Privacy policy

  1. Data Controller

    2. Ingress Resistance France — non-profit association (association loi 1901), Paris, France. RNA : W423016289 — SIREN : 104 748 512. Contact: pariswillbeblue@gmail.com.

  2. Data We Collect

    3. When you place an order, we collect: your first and last name, your email address, and payment details. Card numbers are processed exclusively by our payment provider Stripe — we never store them on our servers.

  3. Purposes and Legal Basis
    • Order management — necessary for the performance of the contract (Art. 6(1)(b) GDPR).
    • Legal obligations — accounting and tax records (Art. 6(1)(c) GDPR).
    • Customer communications — order confirmations and pick-up reminders, based on our legitimate interest (Art. 6(1)(f) GDPR).
  4. Retention Periods

    5. Customer data is kept for 3 years from your last interaction. Accounting records are retained for 10 years pursuant to Article L123-22 of the French Code de commerce.

  5. Recipients

    6. Your data is shared only with our payment processor and our hosting provider, strictly for the purposes above. We do not sell or rent personal data to any third party.

  6. Your Rights

    7. Under the GDPR and French data protection law (loi Informatique et Libertés n°78-17), you have the right to: access, correct, erase, restrict, object to, or receive a portable copy of your personal data. To exercise these rights, email pariswillbeblue@gmail.com. You may also lodge a complaint with the French supervisory authority: CNIL — www.cnil.fr.