Privacy Policy

Website Publisher

This website, accessible at danielbaud.com (the “Website”), is published by:

Daniel Baud
Address: 65, rue Pouchet
Registered with the Paris Trade and Companies Register under number: 503 871 196 00013

Hosting

The Site is hosted by o2switch, a French limited liability company with capital of €100,000, registered office at 222–224 Boulevard Gustave Flaubert, 63000 Clermont-Ferrand, France, registered with the Clermont-Ferrand Trade and Companies Register, SIRET 510 909 807 00024.

1. Introduction and data controller

This privacy policy explains how Daniel Baud (“we”) collects, uses and protects your personal data. Data controller: Daniel Baud. For questions about your data: contact@danielbaud.com.

2. Purposes and legal bases

We process your data for these purposes:

• Contract performance: order management, invoicing and delivery. Legal basis: performance of the contract.
• Marketing communications: we do not send a newsletter or carry out automated newsletter marketing. If you consent to receiving offers in the future, that processing will be based on your consent.
• Site improvement and analytics: usage analysis to improve our services through Google Analytics. Legal basis: consent for measurement trackers.
• Legal obligations: invoice retention and fraud prevention. Legal basis: legal obligation.

3. Data collected

Depending on your interactions, we may collect:

• Name and email address
• Postal address and phone number
• Payment information, transmitted to and processed by our payment provider
• Order history and preferences
• Measurements entered for made-to-measure items: needed to prepare and make your order, and accessible to the staff handling it.
• Return findings, calculations and supporting photos are used to process refunds and, where necessary, establish or defend our rights in a dispute. Photos remain private and are not in the public media library. Evidence supporting a deduction is shared with you.
• Technical data: IP address, logs and browsing data

4. Payment methods

Measurements are stored with the bag on your device, then with the order when placed, on the basis of contract performance. Return evidence is processed to manage the contract and under our legitimate interest in documenting disputes. Retention is limited to handling the return and defending rights, subject to legal requirements. Avoid including people or information unrelated to the garment in evidence.

Site payments are handled by our payment provider: PayPal. We do not store card numbers, security codes or other banking details. The payment provider processes them under its own terms and security measures.

5. Retention periods

Retention depends on the use of the data and applicable obligations. Deleting a sign-in account does not delete order records we are required to retain.

• Customer account: the profile provides your personal area and purchase history. After confirming your identity, you can request deletion under “Details.” We immediately attempt to delete Firebase access, the profile and bag; interrupted requests are retained for retry.
• Abandoned bag: three hours after the last change. Your device’s copy is removed when next used or when the open page checks expiry; expired server copies are cleaned periodically. For an older bag without a recorded date, the period starts on its first read after this update.
• Invoices and accounting records: ten years after the close of the relevant financial year. Electronic consumer contracts of at least €120 are retained for ten years from delivery, as well as throughout the period preceding delivery.
• Made-to-measure garment measurements: only measurements needed for production are used. Where they define the ordered garment’s characteristics, they form part of the contract records; the three-hour abandoned-bag period does not apply to these archives.
• Returns, complaints and disputes: necessary evidence is retained while the case is handled, then for the applicable limitation periods for defending rights. Ongoing proceedings may justify retention until they end.
• Messages: incoming messages are classified by purpose. Contract, guarantee or complaint correspondence follows the retention period for its case; messages with no contractual follow-up are deleted when no longer needed to handle the request.
• Technical logs: retained for security and incident diagnosis according to their purpose and the provider’s settings. Temporary attempt-limiting counters are automatically purged after expiry.

Records kept for legal obligations or disputes are not used for advertising. To ask about your retention period or exercise your rights: contact@danielbaud.com. References: business document retention periods and personal data retention principles.

o2switch hosting backups are kept for 30 days. Data deleted from the active site may therefore remain temporarily in a backup until it expires. This period applies to o2switch backups, not to any separate backups maintained by other providers.

6. Cookies and trackers

We use cookies to operate the site, remember preferences and compile statistics. In particular, we use Google Analytics to analyze visits. On your first visit, a cookie banner lets you accept or refuse trackers. You can view, change or withdraw consent on our Cookie Policy.

7. Recipients and processors

Your data may be shared with technical and logistics providers, including hosting, payments, carriers and analytics. Our main providers:

• Hosting and email: o2switch
• Authentication and database: Google Firebase. The Baud Boutique Cloud Firestore database is hosted in Paris, France (europe-west9).
• Payment: PayPal
• Audience and advertising measurement: Google Analytics and Google Ads, with your consent.
• Delivery: UPS receives the necessary parcel information, including the recipient’s name and delivery address. UPS has no access to boutique customer accounts.

Other providers, such as carriers or occasional tools, may be used depending on the service. We require processors to comply with the GDPR and sign appropriate contractual clauses.

8. Transfers outside the European Union

Firestore’s Paris location applies to that database only. It does not mean that all processing by other services, including Firebase Authentication, Google Analytics, Google Ads and PayPal, takes place exclusively in France or the European Union.

Some providers, including Google, may transfer or process data outside the EU. We then put appropriate safeguards in place, such as standard contractual clauses or other recognized safeguards, to meet GDPR protection requirements. For details on transfers and safeguards, contact: contact@danielbaud.com.

9. Data security

We use technical and organizational safeguards, including TLS/SSL encryption, restricted access and internal policies. If a breach may put your rights at risk, we will notify the CNIL and affected people as required by law.

10. Your rights

Under the GDPR, you have the following rights:

• Access to your personal data
• Rectification
• Erasure (right to be forgotten), within legal limits
• Restriction of processing
• Objection to processing
• Data portability
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise your rights, contact: contact@danielbaud.com. If you believe your rights have not been respected, you may complain to the CNIL (www.cnil.fr).

11. Minors

Our site is not intended for children under 16. If we discover that a minor’s data was collected without valid parental consent, we will delete it.

Optional bag reminder

With explicit consent, we use your account’s verified email for one bag reminder, after one hour without changes and before its three-hour expiry. It introduces the brand and your selection and is not required to buy. Withdraw consent in your bag, at checkout or through the email link. The address, preference and attempt record are deleted with the expired bag during hourly cleanup. No newsletter subscription is created.

12. Useful links and related documents

• Terms of Sale
• Returns and Refunds Policy
• Cookie Policy

13. Policy changes

We may update this policy and revise the “Last updated” date at the top. Please review this page regularly.

14. Contact

For questions about personal data protection or to exercise your rights:contact@danielbaud.com.