Privacy policy

———, ———.

For any question about your data: contact@cultureblank.com

Customer account: email address, name, and for businesses the company name, country and phone number.

Orders: delivery address, order contents, history and status.

Customisation: the files you upload (logos, artwork) and their placement.

Payment: handled by Stripe. No card number is transmitted to or stored by Culture Blank; only a transaction identifier and the payment status are retained.

No special-category data within the meaning of the GDPR is collected.

Performance of the contract: account creation, order processing and delivery, after-sales service.

Legal obligation: retention of accounting records and invoices.

Legitimate interest: site security, fraud prevention, answering enquiries sent through the contact form.

No data is sold, rented or shared with third parties for advertising purposes.

Supabase — database and file hosting, within the European Union (Frankfurt).

Stripe — payment processing (United States and Ireland).

Resend and Amazon SES — transactional email delivery (United States).

Cloudflare — site hosting and delivery (United States).

Transfers outside the European Union are covered by the European Commission's standard contractual clauses.

Customer account: until the account is deleted, then removed within thirty (30) days.

Orders and accounting records: ten (10) years, per French accounting obligations.

Customisation files: kept as long as needed for production and after-sales service, then deleted on request.

Contact form messages: three (3) years from the last exchange.

You have the right to access, rectify, erase, restrict, object to and port your data.

To exercise them, write to contact@cultureblank.com. You will receive a reply within one month.

You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

The site uses only cookies strictly necessary for it to work: keeping you signed in, and remembering your language choice.

Such technical cookies are exempt from prior consent. No advertising or analytics cookies are set, and no consent banner is therefore displayed.

Should an analytics tool ever be added, this policy would be updated and a consent banner put in place.