Privacy Policy

Last updated: June 2026

This policy describes how IUVE Dynamics, the publisher of the website iuvedynamics.com (the “Company”), collects and processes personal data, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and the French Data Protection Act.

1. Data controller

The data controller is Adam Tano Mrabeti, 50 Avenue des Champs-Élysées, 75008 Paris (RCS Paris 933 981 425). For any question relating to your data, contact: support@iuvedynamics.com.

2. Data collected

  • Account data: surname, first name, email address and password (encrypted), managed through our authentication provider (Supabase).
  • Order data: products ordered, configuration, delivery and billing address, and order history.
  • Payment data: processed directly and securely by Stripe. The Company does not have access to, and does not store, full payment card numbers.
  • Communication data: transactional emails and, where applicable, newsletter sign-up, sent via our email delivery provider (Resend).
  • Technical and browsing data: cookies and audience measurement (see our Cookie Policy).

3. Purposes and legal bases

  • Management of orders, delivery and after-sales service — performance of the contract (Article 6(1)(b) GDPR).
  • Management of the customer account — performance of the contract.
  • Compliance with accounting, tax and legal obligations — legal obligation (Article 6(1)(c) GDPR).
  • Audience measurement and marketing — consent (Article 6(1)(a) GDPR) or legitimate interest, as applicable.

4. Retention periods

  • Account data: for as long as the account is active, then deleted or anonymised after a reasonable period of inactivity.
  • Order and billing data: retained for the period necessary to perform the contract, then archived to meet legal obligations (in particular 10 years for accounting records).
  • Prospecting data: until consent is withdrawn or for a maximum of 3 years from the last contact.
  • Cookies: for the period specified in the Cookie Policy (a maximum of 13 months for consent, in line with the recommendations of the French data protection authority, the CNIL).

5. Recipients and processors

The data is intended for the Company and its processors acting on its instructions: Stripe (payment), Supabase (database and authentication), Resend (email delivery), Vercel (hosting), as well as carriers for the purposes of delivery. These providers are bound by contractual safeguards compliant with the GDPR.

6. Transfers outside the European Union

Some providers (in particular Stripe, Vercel and Resend) may process data outside the European Union, notably in the United States. Such transfers are governed by appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR (the European Commission's standard contractual clauses and, where applicable, certification under the Data Privacy Framework).

7. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights: access, rectification, erasure, portability, restriction of processing, objection to processing, and withdrawal of consent at any time. You may also set directives regarding the fate of your data after your death.

To exercise these rights, write to support@iuvedynamics.com. Proof of identity may be requested. The Company will respond within one month.

8. Complaint to the CNIL

If you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority (Commission Nationale de l'Informatique et des Libertés — CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

9. Security

The Company implements appropriate technical and organisational measures to protect data against any unauthorised access, loss or disclosure.