Privacy policy

1. Data controller

Reine-Beau (legal form [TBD: registration in progress], company number [TBD: to be completed at registration], registered office [TBD: to be completed at registration]). GDPR referent: Christophe Erlat. GDPR contact: dpo@reine-beau.fr.

Fields marked [TBD:] will be completed once Reine-Beau is formally registered. This page will be updated before any production deployment.

2. Processing purpose

When you submit the quote-request form on one of our product pages, we process your data to qualify your enquiry, get back to you within 48 hours, and prepare a quote tailored to your need. Your data is not used for unsolicited commercial prospecting.

3. Legal basis

Processing rests on Reine-Beau’s legitimate interest (GDPR Article 6(1)(f)) in receiving, qualifying, and responding to an unsolicited quote request from a visitor. The balance between this interest and your rights and freedoms is documented in an internal legitimate-interest assessment (LIA). You may request a summary at dpo@reine-beau.fr.

4. Retention period

Your data is retained for 18 months from the date you submit the form. This window matches the typical conversion cycle of a professional quote request in our market (enquiry Q1 → Pride event Q2 → invoicing Q3 → reorder Q1 of the following year). After 18 months, columns containing personal data are automatically wiped (set to NULL). Audit traces (technical records) are kept 10 years under the GDPR Article 5(2) accountability principle (processing traceability), then purged in turn.

5. Sub-processors

To host and process your request, we rely on the following sub-processors, each covered by a data-processing agreement (DPA):

• Amazon Web Services EMEA SARL — hosting, database, transactional email, logging. Region eu-west-3 (Paris); no transfer outside the EU.
• Cloudflare, Inc. — Turnstile anti-bot verification. Cloudflare DPA + EU-US Data Privacy Framework.

6. Your rights

Under Articles 15, 16, 17, and 21 of the GDPR, you hold the following rights over your data:

• Right of access (Article 15): obtain confirmation that your data is being processed and receive a copy.
• Right of rectification (Article 16): have inaccurate or incomplete data corrected.
• Right to erasure (Article 17): ask for your data to be deleted.
• Right to object (Article 21): object at any time to processing based on legitimate interest. Processing then ceases, unless we demonstrate compelling legitimate grounds that override your interests. This right is directly applicable to the processing described here.

To exercise these rights:

• If you hold a Reine-Beau customer account, visit the “My personal data” page in your account area.
• Otherwise, by writing to dpo@reine-beau.fr from the email address you used when submitting your quote request.

We will respond within one month (Article 12(3) GDPR), extendable by two months for complex requests.

If you believe your rights are not respected, you may lodge a complaint with the French data-protection authority (CNIL — www.cnil.fr).

7. No automated decisions

Your data is not subject to any profiling or automated decision-making under GDPR Article 22. Quotes in response to your request are prepared manually by the Reine-Beau team.

8. Contact

For any question about this privacy policy or about how we process your data: dpo@reine-beau.fr.