LEGAL

Privacy Policy

1. Data controller

The controller of personal data is:

AUREARGENT
Paris, France
Email: [email protected]

2. Data collected

In the course of our activities, we collect the following personal data:

Identification data

First and last name
Email address
Telephone number
Postal address (where required for the service)
Company name (where applicable)

Browsing data

IP address
Browser type and operating system
Pages viewed and time spent
Cookies (see our Cookie Policy)

Booking data

Type of service requested
Vehicle selected
Preferred dates and locations
Contact preferences
Payment information (processed by our provider Stripe)

3. Legal bases for processing

We process your data on the following legal bases:

Performance of a contract (art. 6.1.b GDPR): managing your bookings and services
Legitimate interest (art. 6.1.f GDPR): improving our services, fraud prevention, audience statistics
Consent (art. 6.1.a GDPR): sending marketing communications, non-essential cookies
Legal obligation (art. 6.1.c GDPR): retention of invoices, accounting and tax obligations

4. Purposes of processing

Your personal data is used to:

Handle your contact requests and bookings
Prepare and send personalised quotations
Deliver the services (photography, vehicle hire, concierge)
Process payments and manage invoicing
Contact you regarding your booking
Improve our website and our services
Send you our newsletter and promotional offers (with your consent)
Meet our legal and accounting obligations

5. Retention periods

Your data is retained for the following periods:

Contact data: 3 years from the last contact
Booking data: duration of the commercial relationship + 5 years (legal obligations)
Invoicing data: 10 years (accounting obligations)
Browsing data: 13 months maximum
Cookie consent: 13 months

6. Data recipients

Your data may be passed to the following recipients:

Our internal team: to manage bookings and services
Stripe: for secure payment processing
Railway: website hosting
Supabase: database hosting
Resend: sending confirmations and communications
Google Ireland Limited: audience measurement through Google Analytics and Google Tag Manager, set only after you consent
Microsoft Ireland Operations Limited: usage analysis through Microsoft Clarity, which records how your visit unfolds (mouse movement, clicks, scrolling), set only after you consent
Cloudflare: content delivery, anti-bot protection on forms and inbound e-mail routing

We never sell your data to third parties. Processors are bound by contractual clauses compliant with the GDPR.

7. International transfers

Some of our processors (Railway, Supabase, Stripe, Resend, Google, Microsoft, Cloudflare) are based in the United States or may transfer data there. These transfers are governed by:

The EU-US Data Privacy Framework
Standard contractual clauses approved by the European Commission

8. Data security

AUREARGENT implements appropriate technical and organisational measures to protect your data:

Encryption of communications (HTTPS/TLS)
Secure authentication of access
Regular, encrypted backups
Access restricted to authorised staff
Access monitoring and anomaly detection

9. Your rights

In accordance with the GDPR, you have the following rights:

Right of access: obtain a copy of your data
Right to rectification: correct inaccurate or incomplete data
Right to erasure: request the deletion of your data
Right to restriction: restrict the processing of your data
Right to portability: receive your data in a structured format
Right to object: object to the processing of your data
Right to withdraw consent: withdraw your consent at any time

To exercise these rights, contact us at: [email protected]

We will respond to your request within 30 days. Where there is doubt as to your identity, we may ask you for proof of identity.

10. Complaints

If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the French data protection authority (CNIL):

CNIL
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr

11. Amendments

This policy may be amended at any time. Amendments take effect upon publication on the Website. The date of the last update is shown below.

Last updated: March 2026

This English version is provided for information purposes only. In the event of any discrepancy, the French version prevails.