Privacy policy

1. Data controller

CALLIGRAM 2.0 — a single-shareholder limited company (EURL), share capital €10,000, company number 984 088 153, registered office 2 rue Alessandro Volta, 35500 Vitré, France. GDPR referent: Christophe Erlat. GDPR contact: dpo@reine-beau.fr.

2. Processing purpose

When you submit the quote-request form on one of our product pages, we process your data to qualify your enquiry and prepare a quote tailored to your need. Your data is not used for unsolicited commercial prospecting. If you send a quote from the cart, we also keep a copy of the shipping and billing address you entered. Our team uses it to price delivery and to make quote acceptance easier.

Providing this data is neither a statutory nor a contractual requirement. It is necessary for us to respond to your quote request. Without it, we cannot process your request or send you a quote.

3. Legal basis

A quote sent from the cart by an account holder rests on GDPR Article 6(1)(b): pre-contractual steps taken at your request. Older requests, sent through the former contact form, were processed under CALLIGRAM 2.0’s legitimate interest (GDPR Article 6(1)(f)) in receiving, qualifying, and responding to an unsolicited quote request. The balance between this interest and your rights and freedoms is documented in an internal legitimate-interest assessment (LIA). You may request a summary at dpo@reine-beau.fr.

4. Retention period

Your data is retained for 18 months from the date you submit the form. This window matches the typical conversion cycle of a professional quote request in our market. After 18 months, the personal data in your request is automatically erased: optional fields are emptied, and your name, email address, message and IP address are replaced by a neutral placeholder (for example "[effacé]"). Audit traces (technical records) are kept 10 years under the GDPR Article 5(2) accountability principle (processing traceability), then purged in turn. The address copy of a quote sent from the cart follows the same retention period as the rest of the request.

5. Local storage

Your basket and quote lines are saved in your browser’s local storage (localStorage), on this device only. Quote lines do not leave your browser until you check out; the configuration of product lines (no personal data) is sent to our servers only to calculate prices. There is no tracking, no third party and no consent banner involved.

The basket holds the product lines (product, options, quantity). Quote lines hold the request you prepared: your free-text message, your need description, the estimated quantity, the chosen options and placement, and a reference to a logo file you already uploaded. While your order is being sent, the browser also keeps an in-progress order identifier and the references of the quote requests already sent (24 hours at most after the last send attempt, cleared when you log out); they hold no address and no message.

Quote lines are removed from this browser as soon as your session ends while the site is open there: whether you log out or the site ends your session (expiry or revocation), including from another open tab. If your session ends while the site is closed, the lines stay until the 30-day limit. They are also removed 30 days after they were added: an expired line is deleted the next time the site is opened in this browser. Product lines stay until you remove them or empty the basket. The in-progress order identifier and the references of the quote requests sent are deleted 24 hours at most after the last send attempt, or when you log out. The logo file itself, once uploaded, is kept on our servers: emptying the basket does not delete it, as the basket only keeps a reference to it. It is not covered by the 18 months in section 4 (Retention period) and follows the retention that applies to uploaded artwork, namely 10 years from the upload.

This storage is strictly necessary to provide the basket you asked for. It therefore does not require prior consent (article 82 of the French Data Protection Act). Data you send afterwards at checkout or with a quote request falls under the legal bases described in section 3.

6. Sub-processors

To host and process your request, we rely on the following sub-processors, each covered by a data-processing agreement (DPA):

• Amazon Web Services EMEA SARL — hosting, database, transactional email, logging. Region eu-west-3 (Paris); no transfer outside the EU.
• Cloudflare, Inc. — Turnstile anti-bot verification. Cloudflare DPA + EU-US Data Privacy Framework.

7. Your rights

Under Articles 15, 16, 17, 18, and 21 of the GDPR, you hold the following rights over your data:

• Right of access (Article 15): obtain confirmation that your data is being processed and receive a copy.
• Right of rectification (Article 16): have inaccurate or incomplete data corrected.
• Right to erasure (Article 17): ask for your data to be deleted.
• Right to restriction of processing (Article 18): you can ask us to restrict the processing of your data in the cases provided for by the Regulation.
• Right to object (Article 21): object at any time to processing based on legitimate interest. Processing then ceases, unless we demonstrate compelling legitimate grounds that override your interests. This right is directly applicable to the processing described here.

To exercise these rights:

• If you hold a Reine-Beau customer account, visit the “My personal data” page in your account area.
• Otherwise, by writing to dpo@reine-beau.fr from the email address you used when submitting your quote request.

We will respond within one month (Article 12(3) GDPR), extendable by two months for complex requests.

If you believe your rights are not respected, you may lodge a complaint with the French data-protection authority (CNIL — www.cnil.fr).

8. No automated decisions

Your data is not subject to any profiling or automated decision-making under GDPR Article 22. Quotes in response to your request are prepared manually by the Reine-Beau team.

9. Contact

For any question about this privacy policy or about how we process your data: dpo@reine-beau.fr.