Privacy policy

1. Data controller

The data controller for personal data collected through this website and its associated services is:

• EBB (SASU)
• Registered office: 147 Rue de Rosny, 93100 Montreuil, France
• SIREN: 903 766 830
• Contact: contact@ebb.global

2. Data collected and purposes of processing

EBB collects and processes personal data in the following contexts:

2.1 Contact and inquiries

• Data: first name, last name, email address, message content
• Purpose: responding to your inquiries about our services or partnerships
• Legal basis: consent (Article 6.1.a GDPR) or pre-contractual measures (Article 6.1.b GDPR)
• Retention: 3 years after the last contact, then archived

2.2 Orders and customer service

• Data: identity, contact details, postal address, order content, payment information (processed by our payment provider)
• Purpose: processing orders, customer service, accounting
• Legal basis: performance of the contract (Article 6.1.b GDPR) and legal obligations (Article 6.1.c GDPR)
• Retention: for the duration of the commercial relationship, then 10 years for legal accounting obligations

2.3 WhatsApp communications (when you opt in)

• Data: phone number, first name, order reference, conversation history
• Purpose: sending order updates, portrait previews, payment notifications, shipping confirmations, and post-delivery satisfaction surveys via WhatsApp
• Legal basis: explicit consent (Article 6.1.a GDPR)
• Retention: until you withdraw your consent (see Section 7), and up to 3 years after the end of the commercial relationship

2.4 Technical data (cookies, analytics)

• Data: IP address, browser information, pages visited, time spent
• Purpose: ensuring proper functioning of the website, audience measurement
• Legal basis: legitimate interest (Article 6.1.f GDPR) for strictly necessary cookies; consent for non-essential cookies
• Retention: 13 months maximum

3. Recipients of the data

Your data may be transmitted to:

• EBB authorized personnel
• Technical service providers (hosting, payment, shipping, email, customer messaging)
• Meta Platforms Ireland Limited (for WhatsApp communications, see Section 5)
• Public authorities, when legally required

We do not sell, rent, or otherwise transfer your data for commercial purposes to third parties.

4. Data transfers outside the EU

Some of our service providers (in particular WhatsApp / Meta) may process data outside the European Union. In such cases, EBB ensures that appropriate safeguards are in place (standard contractual clauses, adequacy decisions) in accordance with Articles 44 to 49 GDPR.

5. WhatsApp communications

If you have opted in on our order form or contact form, EBB may send you messages via WhatsApp Business regarding your order: portrait previews, validation requests, payment notifications, shipping confirmations, and satisfaction surveys.

These communications are operated via the WhatsApp Business platform (owned by Meta Platforms Ireland Limited) and are subject to Meta's privacy policy.

You can withdraw your consent at any time by:

• replying STOP to any of our WhatsApp messages
• writing to contact@ebb.global

Legal basis: explicit consent (Article 6.1.a GDPR).

6. Cookies

Our website uses cookies that are strictly necessary for its operation. Where applicable, we may also use audience measurement and analytics cookies, with your prior consent.

You can manage your cookie preferences at any time via the configuration of your browser, or via the cookie banner displayed on the site.

7. Your rights

In accordance with Articles 15 to 22 GDPR, you have the following rights regarding your personal data:

• Right of access — to obtain confirmation that your data is being processed and a copy of it
• Right of rectification — to correct inaccurate or incomplete data
• Right of erasure ("right to be forgotten") — to request deletion of your data
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us at contact@ebb.global. We will respond within one month.

You also have the right to lodge a complaint with the French data protection authority (CNIL):
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr

8. Data security

EBB implements appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, in particular to protect it against unauthorized access, modification, disclosure, or destruction.

9. Changes to this policy

This privacy policy may be updated to reflect changes in our practices or applicable regulations. The "Last updated" date at the top of this page indicates the most recent revision.

10. Contact

For any question regarding this privacy policy or the processing of your personal data, please contact us at:
contact@ebb.global