Privacy Policy
Last updated: 28 October 2026
This policy explains what personal data Relievo collects, why, how long it is kept, and what your rights are. It complements the legal notice, which contains the identity of the publisher and the site's host.
Relievo's website is designed to collect the minimum: no advertising cookies, no cross-site tracking, no selling of data.
1. Data controller
The data controller is the publisher of the Relievo website, whose full details appear in the legal notice. For any question about your data: contact@relievo.fr.
2. What we collect, and why
Customer account
When you create an account: your e-mail address, your name and a password (stored hashed, never in clear text). Purpose: managing your account and orders. Legal basis: performance of the contract.
Orders and payment
The information needed for your order and its delivery. Payment is processed by Stripe: card numbers do not pass through our servers and are never stored there. Purpose: processing and delivering the order, meeting our accounting obligations. Legal basis: performance of the contract and legal obligation. By default, your delivery address is deleted from our servers as soon as the order is complete (box ticked at checkout, which you can untick); only the invoice keeps it. At the same time, you can object to the commercial use of photos of your map.
Proof of acceptance of the terms of sale
At the time of payment, we record proof that you accepted the terms of sale: the date, the exact version of the terms accepted, your IP address and your device type (user-agent). Purpose: holding enforceable proof of your agreement to the contract, in the event of a dispute. Legal basis: performance of the contract and legitimate interest in proving the agreement. Retention: about 5 years (commercial limitation period).
Quote requests and prepared maps
When you request a quote: your name, your e-mail address and, if you provide them, your phone number and your company, along with the description of your project. When we prepare a map for you: the e-mail address to which we offer it. Purpose: replying to you and drawing up the quote or offer. Legal basis: pre-contractual measures taken at your request.
Waiting list
If you ask to be notified when orders reopen: your e-mail address and your name, to notify you once. Legal basis: consent.
Audience measurement
To understand site traffic, we count page views without cookies and without any identifier. The IP address is truncated (the last block is removed) then hashed with a salt that changes every day: it cannot re-identify you, nor track you from one day to the next. Results are aggregated (number of visits, popular pages). We also measure, in an anonymous and aggregated way, page behaviour (scroll depth, clicked areas) to improve usability — without any identifier. We also measure the 3D previews requested (duration, size of the area, location rounded to about ten kilometres), with the same truncated and hashed IP address, to improve the speed of the service. Purpose: statistics and site improvement. Legal basis: legitimate interest (audience measurement exempt from consent, in line with the French CNIL's guidelines).
E-mails
Order tracking e-mails are sent to you as part of the contract. If you subscribe to the newsletter, this is based on your consent, which you can withdraw at any time via the unsubscribe link.
Technical logs
Our server keeps technical logs (including the IP address) for security and proper operation, for a limited time.
3. Cookies
The site uses no tracking or advertising cookies. Only strictly necessary technical cookies are used: the session (login, cart) and, if you choose a language, a cookie that remembers it for one year. These do not require consent.
4. Who has access to your data
Your data is neither sold nor rented. It may be processed by our providers, strictly for the needs of the service:
- the site's host (see legal notice);
- Stripe, for secure payment;
- our e-mail delivery provider;
- Anthropic (Claude AI assistant), which may read the e-mails you send us to help us prepare our replies. This content is not used to train its models;
- Cloudflare, through which all of the site's traffic passes (your IP address goes through its servers), and which forwards e-mails sent to our @relievo.fr addresses to our mailboxes;
- Google: our mailboxes are hosted by Gmail; if you use "Continue with Google", Google sends us your name and e-mail address;
- your order's carrier (Mondial Relay or La Poste / Colissimo), which receives your name and delivery address; on the payment page, the parcel-point picker is provided by Mondial Relay and loads from its servers.
Some of these providers may process data outside the European Union; such transfers are then framed by appropriate safeguards (European Commission standard contractual clauses).
5. Retention periods
- Customer account: as long as the account exists; deleted on request.
- Orders and invoices: kept for the time required by our accounting and tax obligations (up to 10 years for accounting records).
- Delivery address: deleted as soon as the order ends (completed, cancelled or refunded), unless you unticked this option at checkout; erased 7 days after entry if the order is never paid. The invoice keeps it.
- Proof of acceptance of the terms: about 5 years.
- Quote requests and prepared maps: 3 years after your request, unless they become an order.
- E-mail exchanges: 3 years after the last contact.
- Waiting list: deleted 30 days after we have notified you.
- Audience measurement: detailed data is kept for about 13 months, then aggregated into simple anonymous counters (per-visit data, including the truncated hashed IP, is then deleted).
- Technical logs: 14 days (web server), 8 weeks (automated tasks), 12 months (security log), 24 months (history of actions on orders).
- Backups: encrypted, kept for 3 months at most; until they expire, they may contain data deleted in the meantime.
6. Your rights
Under the GDPR, you have the rights of access, rectification, erasure, objection, restriction and portability of your data. To exercise them, write to contact@relievo.fr. We respond within one month.
You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), if you believe your rights are not being respected.
7. Changes
This policy may change. The last-updated date appears at the top of the page; the version in force is always the one published here.