Privacy Policy

1. Data controller

The controller of personal data collected on this site is: Marion Balsaux, sole trader (micro-entreprise), 66 rue de l'Église, 54220 Malzéville, France — SIREN 912 666 997, sole trader operating under the commercial name Ilvane.

Contact: hello@ilvane.art

2. Data collected

We collect the following data:

• Order data: first name, last name, postal address, email address, phone number (if provided). This data is necessary to fulfil your order.
• Payment data: processed exclusively by Stripe. Ilvane does not have access to your full banking data.
• Newsletter (opt-in): email address only, if you have expressly consented to sign up.
• Navigation data: analytics cookies (with your consent), IP address.

3. Purposes of processing

• Fulfilment and follow-up of your order
• Communication related to your delivery
• Sending the Ilvane newsletter (only with consent)
• Site improvement and audience measurement (with consent)
• Compliance with our legal obligations (accounting, tax)

4. Legal basis

• Contract performance (art. 6(1)(b) GDPR): for processing orders and deliveries.
• Consent (art. 6(1)(a) GDPR): for the newsletter and analytics cookies.
• Legal obligation (art. 6(1)(c) GDPR): for the retention of accounting data.

5. Retention periods

• Order data: 5 years from the order (legal accounting obligation).
• Newsletter: until unsubscription or withdrawal of consent.
• Navigation data: maximum 13 months (CNIL recommendation).

6. Data recipients

Your data may be transmitted to the following third parties:

• Printful: production and shipping partner. Your name and postal address are transmitted for the production and delivery of your order.
• Stripe: secure payment provider.
• Email service: Brevo (Sendinblue SAS, France) for newsletter delivery.
• Google Analytics: Google's audience measurement service, enabled only after your consent. Ilvane does not send it your name, email address or payment details.

Ilvane does not sell or rent your personal data to third parties.

7. Transfers outside the European Union

Printful has printing centres in Europe (Latvia, Spain, Poland) and in the United States. Depending on the location of the printing centre assigned to your order, your data (name, address) may be processed outside the EU. Printful undertakes to comply with the European Commission's standard contractual clauses for any international transfer. [TO VERIFY — consult Printful's documentation on data transfers.]

Stripe Inc. is certified under the EU-U.S. Data Privacy Framework.

8. Your rights (GDPR)

In accordance with Regulation (EU) 2016/679, you have the following rights on your personal data:

• Right of access — get a copy of your data
• Right of rectification — correct inaccurate data
• Right to erasure — request the deletion of your data
• Right to object — object to certain processing
• Right to portability — receive your data in a structured format
• Right to withdraw consent — at any time, without retroactive effect

To exercise your rights, contact us at hello@ilvane.art. We'll reply within one month.

9. Cookies

This site uses technical cookies necessary for its operation. Google Analytics is loaded only if you accept audience measurement in the consent banner. Analytics cookies are limited to 13 months; refusing them does not prevent any site feature or order.

Your choice is kept for six months. You can change it or withdraw your consent at any time.

10. Complaint

If you believe your rights are not respected, you may lodge a complaint with the competent supervisory authority:

• France: Commission Nationale de l'Informatique et des Libertés (CNIL) — cnil.fr
• Belgium: Data Protection Authority (DPA) — autoriteprotectiondonnees.be