Privacy Policy | SuperArchi

This policy describes how ARCHIREF ("Future Architecture", SIRET 790 929 921 00027), acting as data controller, collects and processes the personal data of this site's users and customers, in accordance with Regulation (EU) 2016/679 (the "GDPR") and the French Data Protection Act (Loi Informatique et Libertés).

1. Data we collect

Depending on how you use the site, we collect: identification data (first name, last name, email address, password stored encrypted); order and billing data (products purchased, order history, payment information processed by our payment provider — we do not store card numbers); usage data (progress in training courses, interactions with the platform, language preferences); technical data (IP address, browser type, cookies — see Article 5); communication data (messages sent via our contact or support forms).

2. Purposes and legal bases

Contract performance: processing orders and providing access to training and packs (GDPR article 6.1.b); legal and accounting obligations: retaining invoices and proof of consent to the Terms of Sale (article 6.1.c); legitimate interest: improving the site, preventing fraud, usage statistics (article 6.1.f); consent: sending marketing communications and non-essential cookies, where applicable (article 6.1.a) — you may withdraw this consent at any time.

3. Data recipients

Data is processed by our teams and shared, strictly as necessary, with our technical subprocessors: hosting (Vercel, Supabase), payment (Stripe), transactional email delivery, analytics and customer support tools. These providers only use your data to perform the services we entrust to them.

4. Retention period

Account data is retained for the duration of the contractual relationship, then archived for the periods required by law (including accounting and tax obligations). Proof of consent to the Terms of Sale and to the waiver of the right of withdrawal is retained for as long as needed to establish evidence in the event of a dispute.

5. Cookies

This site only uses cookies that are strictly necessary for it to function (authentication, cart, language preferences). Under article 82 of the French Data Protection Act, these cookies are exempt from prior consent. We do not use audience-measurement or advertising cookies subject to consent, so no cookie-consent banner is currently required. This section will be updated if that changes.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict processing, object to, and port your data, as well as the right to define directives on the fate of your data after your death. You may exercise these rights by contacting us via our contact form. You also have the right to lodge a complaint with the French data protection authority (CNIL) — cnil.fr.

7. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

8. Contact

For any question about this Privacy Policy, contact us via our contact form. See also our Legal Notice.