Privacy Policy

1. Data controller

The controller for data collected through the website, forms, business contact flows, subscriptions and Idélia services is Idélia Technologies, 1639 avenue Emile Hugues, 06140 Vence, France, contact: contact@idelia-mc.com.

2. Data concerned

Idélia recommends that professional clients only enter the data strictly necessary for the intended purpose.

• identification and contact data;
• account and subscription data;
• usage and technical data;
• data linked to demos, free content and events;
• data processed inside Idélia tools when a salon or professional uses the platform.

3. Purposes and legal bases

Data is processed to answer contact requests, create and manage an account, perform a contract, handle billing, deliver Idélia solutions, provide support, ensure security and comply with legal obligations.

Depending on the case, processing relies on contract performance, a legal obligation, your consent or Idélia's legitimate interest.

4. Recipients, processing and transfers

Data is accessible on a need-to-know basis to authorised Idélia teams, the relevant salons or partners and technical processors required for the service.

For client data entered by a salon into the Idélia tools (consultations, client records, base import), Idélia acts as a processor within the meaning of Article 28 GDPR: the salon is the controller. This framework is set out in the data processing agreement (DPA) accepted by the salon.

The main current technical sub-processors include Scalingo (hosting), Cloudflare R2 (image storage), Resend (email delivery), Twilio (SMS), Stripe (billing), OpenAI and Google Gemini (AI services), Postmark (inbound email), YouTube (video playback) and Aircall (support telephony).

When you choose Google sign-in, Google Identity Services sends Idélia the account identifier, verified email address and profile information required for authentication. No access to Google Drive, Google Calendar or other Google account data is requested.

Some providers may be located outside the European Union or subcontract part of their operations there. When this happens, Idélia seeks to put in place an appropriate legal framework (e.g. standard contractual clauses).

5. Retention, security and rights

Retention depends on the nature of the data and the pursued purpose. As an indication, business requests are kept for up to 3 years after the last useful exchange, accounting records for up to 10 years and technical logs for a period proportionate to security needs.

After a subscription ends, the salon's account, its clients' reviews and its client file are kept for three years, without being displayed, so that the service can be resumed; they are then deleted. Photographs in client records are deleted twenty-four months after the record's last activity. The author of a review may request its deletion at any time by writing to contact@idelia-mc.com.

Idélia implements reasonable technical and organisational measures intended to protect the confidentiality, integrity and availability of data.

You have rights of access, rectification, erasure, objection and restriction. To exercise your rights, you can write to contact@idelia-mc.com. If you wish to lodge a complaint, you can contact the CNIL via https://www.cnil.fr.

6. Email measurement

Idélia may measure opens and clicks for emails sent to a salon account only when the recipient has expressly allowed it from the preference centre. This choice is optional and has no impact on the service.

The choice, its date, the text version and the technical information needed to demonstrate it are kept. Consent may be withdrawn at any time from the preference-management link in emails. Without valid consent, no opening pixel or measurement link is inserted.

7. Professional newsletter

Subscription to the professional newsletter relies on your consent. Idélia processes the email address, selected language, request, confirmation and unsubscribe dates, and the technical information strictly needed to demonstrate the choice.

A subscription only becomes active after the email link has been confirmed. Unconfirmed requests are deleted after a limited period. An active subscriber’s address is retained until they unsubscribe. Every newsletter provides an unsubscribe option; the minimum opt-out record is kept for three years and then deleted. You may also exercise your rights by contacting contact@idelia-mc.com.

8. Advertising conversion measurement

When you accept the advertising category in our cookie-management tool, Idélia may use the email address entered after a successful contact or newsletter-signup form to measure the effectiveness of its campaigns. The address is normalised and locally transformed into a SHA-256 hash before any transmission; the plain-text email address is not sent for this purpose.

This hash remains pseudonymised personal data. It is sent only to Google Ads and Meta Ads for enhanced conversion measurement, subject to their applicable settings and terms. No transmission takes place if you refuse the advertising category; you can change or withdraw this choice at any time through “Manage my cookies”.