Buiiild← Back to home

Privacy policy

DENIM (ZI du Prunay, 136 à 140 rue Léon Jouhaux, 78500 Sartrouville, France) is the controller of the personal data collected on buiiild.com and in the management workspaces of client salons. Contact: [email protected].

Data collected

  • Account and trial creation: salon name, city, manager's name and e-mail address, password (hashed, never readable).
  • Contact form: name, e-mail address, telephone number (optional), message.
  • Subscription: payment data is processed directly by Stripe — we never see or store your card number.
  • Salon content: texts, photos, videos and information published by each salon on its site.
  • Technical data: connection logs (IP address, timestamp) for security purposes.

Purposes and legal bases

  • Providing the service and the management workspace — performance of the contract.
  • Billing the subscription — performance of the contract, legal obligations.
  • Replying to messages — legitimate interest / pre-contractual measures.
  • Security, prevention of abuse and bots — legitimate interest.
  • Marketing (e-mail/SMS) — only with your consent, which can be withdrawn at any time.

Recipients

Data is never sold. It passes only through our technical processors: Hostinger (hosting), Stripe (payment), Cloudflare (bot protection) and our e-mail/SMS sending provider. Some processors may be located outside the European Union; these transfers are governed by appropriate safeguards (standard contractual clauses).

Retention periods

  • Account and content: for the whole duration of the contract, then deletion or anonymisation.
  • Invoices: 10 years (legal obligation).
  • Contact messages: 3 years after the last exchange.
  • Technical logs: 12 months.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. To exercise them: [email protected]. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Security

Encrypted connections (HTTPS), hashed passwords, server-side sessions, rate limiting, daily backups and strict separation of each salon's data.