Data protection
Privacy Policy
Last updated: April 2025
1. Data controller
2. Data collected
As part of our services, we collect and process the following categories of data:
Identification data
Name, first name, email, phone, company — collected via the contact form or registration.
Production data
Names, photos and information printed on cards — transmitted by the Client via the API.
Browsing data
Cookies, IP address, pages visited — collected automatically for audience measurement.
Billing data
Billing address, payment information — required for subscription processing.
3. Purposes of processing
- Production and delivery of cards ordered by the Client
- Customer relationship management and technical support
- Billing and subscription tracking
- Improvement of our services and website audience measurement
- Commercial communication (with your consent only)
4. Legal basis
Contract performance
Card production, billing, technical support.
Legitimate interest
Service improvement, security, fraud prevention.
Consent
Audience measurement cookies, marketing communications.
5. Retention period
Production data
Photos, names printed on cards — deleted immediately after production.
Client data
Retained during the contractual relationship + 5 years of legal archiving.
Cookies
In accordance with CNIL recommendations.
6. Data recipients
Production data is transmitted exclusively to our certified printing partners, strictly for order fulfillment. No data is sold or shared with third parties for commercial purposes.
7. Transfers outside the EU
Production data destined for North America is processed by our printing partner in Quebec (Canada), a country recognized as providing an adequate level of protection by the European Commission (adequacy decision).
8. Security measures
- HTTPS encryption (TLS 1.3) on all communications
- Data encryption at rest (AES-256)
- Immediate deletion of production data after printing
- Restricted access to personal data (principle of least privilege)
- Regular security audits and penetration testing
- Logging of access to sensitive data
9. Your rights
In accordance with the GDPR, you have the following rights:
Right of access
Obtain a copy of your personal data.
Right to rectification
Correct inaccurate or incomplete data.
Right to erasure
Request the deletion of your data.
Right to restriction
Restrict the processing of your data.
Right to portability
Retrieve your data in a structured format.
Right to object
Object to the processing of your data.
To exercise these rights: [email protected]
You may also file a complaint with the CNIL (French National Commission on Informatics and Liberty).
10. Cookies
This site uses cookies strictly necessary for the operation of the site, as well as audience measurement cookies (with your consent). You can manage your preferences via the consent banner displayed during your first visit.