Privacy policy

Data controller

The controller of the data described in this policy is EI ROUANET JEAN-BAPTISTE JEAN-CLAUDE DOMINIQUE, a sole proprietor, registered under SIREN 797 572 906 (SIRET 797 572 906 00023), whose registered office is at 2360 route de Fronton, 82170 Pompignan, France.

Contact: contact@mydayset.com.

The data we process

We process the following data:

— the information you enter in the studio: first names, event date, time, place and town, custom text, table names and guest list;

— order information: email address, name, phone and billing country, billing address, amount, currency and payment status, Stripe identifiers;

— the technical data needed for the security and operation of the site: IP address, requested pages, timestamp and browser type, logged by our host.

We collect no sensitive data and require no account from visitors.

Why, and on what basis

Your data is used to:

— provide the service and let you personalize and download your collection (performance of the contract);

— process payment, issue receipts and handle refunds (performance of the contract and legal obligations);

— let you retrieve an order, including from another device, via a link sent by email (performance of the contract);

— keep the site secure and prevent fraud (legitimate interest);

— answer your messages when you write to us (legitimate interest).

No data is used for advertising or sold.

Your draft in the browser

Until you confirm an order, your information stays in your browser (local storage). It is sent to our servers only at the time of the order.

You can clear this draft at any time from the footer (“Your data”) or by clearing the site data in your browser.

Cookies and local storage

The site uses no advertising cookies and no audience-measurement tools. Only items strictly necessary for operation are stored:

— your draft, in the browser’s local storage;

— an order-access cookie, to find an order again on the same device;

— session cookies related to authentication, for the admin area and for recovering an order through an email link.

No consent is therefore required; you can refuse or delete them through your browser settings, at the cost of losing the draft and automatic recovery.

Payment

Payment is processed by Stripe Payments Europe, Ltd. Card details are entered directly with Stripe and neither pass through nor are stored by mydayset.

Stripe provides us with the receipt email, the amount, currency, status and transaction identifiers, as well as billing information, to manage the order and our accounting obligations. Stripe processes this data under its own privacy policy.

Recipients and processors

Your data is accessible to mydayset and the providers that support it:

— Supabase, for the database, authentication and file storage;

— Stripe, for payment;

— Vercel, for hosting the site.

We do not sell or share your data for advertising.

Transfers outside the European Union

Some providers may process data outside the European Union. Where that is the case, the transfer relies on the safeguards set out in the GDPR, in particular the European Commission’s standard contractual clauses.

Retention periods

Your draft remains in your browser until you delete it or the browser removes it.

Order data is kept for as long as needed to let you retrieve and re-download your collection, and to meet our legal obligations, in particular accounting ones (ten years for supporting documents).

The host’s technical logs are kept under its own policy, for a limited period.

Your rights

Under the GDPR, you have the rights of access, rectification, erasure, portability, objection and restriction of processing.

To exercise them, write to contact@mydayset.com. You may also lodge a complaint with the French data protection authority (CNIL), www.cnil.fr.

Security

The site is served over HTTPS. Access to the database is restricted by row-level security rules, and order-access cookies are protected and limited to what is strictly necessary.

No full bank card details are stored by mydayset.

Changes

This policy may change to reflect changes to the service or the regulations. The last updated date appears at the top of the page.

Contact

For any question about this policy or your data: contact@mydayset.com.