PRIVACY POLICY
1. Who I am
Flow Edit Studio – Caroline Lamamy
1 Lotissement Les Cèdres, 31330 Merville, France
SIRET: 919 197 465 00017
Email: hello@floweditstudio.com – Tel: +33 (0)6 74 32 49 61
Data Controller: Caroline Lamamy
2. Data collected
Depending on the situation:
Contact / quote / order: name, surname, email, phone number, company, postal address, project notes.
Online payment: payment information processed by third-party providers (Wix Payments / Stripe / PayPal).
Flow Edit Studio never has access to your banking details, which are managed by external secure systems.
Browsing: technical cookies, audience measurement (page views, device type, truncated/shortened IP if configured).
Client content: visuals, logos, and brand elements provided for the photoshoot.
3. Purposes & legal bases
-
Processing requests and orders (quotes, contract performance, invoicing, delivery of images) — contract performance (Art. 6-1 b GDPR).
-
Payment & accounting — legal obligation (Art. 6-1 c).
-
Client relationship / follow-up communication (responses, updates, service information) — legitimate interest (Art. 6-1 f).
-
Newsletter (if you subscribe) — consent (Art. 6-1 a).
-
Analytics and website improvement — legitimate interest (Art. 6-1 f) or consent, depending on cookie settings.
4. Payments & subprocessors
Flow Edit Studio uses GDPR-compliant service providers: Wix (hosting/website), Wix Payments / Stripe / PayPal (payment processing), Google Workspace (email), WeTransfer / Google Drive (file delivery).
Some providers may process data outside the EU with adequate safeguards (Standard Contractual Clauses and/or additional measures).
5. Cookies
Technical cookies: essential for website operation (security, cart, language).
Analytics / marketing cookies: subject to your consent via the cookie banner.
You can manage your preferences at any time via “Manage my cookies.” Refusal may limit certain features (e.g., shopping cart).
6. Data retention periods (main categories)
-
Leads / contact forms: 3 years after the last interaction.
-
Invoicing documents: 10 years (legal obligation).
-
Delivered files (portfolio / project archives): up to 5 years (indicative licensing duration) unless otherwise requested.
-
Cookies: depend on their nature (13 months for consent-based trackers, unless otherwise configured).
7. Data sharing
Flow Edit Studio does not sell your personal data. Data may be shared with:
-
Subprocessors (see §4),
-
Public authorities if legally required,
-
Professional advisors (accountant, legal counsel) strictly within the scope of their duties.
8. Your rights (GDPR)
You have the following rights: access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent at any time.
To exercise your rights, contact: hello@floweditstudio.com.
Requests are handled within one month.
9. Security
Reasonable technical and organizational measures are in place (HTTPS, restricted access, backups, compliant subprocessors).
As no Internet transmission is entirely secure, Flow Edit Studio implements security measures proportionate to the level of risk.
10. Client content & portfolio
Items provided (products, logos, visuals) are used solely to perform the service.
Unless explicitly refused in writing beforehand, Flow Edit Studio may use certain images for portfolio and promotional purposes (website, social media, printed materials, contests, professional publications, etc.).
See also the Terms & Conditions.
11. Minors
The website and services are not intended for minors.
If you believe a minor has submitted personal data, please get in touch with hello@floweditstudio.com to request deletion.
12. Transfers outside the EU
Some providers (e.g. Wix, Stripe, Google) may process data outside the EU.
Flow Edit Studio ensures appropriate safeguards are in place (Standard Contractual Clauses and additional measures).
You may request details of these safeguards by writing to hello@floweditstudio.com.
13. Updates
Flow Edit Studio reserves the right to update this policy to reflect changes in its services, legal requirements, or third-party providers.
Last updated: November 12, 2025
