Privacy Policy

Brigitte Engel

30 avenue des Baléares, 66000 Perpignan, France

Email: contact@brigitteengel.com

• Contact data: first name, last name, email address (contact form)
• Enquiry data: name, email address, message and, if you provide it, phone number (piece enquiry form)
• Order data: name, email address, delivery address, order history (purchase)
• Navigation data: pages visited, session duration (analytics cookies with consent)
• Payment data: handled directly by Stripe; we never store your bank details
• Account data: email address, name and profile picture received from your Google account when signing in with Google
• Account created with an email address: email address and password, which is never stored in readable form
• Technical data: IP address, kept for two hours at most to limit repeated submissions of forms and orders (Upstash)

• Performance of a contract: order processing and delivery
• Legitimate interest: fraud prevention, site security
• Consent: analytics cookies and newsletter subscription (can be withdrawn at any time)
• Legal obligation: accounting records (10-year retention)

• Contact and enquiry data: 3 years from last contact
• Order data: 10 years (legal accounting obligation)
• Customer account: until it is deleted, which you can request at any time
• Newsletter: until you unsubscribe
• IP address used to limit repeated submissions: two hours at most
• Analytics cookies: 13 months maximum
• Consent cookies: 6 months

Some of our providers process data outside the European Union, notably in the United States: Stripe, Resend, Upstash, Google and Adobe. Depending on the provider, these transfers are covered by the European Commission’s standard contractual clauses or by the EU-US Data Privacy Framework.

You have the rights of access, rectification, erasure, restriction of processing, objection and data portability regarding your personal data. To exercise these rights, contact us at:

contact@brigitteengel.com

You also have the right to lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country of residence.

• Stripe: Secure payment processing (stripe.com/privacy)
• Supabase: Authentication and database (supabase.com/privacy)
• Hostinger: Website hosting (hostinger.com/privacy-policy)
• Resend: Transactional emails (order confirmation, shipping, contact) (resend.com/legal/privacy-policy)
• Brevo: Newsletter (email subscriptions) (brevo.com/legal/privacypolicy)
• Upstash: Rate limiting (Redis) (upstash.com/privacy)
• Adobe Fonts: Web fonts (Avenir) (adobe.com/privacy.html)
• Dolibarr: The studio’s own management tool (self-hosted): order processing, invoicing and shipping preparation
• Carriers: Chronopost, DHL, FedEx and their partners, depending on the destination: delivery of your order (name and delivery address only)
• Google Analytics: Audience measurement (pages visited, session duration), with your consent only (policies.google.com/privacy) · Opt out
• Google Sign-In: Sign in with Google: we receive your email address, name and profile picture from your Google account. We do not access any other Google services (Gmail, Drive, etc.). (policies.google.com/privacy)