Privacy Policy | PhotoDatingLab

Key information (Data Controller)

Service / Website PhotoDatingLab

Legal entity IHTConsulting

Legal form SARL (limited liability company)

SIREN 503 726 424 — RCS Paris

VAT number FR85503726424

Registered office ZAC LEONARD DE VINCI BAT D4 – 16 avenue Graham Bell, 77600 Bussy-Saint-Georges, France

Hosting provider HEGERYS

Payments Processed securely via Stripe (we do not store full card details)

Privacy contact Use the support form available on the website (recommended: include your order number).

This policy applies to visitors, customers, and anyone submitting photos for processing.

1) Personal data we collect

A. Data you provide

Order data: information needed to purchase and deliver the service (e.g., name and billing details where applicable, order metadata).
Uploaded photos: images you submit for processing and generation of your pack.
Support messages: information you share when contacting support (including attachments you add).

B. Data collected automatically

Technical data: IP address, device/browser information, approximate location (derived from IP), logs, and security events.
Cookies / local storage: essential session and security mechanisms required for the site to function.

Important: your uploaded photos may include sensitive information by nature (faces, background context). We do not use your photos to identify you in a biometric way (no biometric identification).

2) Why we process data (purposes) and legal bases

Purpose

Legal basis

Process your order and deliver the digital pack

Performance of a contract

Generate your images (AI processing + quality review)

Performance of a contract

Customer support, troubleshooting, dispute handling

Performance of a contract / Legitimate interests

Fraud prevention, security, abuse detection

Legitimate interests

Accounting, tax, and legal compliance

Legal obligation

Optional cookies (if implemented on the site)

Consent

We define and document legal bases for processing as required by data protection rules.

3) How your photos are used

Uploaded photos are used strictly to process your order: generate variations, apply automated filtering, and perform human review to deliver a usable pack.

No sale of your photos.
No public sharing by PhotoDatingLab.
No biometric identification or matching against databases.

If you include third-party people in your uploads, you confirm you are authorized to share those images.

4) Who we share data with (recipients)

Stripe for payment processing and fraud prevention (acting as an independent controller and/or processor depending on context).
Hosting provider (HEGERYS) for infrastructure and storage as required to operate the website.
Service providers (processors) used to operate, secure, and maintain the service (access limited to what is necessary).
Authorities if required by law, court order, or to protect our legal rights.

We only share data on a need-to-know basis and under appropriate contractual safeguards where required.

5) International data transfers

Depending on the location of service providers, personal data may be processed outside the European Economic Area (EEA). When this happens, we rely on appropriate transfer mechanisms (such as contractual safeguards) to protect your data.

For Stripe-specific practices, you can consult Stripe’s public privacy documentation on their website.

6) Data retention

Uploaded photos: retained only as long as necessary to process your order, handle quality reruns, and provide support.
Support requests: retained for the time needed to resolve your request and manage potential disputes.
Billing / accounting records: retained as required by applicable legal obligations.
Security logs: retained for a limited period to detect abuse and protect the service.

7) Security

We implement technical and organizational measures to protect personal data against unauthorized access, alteration, loss, and misuse. Payments are handled by Stripe; we do not store full payment card details.

8) Your rights (GDPR)

You may have rights including access, rectification, erasure, restriction, objection, and portability, depending on the situation. We must facilitate the exercise of these rights.

How to request: use the website support form and specify “Privacy request”.
What to include: your order number (if applicable) and enough information to identify the data concerned.

Complaint: you may lodge a complaint with your local data protection authority. In France, this is the CNIL.

9) Cookies

We use essential cookies/local storage to keep the website functioning (sessions, security, and basic preferences). If optional cookies are implemented (for example, analytics), they must be disabled by default until you provide consent.

10) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The version published on this page is the current version.