Privacy policy

Last updated: 14 September 2026

This policy describes how SUPERMAT, published by Dylan ROLLAT — Sole trader (Entrepreneur individuel, EI), 4 Avenue de Colmar, 68100 MULHOUSE, SIRET 841 634 660 00028, processes your personal data. The data controller is Dylan ROLLAT, reachable at supermat.contact@gmail.com.

Data we collect

  • Customer account: name, email address, password (encrypted), credit balance.
  • Orders: billing and delivery addresses, cart contents, purchase history. Payment data is handled directly by the payment provider, we neither receive nor store it.
  • Studio: the images you upload, the text descriptions you enter, and the artwork generated from them.
  • Browsing: IP address, device and browser type, pages viewed, via cookies and similar technologies.

Purposes and legal bases

  • Performance of the contract (art. 6.1.b GDPR): account management, order processing and delivery, artwork generation, after-sales service.
  • Legal obligation (art. 6.1.c): retention of invoices, accounting.
  • Legitimate interest (art. 6.1.f): fraud prevention, service security, site improvement.
  • Consent (art. 6.1.a): non-essential cookies and marketing communications. Revocable at any time.

The Studio and your images

The images you upload and the descriptions you enter are sent to our generation service to produce artwork. That service is hosted by Render Services, Inc., 525 Brannan Street, San Francisco, CA 94107, United States.

This processing therefore involves a transfer of data outside the European Union. It is covered by the European Commission's standard contractual clauses.

Your images remain your property. We do not use them to train a model, nor for commercial or promotional purposes, without your express agreement.

Recipients

Shopify International Limited (store hosting), the printing provider, the carrier, the payment provider, and Render Services, Inc. for the Studio. No data is sold.

Retention periods

  • Customer account: until deletion, then 3 years of inactivity.
  • Invoices and accounting records: 10 years (legal obligation).
  • Uploaded images and generated artwork: 12 months.
  • Cookies: 13 months maximum.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to give instructions on what happens to your data after your death. Exercise them at supermat.contact@gmail.com.

You may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at www.cnil.fr.

Cookies

Non-essential cookies are only set after your consent, collected through the banner shown on your first visit. You can change your choice at any time from the Cookie preferences link in the footer.

Security

Traffic is encrypted (HTTPS). Passwords are stored as hashes. As no system is infallible, we cannot guarantee absolute security.

Changes

This policy may be updated. The last updated date appears at the top.