Privacy Policy

1. Data controller

The controller for data collected through the website, forms, business contact flows, subscriptions and Idélia services is Idélia Technologies, 1639 avenue Emile Hugues, 06140 Vence, France, contact: contact@idelia-mc.com.

2. Data concerned

Idélia recommends that professional clients only enter the data strictly necessary for the intended purpose.

• identification and contact data;
• account and subscription data;
• usage and technical data;
• data linked to demos, free content and events;
• data processed inside Idélia tools when a salon or professional uses the platform.

3. Purposes and legal bases

Data is processed to answer contact requests, create and manage an account, perform a contract, handle billing, deliver Idélia solutions, provide support, ensure security and comply with legal obligations.

Depending on the case, processing relies on contract performance, a legal obligation, your consent or Idélia's legitimate interest.

4. Recipients, processing and transfers

Data is accessible on a need-to-know basis to authorised Idélia teams, the relevant salons or partners and technical processors required for the service.

For client data entered by a salon into the Idélia tools (consultations, client records, base import), Idélia acts as a processor within the meaning of Article 28 GDPR: the salon is the controller. This framework is set out in the data processing agreement (DPA) accepted by the salon.

The main current technical sub-processors include Scalingo (hosting), Cloudflare R2 (image storage), Resend (email delivery), Twilio (SMS), Stripe (billing), OpenAI and Google Gemini (AI services), Postmark (inbound email) and YouTube (video playback).

Some providers may be located outside the European Union or subcontract part of their operations there. When this happens, Idélia seeks to put in place an appropriate legal framework (e.g. standard contractual clauses).

5. Retention, security and rights

Retention depends on the nature of the data and the pursued purpose. As an indication, business requests are kept for up to 3 years after the last useful exchange, accounting records for up to 10 years and technical logs for a period proportionate to security needs.

Idélia implements reasonable technical and organisational measures intended to protect the confidentiality, integrity and availability of data.

You have rights of access, rectification, erasure, objection and restriction. To exercise your rights, you can write to contact@idelia-mc.com. If you wish to lodge a complaint, you can contact the CNIL via https://www.cnil.fr.

6. Email measurement

Idélia may measure opens and clicks for emails sent to a salon account only when the recipient has expressly allowed it from the preference centre. This choice is optional and has no impact on the service.

The choice, its date, the text version and the technical information needed to demonstrate it are kept. Consent may be withdrawn at any time from the preference-management link in emails. Without valid consent, no opening pixel or measurement link is inserted.