Last updated: August 23, 2025

This Privacy Policy describes how Euriell Vaire Creations collects, uses, and protects your personal data, in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable international laws.

Identity of the Data Controller

Legal name: Euriell Vaire Creations

SIREN: 903647758

Contact email: [email protected]

Data We Collect

We only collect the data necessary to provide our services: name, first name, email, postal address, phone number, order history, masked payment information, cookies, instant messages, images sent via our platform, and signatures on quotes.

We do not collect sensitive personal data (health, ethnic origin, biometrics).

We use Google Analytics for website visit statistics.

Purposes of Data Processing

We process your data exclusively for: order processing, invoicing, customer service, newsletters (if subscribed), and statistical analysis. No profiling is carried out.

Data Sharing

Your data is not sold or shared for commercial purposes. It may be shared with our hosting provider OVH (France), email service providers Amazon SES and SendGrid (USA – protected by Standard Contractual Clauses), and Amazon S3 (EU storage only).

Data Retention Period

Client data: 10 years after the last activity.

Billing data: 10 years (legal requirement).

Navigation data: stored only in Google Analytics according to their policy.

Your Rights

You have the right to access, correct, and delete your data, to object to processing, and to request data portability. You can exercise these rights via your customer account or by contacting [email protected].

International Data Transfers

Some data may be transferred to the United States (SendGrid, Amazon SES) under the Standard Contractual Clauses (SCC) approved by the European Commission.

Security

We use SSL/TLS encryption, encrypted message storage, irregular daily backups, strict access management, and firewalls to protect your data.

Minors

Our services are not intended for individuals under the age of 16. We do not knowingly collect data from minors.

International Compliance

CCPA (California): California residents can request deletion or access to their data and opt-out of any 'sale' of their data (no data is sold).

CAN-SPAM Act (USA): Transactional emails comply with identification and contact requirements.

Policy Updates

We may update this policy at any time. You will be notified by email of any significant changes.

For any questions, please contact us at [email protected].