Privacy Policy

Last updated: 23 March 2026

Who is responsible?

Tixian is responsible for processing the data collected through this website.

Data collected

As part of the use of the website and customer relationship management, we may collect the following categories of data:

account and contact data: surname, first name, email address;
technical data: connection logs, IP addresses, device or browser information, cookies and other strictly necessary trackers;
order and billing data where a purchase is made;
payment and order data processed via our provider Stripe.

As part of order processing, the following data in particular may be collected or processed via our payment provider Stripe:

first and last name;
email address;
postal address, including street address, postal code and city;
bank card information, processed exclusively by Stripe.

Bank card data is not stored on our servers.

Purposes and legal bases

The processing activities implemented pursue the following purposes:

to provide the service, manage the user account and provide support: performance of the contract;
to process orders, payments, billing and possible refunds: performance of the contract;
to ensure website security, prevent fraud and protect forms: legitimate interest;
to comply with our accounting, tax and legal obligations: legal obligation;
to send product or commercial communications when required by law and on the basis of consent where such consent is required.

Retention periods

Data is retained for periods proportionate to its purpose, in particular:

account and support data: for the duration of account use, then up to 3 years from the last meaningful contact;
invoices and accounting documents: 10 years;
technical logs and security data: from 3 to 12 months depending on their purpose;
data relating to legal obligations or fraud prevention: for as long as necessary to comply with those obligations.

Sharing and processors

Data may be transmitted to duly authorized technical or contractual service providers, in particular for hosting, payment, security, assistance and maintenance.

Payment processing is handled by Stripe Payments Europe, Ltd. Stripe intervenes as part of payment operations and applies its own security and compliance rules. Stripe is certified as a PCI DSS Level 1 service provider.

To learn more, you can consult Stripe’s privacy policy: https://stripe.com/privacy

Transfers outside the EU

Where certain providers operate outside the European Union or involve access from a third country, appropriate safeguards are implemented, in particular by means of the European Commission’s standard contractual clauses where required.

Cookies and local storage

The website uses only storage mechanisms and trackers that are necessary or useful for its operation and for securing the services offered, in particular:

technical cookies necessary for the proper functioning of the website;
cookies or storage mechanisms intended to remember certain user preferences;
Stripe cookies required for the secure payment module to operate;
trackers used to retain the choice expressed by the user regarding cookies, where applicable.

TIXIAN does not use advertising cookies or behavioural targeting cookies on this website.

If certain website forms use a third-party anti-bot protection service subject to consent, that service is loaded only after the user’s explicit agreement.

Your rights

In accordance with the applicable regulations, you have the following rights, subject to the legal conditions:

right of access;
right to rectification;
right to erasure;
right to restriction of processing;
right to object;
right to data portability;
right to withdraw your consent at any time where the processing is based on it.

You can exercise your rights at the following address: support@tixian.fr

You also have the right to lodge a complaint with the CNIL.

Security

We implement reasonable technical and organizational measures designed to ensure the security, integrity and confidentiality of data, including access security, encryption of flows where appropriate, logging and restricting access to authorized persons only.

Updates

This policy may be amended at any time to reflect legal, technical or operational developments. The date of the latest update appears at the top of the document.