Privacy Policy

UK note: UK residents are protected by the UK GDPR and the Data Protection Act 2018 (DPA 2018), which broadly mirror the EU GDPR. The rights listed below apply equally to UK and EU consumers. The supervisory authority for UK residents is the Information Commissioner's Office (ICO), not the CNIL. Both are mentioned in Section 8.

This policy describes how SAS Virage processes the personal data of users and customers of the website gigifrance.fr (hereinafter "the Website"), in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the "GDPR") and, for UK residents, the UK GDPR and the Data Protection Act 2018.

1. Data Controller

The data controller for personal data is:

• SAS Virage — simplified joint-stock company under French law, share capital €10,000
• Registered office: 10 rue Louis Vicat, 75015 Paris, France
• SIREN: 892 260 712 — RCS Paris B 892 260 712
• VAT number: FR24892260712
• Phone: +33 7 80 80 67 64

Contact for all personal data questions and exercise of rights: contact@gigifrance.fr.

2. Data Collected

The Website collects only the data necessary for the purposes described below (data minimisation principle):

2.1 Data Provided Directly by the User

• Identity: first name, last name.
• Contact details: postal address (delivery and billing), email address, phone number.
• Order data: products ordered, amount, order history.
• Quote request data (custom-made products): configured characteristics (shape, dimensions, depth), contact details, any message.
• Contact data: information submitted via the contact form, email or WhatsApp.
• Account data (if applicable): login credentials (email address and a password stored in encrypted / hashed form).

2.2 Payment Data

Payment data (credit card number, etc.) is collected and processed directly by the payment service provider Mollie. SAS Virage does not have access to the full card number and does not store it.

2.3 Automatically Collected Data

• Technical connection data: IP address, browser type, operating system, pages visited, timestamp, for the purposes of Website operation, security and audience measurement.

Note: Website audience measurement is carried out using a privacy-friendly solution (Plausible Analytics), which does not use cookies and does not collect data that could directly identify the user. See the Cookie Policy.

3. Purposes and Legal Bases

4. Recipients of Data

Personal data is intended for the authorised departments of SAS Virage. It may be shared with the following data processors, acting on behalf of and on the instructions of the data controller, under data processing agreements compliant with Article 28 GDPR:

Data is not sold or transferred to third parties for commercial purposes. It may be shared with administrative or judicial authorities when required by law.

5. Retention Periods

6. International Data Transfers

Most of the data processors used (in particular Mollie, Brevo and Hostinger) process data within the European Union. Certain services — in particular Cloudflare (Turnstile) — may process data outside the European Union, notably in the United States. Such transfers are governed by appropriate safeguards under the GDPR:

• certification under the EU-US Data Privacy Framework (DPF) where the provider is certified, and/or
• standard contractual clauses adopted by the European Commission, supplemented where necessary by additional measures.

For UK residents: international transfers are governed by the UK GDPR international transfer rules (UK adequacy regulations, UK standard contractual clauses or other transfer mechanisms as applicable).

7. Security

SAS Virage implements reasonable technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or access: encryption of communications (HTTPS), secure hosting, access controls, passwords stored in a non-reversible manner (hashing), use of a certified payment service provider.

8. Your Rights

Under the GDPR (Articles 15 to 22) and, for UK residents, the UK GDPR, you have the following rights regarding your personal data:

• Right of access: obtain confirmation that data concerning you is being processed and receive a copy.
• Right of rectification: have inaccurate or incomplete data corrected.
• Right to erasure ("right to be forgotten"), under the conditions provided for by the GDPR.
• Right to restriction of processing.
• Right to data portability: receive your data in a structured, commonly used and machine-readable format.
• Right to object to processing based on legitimate interests, and right to object to direct marketing at any time.
• Right to withdraw your consent at any time, where processing is based on consent (without affecting the lawfulness of processing carried out before withdrawal).

How to exercise your rights: by sending your request to contact@gigifrance.fr, or by post to SAS Virage, 10 rue Louis Vicat, 75015 Paris, France. The Seller may ask you to verify your identity in case of reasonable doubt. A response will be provided within one (1) month of receiving the request (extendable by two months for complex requests).

Complaints:

• EU residents may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): 3 Place de Fontenoy, 75334 Paris Cedex 07, www.cnil.fr, or with the supervisory authority of their country of residence.
• UK residents may lodge a complaint with the Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, www.ico.org.uk.

9. Cookies

The use of cookies and other trackers is described in the Cookie Policy.

10. Changes

This policy may be amended to reflect legal, regulatory or operational developments at SAS Virage. The applicable version is the one published on the Website at the date of consultation. The date of the last update is shown below.

---

Privacy Policy — version 1.1 dated 7 July 2026.