Privacy Policy

This Privacy Policy describes how Studio Idan SAS (“Holdon Paris,” “we”) collects and processes your personal data when you visit the website holdonparis.com or place an order, in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of January 6, 1978, as amended.

1. Data controller

The data controller is Studio Idan SAS, 8 Villa Soutine, 75014 Paris, France, order@holdonparis.com.

2. Data we collect

• Identity and contact data: last name, first name, mailing address, email, phone number.
• Order data: products ordered and their selected options, amount, purchase history.
• Payment data: processed directly by our provider Stripe; we do not store your card numbers.
• Browsing data: IP address, browser type, pages viewed, collected through cookies (see dedicated section).

3. Purposes and legal bases

• Order, payment, and delivery management, performance of the contract.
• Customer service and order tracking, performance of the contract / legitimate interest.
• Accounting and tax obligations, legal obligation.
• Transactional emails (confirmation, shipping), performance of the contract.
• Newsletter and marketing communications, consent (where applicable).
• Audience measurement and website improvement, consent (non-essential cookies).

4. Recipients and processors

Your data is accessible to our teams and shared, strictly as needed, with our processors:

• Stripe (Stripe Payments Europe, Ltd, Ireland), payment processing.
• Brevo (Sendinblue SAS, France), sending transactional emails and, where applicable, the newsletter.
• Boxtal (Boxtal SAS, France) and partner carriers, package preparation and delivery.
• Hostinger (Hostinger International Ltd), website hosting.

We never sell or rent your personal data to third parties.

5. Transfers outside the European Union

Some providers may process data outside the European Union. In such cases, these transfers are governed by appropriate safeguards (European Commission standard contractual clauses or equivalent mechanisms).

6. Data retention periods

• Customer account data: duration of the business relationship, then 3 years from the last contact.
• Accounting documents and invoices: 10 years (legal obligation).
• Marketing data (newsletter): until consent is withdrawn, then a maximum of 3 years.
• Cookies: a maximum of 13 months.

7. Your rights

You have the right to access, correct, delete, object to, restrict, and port your data, as well as the right to set guidelines for what happens to it after your death. You can exercise these rights at order@holdonparis.com. If you encounter any issue, you may file a complaint with the CNIL (www.cnil.fr).

8. Cookies

The website sets cookies strictly necessary for its operation (cart, session, payment security) that do not require your consent, as well as, where applicable, audience measurement or marketing cookies subject to your prior consent via the dedicated banner. You can change your choices at any time.

9. Contact

For any questions regarding this policy or your personal data: order@holdonparis.com.

Last updated: May 28, 2026.