Privacy Policy
Last updated: 14 April 2026
Machine-translated page
This page has been automatically translated for your convenience. In the event of any discrepancy, only the French version is legally binding. View the French version.
NESS STUDIO, operator of the site, attaches particular importance to protecting your personal data. This policy explains what data we collect, why, how we use it, and what your rights are, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the amended French Data Protection Act of 6 January 1978.
01.Data controller
- Company: NESS STUDIO
- Legal form: Sole proprietorship (Entreprise individuelle)
- Address: 11 rue Pierre Georges Latécoère, 33850 Léognan, France
- Email:
02.Data collected
When you use our service, we collect the following categories of data:
ID photos (biometric data)
The photo you submit is sensitive biometric data within the meaning of Article 9 of the GDPR. It is collected solely to carry out the technical processing you ordered. Your explicit consent is required before any processing takes place.
Identity and contact data
Last name, first name, email address, postal address (for physical delivery), phone number (if provided).
Payment data
Banking data is processed directly by our PCI-DSS certified payment provider (Stripe). We do not store any banking data on our servers.
Browsing data
IP address, browser type, pages visited, length of visit, cookie data (see Article 8).
03.Purposes and legal bases for processing
| Purpose | Data concerned | Legal basis (GDPR) |
|---|---|---|
| Order fulfilment (photo processing) | Photo, identity, email | Performance of the contract (Art. 6.1.b) |
| Processing of biometric data | Photo | Explicit consent (Art. 9.2.a) |
| Postal delivery | Postal address | Performance of the contract (Art. 6.1.b) |
| Payment management | Payment data | Performance of the contract (Art. 6.1.b) |
| Customer service and complaints | Identity, email, order | Legitimate interest (Art. 6.1.f) |
| Legal and accounting obligations | Billing data | Legal obligation (Art. 6.1.c) |
| Service improvement / statistics | Browsing data | Legitimate interest (Art. 6.1.f) |
04.Data retention period
ID photos
Permanently deleted 30 days after delivery, or as soon as the download link expires.
Order and billing data
Kept for 10 years in accordance with French accounting and tax obligations.
Contact data (email, phone)
Kept for 3 years from the last interaction, then deleted or anonymised.
Browsing data
Kept for a maximum of 13 months (CNIL recommendation for analytics cookies).
05.Data recipients
Your personal data is never sold. It may only be disclosed to the following recipients, strictly within the scope of their role:
- Payment provider (Stripe) — for secure transaction processing.
- Postal carriers (Colissimo / Chronopost) — only for orders with physical delivery.
- Site host (OVH SAS, France) — for hosting data as part of the service.
- Analytics tool (Google Analytics) — anonymised data for visit statistics, subject to consent.
- Competent authorities — upon judicial or legal request.
06.Transfers outside the European Union
Hosting of the site and its data is provided by OVH SAS, whose servers are located in France, within the European Union.
However, two providers may process some of your data outside the EU:
- Stripe (payment) — a US company, governed by standard contractual clauses approved by the European Commission and certified under the EU–US Data Privacy Framework.
- Google Analytics (statistics) — anonymised data, transferred to Google's servers. You may refuse these transfers via the consent banner.
07.Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights:
Right of access
Obtain a copy of the personal data we hold about you.
Right to rectification
Correct inaccurate or incomplete data concerning you.
Right to erasure
Request the deletion of your data ("right to be forgotten"), subject to legal obligations.
Right to object
Object to certain processing based on legitimate interest.
Right to restriction
Request the temporary suspension of the processing of your data.
Right to portability
Receive your data in a structured, machine-readable format.
Right to withdraw consent
Withdraw your consent to the processing of your biometric data at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise your rights: send your request by email to , attaching a copy of your ID. We will respond within a maximum of 30 days.
If you are not satisfied with our response, you may lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr.
08.Cookies
Our site uses cookies and trackers. A cookie is a small text file placed on your device while browsing.
Strictly necessary cookies
Essential for the site to function (session, cart, security). No consent required.
Analytics cookies
Audience measurement and browsing statistics (Google Analytics). Placed only with your consent.
Advertising cookies (if applicable)
Ad personalisation. Placed only with your explicit consent.
You can manage your cookie preferences at any time via the consent banner or your browser settings. Refusing analytics cookies does not affect access to the service.
09.Data security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure:
- Encryption of communications via the HTTPS/TLS protocol.
- Access to data restricted to authorised personnel only.
- Secure deletion of photos after the retention period.
- Hosting on secure servers (Roubaix, France (OVH SAS)).
In the event of a data breach likely to pose a risk to your rights and freedoms, we undertake to notify the CNIL within 72 hours and to inform you as soon as possible if that risk is high.
10.Changes to this Privacy Policy
This policy may be updated at any time to reflect legal, regulatory or technical developments. The date of the last update appears at the top of this document. In the event of a substantial change, we will inform you by email or via a notice visible on the site.
11.Contact
For any question relating to this policy or to exercising your rights:
By email
By post
NESS STUDIO — 11 rue Pierre Georges Latécoère, 33850 Léognan, France