Legal
Privacy policy
This page summarizes the legal information available for SPYE Studio.
Data controller
Controller: GUILLON ELSA / SPYE.
Address: 21 RUE DES CHAUVELLES, 58000 NEVERS, France.
These public registration details must be confirmed by Elsa as the legal structure currently used for SPYE.
Privacy contact: hello@spyestudio.com.
Data collected
Order data may include customer name, email, phone number if provided, shipping address, order items, product options, custom choices, payment status, shipping status and order history.
Contact data may include name, email address, request type and message content.
Review data may include customer name, email, purchased product snapshot, review text, moderation status and review request token.
Technical data may include server logs, security events, admin session cookies and information required for website operation.
Purposes
Data is processed to handle orders, payments, delivery, customer service, contact requests, transactional emails, review requests, legal and accounting obligations, site security and back-office administration.
Customer reviews may display the public customer name, purchased product, review date and review text, only after moderation and approval.
Payment
Payments are processed by Stripe.
SPYE Studio does not store full bank card details. Stripe may process payment, fraud prevention and transaction data according to its own terms and privacy documentation.
Emails
Transactional emails, including order confirmation, shipping and review request emails, are sent through the configured email provider.
The current implementation uses Brevo for transactional emails when configured.
Recipients and processors
Data may be accessed by SPYE Studio and by service providers needed to operate the website, process payments, send transactional emails, host the service, manage orders and secure the platform.
Known providers include Stripe for payment processing, Brevo for transactional emails, and Hetzner Online GmbH for technical hosting.
Data retention
Order and invoice-related data is retained as required for legal, tax and accounting obligations under applicable law.
Contact messages are retained only for the time necessary to answer and manage the request.
Technical logs are retained temporarily for security and maintenance.
Rights
Depending on applicable law, individuals may request access, rectification, deletion, restriction, objection and portability of their personal data.
Requests can be sent to hello@spyestudio.com. SPYE Studio may request information needed to verify the requester identity.
Cookies
The website may use cookies or similar technologies that are strictly necessary for operation, including admin session cookies and payment-related technical cookies.
Stripe may use cookies or similar technologies during the checkout flow.
No non-essential analytics or advertising tracker is declared in the current implementation. If analytics or tracking is added later, this policy and the consent mechanism must be updated.
Security
SPYE Studio uses technical and organizational measures intended to protect order, customer and admin data. No online service can guarantee absolute security.
Contact
For privacy questions or rights requests: hello@spyestudio.com.