Privacy policy

1 – Scope

This policy applies to the processing of personal data carried out when using the site: navigation, forms, account creation and management, orders and purchases (in particular via WooCommerce), customer support, access to the contents and tools offered, site security, technical monitoring, as well as certain audience and performance measurements.

Cookies and other trackers, as well as the management of your consent choices, are detailed separately in our Cookie policy.

2 – Data collected

Depending on your use of the site and our services, we may process the following categories of data:

• Identity and contact : surname, first name, email address, telephone number, account identifiers.
• Account data : profile information, preferences, login history, technical logs related to account access.
• Order data : products or services ordered, amounts, billing and delivery addresses, purchase history, order statuses.
• Payment data : payments are processed by our specialised providers; we do not store your complete bank card numbers.
• Data entered in our tools : content, notes, lists, organisation information or other data that you voluntarily enter in the features offered on the site.
• Technical and navigation data : IP address, type of device, browser, system, pages consulted, technical events, session identifiers and information related to trackers according to your choices.
• Customer relationship data : content of messages, support requests, exchanges by form or email.

3 – Purposes & legal bases

• Create and manage your account : performance of the contract or pre-contractual measures.
• Process your orders (payment, delivery, tracking, customer service): performance of the contract.
• Provide access to the contents, tools and services offered : performance of the contract.
• Ensure support and customer relations : performance of the contract and/or legitimate interest.
• Ensure site security, prevent abuse and diagnose incidents : legitimate interest.
• Comply with our accounting, tax and legal obligations : legal obligation.
• Measure the activity, performance and use of the site via internal or third-party tools : legitimate interest for processing strictly necessary for service management and security, or consent when a tracker or processing requires it.
• Measure audience, analyse journeys and conversions, and improve our content and features : consent when required by the applicable regulation on cookies and other trackers.
• Commercial prospecting, advertising and measurement of marketing campaigns : consent when required, with the possibility of withdrawal at any time.

4 – Sources of the data

• Data provided by you (account, order, forms, tools).
• Data generated by use (logs, technical events, security).
• Data received from providers strictly necessary (payment statuses, carriers).

5 – Recipients & subcontractors

The data are only accessible to people and organisations who need them in the context of their missions:

• our authorised team (administration, support, commercial management);
• our technical providers: hosting, maintenance, backup, security, messaging, anti-spam, performance tools and site operation;
• our payment providers to process transactions;
• our logistics partners or carriers for the delivery of physical products;
• our analysis, audience measurement or marketing providers, when these tools are activated according to your consent or when their intervention is technically necessary;
• administrative and judicial authorities or legally authorised bodies when required by law.

6 – Transfers outside the EU

Some of our technical, analytical or advertising providers may be located outside the European Union or may process certain data from third countries.

When applicable, we ensure that these transfers are based on a valid legal mechanism and on appropriate safeguards, such as standard contractual clauses or any other mechanism recognised by the applicable regulation.

7 – Retention periods

• User account : during the period of account activity, then deletion, anonymisation or limited archiving in case of prolonged inactivity, subject to applicable legal obligations.
• Orders, quotes, invoices and accounting data : during the legal accounting, tax and probative retention periods.
• Support data and customer exchanges : during the period necessary to process the request, then limited archiving when justified.
• Technical logs and security logs : for a limited duration, proportionate to the security, maintenance and diagnostic needs.
• Internal analysis, activity and performance measurement data : for a duration proportionate to their purpose, then deletion or anonymisation according to our internal retention rules.
• Data related to cookies and other trackers : according to the durations indicated in our Cookie policy.

8 – Security

We implement reasonable measures (access control, updates, backups, protections). You must also protect your identifiers (robust password, confidentiality).

9 – Your rights

In accordance with the applicable regulation, you have, depending on the case, a right of access, rectification, erasure, opposition, limitation of processing, portability of your data, as well as the right to withdraw your consent when the processing is based on it.

You can exercise your rights by contacting us at the following address: contact@iliadecreation.fr — 06 19 29 63 06 — Contact form

10 – Claims (CNIL)

If you consider, after contacting us, that your rights are not respected, you can file a claim with the CNIL.

11 – Update

This policy may be modified to reflect legal/technical developments. The update date appears at the top of the page.

---