Privacy policy

Data controller

The data controller is SBCA CONSULTING, operator of the ARTIFYME website, a French SAS with share capital of €1,000, registered with the Versailles Trade and Companies Register under SIREN 939 852 117, head office SIRET 939 852 117 00018, registered office: 2 Mail des Tilleuls, 78180 Montigny-le-Bretonneux, France. Contact us through the contact form or by email at contact@artifyme.fr.

Data processed

ArtifyMe processes data needed for customization, orders and support: identity, email, addresses, cart, Stripe payment references and status, messages, submitted photos, previews, production files and customization choices. Technical logs and pseudonymous identifiers protect sessions and quotas. With permission, a temporary navigation journal stays in the tab; sales measurement stores the day, amount and currency linked to pseudonymous consent proof. Measurement events contain no contact details, photos or customization files. Drafts and previews on your device can be removed by deleting the project or clearing browser data.

Purposes

Contract performance: customization, previews, payment, order management, production, delivery and support.

Legal obligations: accounting, taxation, warranties and authorized public requests.

Legitimate interests: security, abuse prevention and incident diagnosis while respecting your rights.

Consent: optional ArtifyMe journey and sales measurement. It can be declined or withdrawn via “Manage my cookies” without preventing a purchase. Advertising tracking is not enabled.

Required and optional information

Fields marked as required are necessary to process the request or perform the order. Without the required contact details, address and order information, ArtifyMe cannot sell or deliver the product. A photo is required to create a personalized photo product. Other information is optional.

Recipients and partners

Authorized ArtifyMe staff and providers access data needed for their duties: OVHcloud for hosting, Stripe for payment, Printful and carriers for production and delivery, OpenAI for requested image transformations, Brevo for email, and Telegram for operational notifications. Google sign-in, when offered and selected, uses Google for authentication. These providers’ services follow their respective data-protection terms. Sales measurement stays on ArtifyMe servers: this storefront loads no third-party advertising pixel. ArtifyMe does not sell your data.

Retention

Order data is kept to manage the commercial relationship, production, delivery, support and applicable rights. Accounting records are retained for ten years. Photos and files needed for an order or pending payment are not deleted while still necessary; other erasure requests are considered subject to outstanding obligations and claims. The privacy choice is kept for 180 days. Optional sale events are deleted after 90 days or when consent is withdrawn from the same browser. The navigation journal stays only in the tab’s memory. Stripe processes card data; ArtifyMe does not retain full card numbers.

Transfers outside the European Economic Area

Some providers may process data outside the European Economic Area. Destinations and safeguards depend on the service and contractual terms. Contact ArtifyMe through the contact form for the information applicable to your request.

Your rights

Subject to the conditions provided by law, you have rights of access, correction, erasure, restriction, objection and data portability. You can withdraw consent at any time without affecting earlier processing. ArtifyMe does not make decisions producing legal effects based solely on automated processing. To exercise your rights, use the contact form or email contact@artifyme.fr. Proof of identity may be requested only where there is reasonable doubt. You can also lodge a complaint with the French data protection authority, the CNIL.

Last updated: September 26, 2026.