Privacy policy

The data controller is Dune&Pins, a project currently being created and published by Alexis Thébault.

For any question about personal data, you can write to contact@duneetpins.fr.

We collect the data you provide directly: your email address when subscribing to the newsletter or requesting the summer notebook; product, size, fitting or shipping preference, name, email and optional phone number for a product request; and your name, email, optional phone number and message content when you contact us.

When you sign up or request an availability alert, we may also record the selected language, form source, your choice regarding Dune&Pins news, referrer and limited technical information such as the browser used, in order to secure and properly track the request.

Because online sales are not yet open, no payment, delivery or order data is collected through the website at this stage.

Sending the newsletter and information about new series (consent).

Sending the requested notebook and a one-off update about the selected piece becoming available (fulfilling your request).

Responding to contact requests (legitimate interest).

Security, abuse prevention and proper website operation (legitimate interest).

Preparing a potential commercial relationship when you contact us about a piece or project (pre-contractual steps).

Newsletter data: until you unsubscribe and, at the latest, three years after collection.

Notebook and product requests: twelve months after the request. If you consented to the newsletter, only the address needed for that subscription then follows the newsletter retention period.

Contact requests: three years after the last exchange initiated by you, unless a different period is required by law.

Technical data and hosting logs: according to the limited periods set by technical providers for security and operation.

Your data is intended for Dune&Pins and the technical providers strictly necessary for the website to work: hosting and technical measurement (Vercel), signup and product-interest database (Supabase), messaging and delivery of requested emails (Resend, when enabled).

No payment provider is used for online sales while orders are not open.

Some providers may be located outside the European Union; in that case, transfers are covered by safeguards provided for under the GDPR.

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time.

To exercise these rights, write to contact@duneetpins.fr. You may also lodge a complaint with the CNIL (cnil.fr).