Privacy Policy

1. Introduction

The company Cartoonova SAS (hereinafter “Cartoonova”, “we”, “our”) is committed to protecting the privacy of its users and customers (hereinafter “you”, “your”).

This Privacy Policy describes how we collect, use, store and protect your personal data when you use our website cartoonova.com (hereinafter “the Site”) and our personalised caricature creation services.

Legal reference texts: the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and the amended French Data Protection Act of 6 January 1978 (loi « Informatique et Libertés »).

2. Data controller

3. Data collected

In the course of providing our services, we may collect the following categories of data:

3.1 Identification data

• Surname and first name
• E-mail address
• Postal address (for deliveries of printed products)
• Telephone number (optional)

3.2 Order data

• Order details (format, options, print medium)
• Photos submitted for producing the caricature
• History of orders and of exchanges with customer service

3.3 Payment data

• Payment data (card number, etc.) is processed directly by our secure payment providers (Stripe, PayPal) and is never stored on our servers.

3.4 Browsing data

• IP address
• Browser type and operating system
• Pages viewed and length of visit
• Cookies and session identifiers

4. Purposes of processing

Your personal data is collected and processed for the following purposes:

• Performance of orders: producing the caricature, printing, shipping and delivery tracking.
• Customer relationship management: after-sales service, revisions, responses to your requests.
• Payment: processing and securing transactions.
• Communication: sending order confirmations, delivery notifications and, with your consent, promotional offers.
• Service improvement: anonymised statistical analysis of the use of the Site.
• Legal obligations: retention of invoices and accounting data in accordance with the regulations in force.

Source photos are used to fulfil the order; final portraits are the delivered artworks. Cartoonova does not publish either for promotion (portfolio, social networks, advertising) without separate authorisation that is explicit and revocable. Ordering or uploading photos does not authorise publication. To withdraw authorisation given separately, contact support@cartoonova.com.

5. Legal basis for processing

The processing of your data is based on the following legal bases:

• Performance of the contract: the data required to produce and deliver your order.
• Consent: for sending marketing communications.
• Legitimate interest: for improving our services and preventing fraud.
• Legal obligation: for retaining accounting and tax data.

6. Retention period

• Order data: 3 years after the last order.
• Source photos and final portraits are hosted through public storage links: anyone with the link can access the file. No automatic deletion on a fixed schedule is currently implemented for these files; they may remain stored after delivery. Removing a thumbnail from the form does not delete the stored file. Deletion requests are reviewed manually at support@cartoonova.com, taking applicable legal obligations into account; no automatic deletion deadline is guaranteed.
• Accounting data: 10 years in accordance with legal obligations.
• Browsing cookies: 13 months maximum.
• Prospecting data: 3 years after the last contact.

7. Data sharing

Your personal data is never sold to third parties. It may be shared with:

• Our production providers: only the photos and instructions required to produce the caricature.
• Payment providers: Stripe and PayPal for the secure processing of payments.
• Printing and delivery services: delivery address for shipping printed products.
• Host: Vercel Inc. for the technical hosting of the Site.
• Analytics tools: PostHog.

All our providers are subject to strict contractual obligations of confidentiality and data protection in compliance with the GDPR.

8. International transfers

Some of your data may be transferred outside the European Union (hosting in the United States via Vercel). These transfers are governed by the European Commission’s Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.

9. Cookies

Cookies needed to operate the site remain active. PostHog analytics is enabled by default when no choice is saved. No automatic banner is shown. Previously saved refusals are respected. Decline blocks PostHog. The ChatGPT advertising pixel is disabled and is not loaded, even with consent. Continuing to browse does not give consent. Your choice is saved in this browser. Use the preferences button below to change it.

10. Your rights

In accordance with the GDPR, you have the following rights over your personal data:

• Right of access: to obtain confirmation that your data is being processed and to obtain a copy of it.
• Right to rectification: to correct inaccurate or incomplete data.
• Right to erasure: to request the deletion of your data (“right to be forgotten”).
• Right to data portability: to receive your data in a structured and readable format.
• Right to object: to object to the processing of your data on legitimate grounds.
• Right to restriction: to restrict the processing of your data in certain circumstances.
• Right to withdraw your consent: at any time for processing based on consent.

To exercise any of these rights, contact us at: support@cartoonova.com

We undertake to respond to your request within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, the French data protection authority): www.cnil.fr.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration:

• SSL/TLS encryption of all communications
• Restricted access to data on a “need-to-know” basis
• Regular, secure backups
• Access monitoring and logging

12. Minors

The Site is not intended for minors under the age of 16. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe that your child has provided us with data, please contact us so that we can delete it.

13. Changes

We reserve the right to amend this Privacy Policy at any time. Any change will be published on this page together with the date of update. We invite you to consult this page regularly.

14. Contact

For any question concerning the protection of your personal data: