Fly with Mel, a sole trader registered in Australia.
ABN: 99 781 554 387
Address: 33 Oxford Street, Riverstone NSW 2765, Australia
E-mail: mel@flywithmel.com

Fly with Mel is a one-person business. There is no data protection officer: Mélanie Roukoz handles any request about your data directly, at the address above.

2. What data is collected

No data is collected without your knowledge. You provide it yourself, or it is generated as you browse.

Data you provide

The site's questionnaire (before a discovery call or a speaking request): first name, last name, e-mail address, phone (optional), country, preferred language for the call, your answers and, where relevant, your organisation and your message.
First name and e-mail address: when you download a free resource, buy a product or sign up for a call. Required.
Phone number: on download and order forms. Optional.
Country of residence: on the download form. Required, as it determines the applicable VAT.
Billing address: when ordering. Required.
The content of your messages: by e-mail or during coaching. Only if you choose to write to me.

Data generated as you browse

Anonymous site statistics: the site counts page views and clicks (episodes, buttons) only as daily totals. No cookie, identifier or IP address is stored for this.
Meta pixel, only if you accept it in the cookie banner: browser identifier, pages viewed and actions taken on the site (clicking a discovery call button, sending the questionnaire, requesting a free resource). See the cookie policy.
The host's technical logs (IP address, browser, date of visit), kept by Netlify for security and to keep the site running.
On the sales pages: the cookies and trackers described in the cookie policy, set according to your choice in their banner.

Payment data

Your card details never pass through my servers and are never shared with me. They are entered directly into Stripe's secure interface. I only see the amount, date, transaction status and the last four digits of the card.

Sensitive data

The site's forms do not ask for any sensitive data within the meaning of Article 9 of the GDPR (health, origin, opinions, sexual orientation, religious beliefs). Only share in the questionnaire what you want to share. If such information comes up spontaneously during coaching, it remains covered by the confidentiality set out in the coaching contract, is never passed on to anyone and is not kept in a structured file.

3. Why this data is collected, and on what basis

Preparing the discovery call or your speaking request, and replying to you: questionnaire data. Legal basis: your consent (Art. 6.1.a GDPR), given by ticking the box on the form.
Sending you the free resource you asked for: first name, e-mail, country. Legal basis: your consent (Art. 6.1.a).
Processing your order, delivering the product, issuing the invoice: first name, e-mail, billing address, transaction data. Legal basis: performance of the contract (Art. 6.1.b).
Following up on coaching: first name, e-mail, phone, exchanges. Legal basis: performance of the contract (Art. 6.1.b).
Sending you news and commercial offers by e-mail: first name, e-mail. Legal basis: your consent (Art. 6.1.a), which you can withdraw at any time.
Answering your questions: the data you send. Legal basis: legitimate interest (Art. 6.1.f).
Keeping invoices and accounting records: billing data. Legal basis: a legal obligation (Art. 6.1.c).
Counting site visits anonymously: daily totals, no personal data. Legal basis: legitimate interest (Art. 6.1.f).
Measuring how well ads work and showing my posts to people who may be interested (Meta pixel): browsing data, cookie identifier. Legal basis: your consent (Art. 6.1.a), collected through the cookie banner.
Preventing payment fraud: transaction data. Legal basis: legitimate interest (Art. 6.1.f).

Marketing: you are never added to an e-mail list without asking. Filling in the site's questionnaire does not add you to any list. Every e-mail contains an unsubscribe link that works immediately. If you have bought a product, you may receive information about similar products, as permitted by article L.34-5 of the French Postal and Electronic Communications Code, with the same unsubscribe link.

4. How long your data is kept

Answers to the site's questionnaire: 3 years from our last exchange.
Prospects (free resource sign-up, no purchase): 3 years from your last contact.
Clients, order data: 3 years from the end of the business relationship.
Invoices and accounting records: 7 years (Australian accounting requirement).
Exchanges related to coaching: 3 years after the coaching ends.
Advertising and measurement cookies: for the durations given in the cookie policy.
Your cookie choice: 6 months.

At the end of these periods, data is deleted or anonymised.

5. Who else has access to your data

Your data is never sold, rented or exchanged. It is only shared with the providers needed to run the business, who act as processors and are contractually bound to protect it.

Netlify (Netlify, Inc.): hosting of flywithmel.com and sending Mel a copy of questionnaire answers by e-mail. United States, with safeguarded transfers.
Supabase (Supabase, Inc.): the database where questionnaire answers are stored. Servers in the European Union (Ireland).
Calendly (Calendly LLC): booking the discovery call, when you choose a time slot. United States, with safeguarded transfers.
Systeme.io (ITACWT Limited): sales pages, forms, e-mail list hosting and sending e-mails. Data located in the European Union (Ireland).
Stripe (Stripe Payments Europe Ltd): card payment processing. European Union, with safeguarded transfers to the United States.
Google (Google Ireland Limited): hosting of the PDF file delivered after purchase (Google Drive). European Union, with safeguarded transfers to the United States.
Meta Platforms (Meta Platforms Ireland Ltd): advertising measurement, only if you have consented. European Union, with safeguarded transfers to the United States.

Your data may also be disclosed to administrative or judicial authorities when the law requires it.

6. Transfers outside the European Union

Fly with Mel is operated from Australia, so your data is accessed and processed from Australia, a country without an adequacy decision from the European Commission.

This transfer is based on:

Article 49.1.b GDPR: the transfer is necessary to perform the contract between us (delivering the product you bought, providing your coaching, answering your requests);
for data shared with the providers listed in section 5, the European Commission's standard contractual clauses, or the Data Privacy Framework for US providers that have joined it.

In practice: the data you share is accessible from a computer located in Australia, protected by a password and two-factor authentication, and is not shared with anyone else.

7. Your rights

You have the following rights over your data:

Right of access: confirmation that your data is being processed, and a copy of it.
Right to rectification: having inaccurate or incomplete data corrected.
Right to erasure: having your data deleted, within the limits of legal retention obligations (an invoice cannot be deleted before 7 years).
Right to restriction: temporarily freezing the processing.
Right to object: objecting to processing based on legitimate interest, and to marketing at any time.
Right to data portability: receiving your data in a readable, reusable format.
Right to withdraw consent: at any time, without affecting what was done before.
Right to give instructions about what happens to your data after your death.

How to exercise them: an e-mail to mel@flywithmel.com. You will receive a reply within one month at most. Proof of identity may be requested if there is reasonable doubt about who is making the request.

If you are not satisfied with the reply, you can lodge a complaint with your data protection authority: in France, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr); in Australia, the OAIC (www.oaic.gov.au).

8. Cookies and trackers

flywithmel.com does not set any advertising or measurement cookie without your consent. The Meta pixel only loads after you consent through the banner shown on your first visit. You can change or withdraw your choice at any time with the "Cookie settings" link at the bottom of every page.

Details are in the cookie policy.

9. Security

The following measures are in place: encrypted connection (HTTPS) across the site and sales pages, two-factor authentication on the tools used, access to questionnaire answers limited to the data controller only, no storage of card details.

As no system is infallible, if a data breach is likely to result in a high risk to your rights, you will be informed as soon as possible, in line with Article 34 GDPR.

10. Minors

Fly with Mel's products and services are intended for adults. No data is knowingly collected from people under 18. If you find that such data has been collected, write to me and it will be deleted.

11. Changes to this policy

This policy may change to reflect legal or technical developments. The date of the last update is shown at the top of the page. If a substantial change affects your rights, you will be informed by e-mail if you are on the mailing list.

12. Contact

For any question about this policy or your data: mel@flywithmel.com