Controller: EARL PECH DES CEDRES, Saint-Quintin, 82110 Cazes-Mondenard, France. Personal data contact: contact@legoiconsboutique.com. We process names, contact details, enquiries, information needed for an assignment and order or payment references. Mandatory fields are marked on forms; without them, we cannot process the relevant request. Do not send sensitive information or documents unrelated to your enquiry. Requested pre-contractual steps support enquiries and quotations; contract performance supports orders and services; legal obligations support accounting and withdrawal records; our legitimate interest in preventing abuse supports website security. Using the withdrawal function does not require marketing consent. Recipients are authorised staff and necessary providers: Vercel (hosting), Supabase (Frankfurt database) and Stripe (payments). Card details are entered with Stripe; we do not store full card numbers. No personalised advertising is configured on this website. Analytics is disabled. Providers outside the EEA may process data, including in the United States. Applicable contractual mechanisms and safeguards are described at https://vercel.com/legal/dpa, https://supabase.com/legal/dpa and https://stripe.com/legal/dpa. You can request information about these safeguards using the contact above. Retention policy for the business to apply: enquiries without an order, three years after the last exchange; service and withdrawal files, five years after closure, subject to longer legal requirements; accounting records, ten years. Electronic contracts of at least €120 are retained for ten years under applicable rules and made accessible to customers on request. Unnecessary information is deleted or placed in restricted archives. A dispute may justify adjusted retention. Administration sessions expire after a maximum of eight hours. You may request access, correction, erasure, restriction, objection where applicable and portability. Statutory retention obligations may limit these rights. Identity evidence is requested only if there is reasonable doubt. You can complain to the French supervisory authority: https://www.cnil.fr/fr/adresser-une-plainte. Version: 29 October 2026.

Privacy policy