PRIVACY POLICY — EXCLUSIVESTICKERS.COM

Last updated: August 21, 2026

PREAMBLE

AV DIGITAL (hereinafter "we," "our," or "the Operator") places great importance on the protection of your personal data and respect for your privacy.

This Privacy Policy aims to inform you about how we collect, use, share, and protect your personal data in connection with your use of the site https://exclusivestickers.com (hereinafter the "Site").

This Policy is established in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the French Data Protection Act of January 6, 1978, as amended.

Article 1 – DATA CONTROLLER

The controller of your personal data is:

AV DIGITAL SAS with a capital of €20,000 Registered office: 19 Rue des Ardennes, 21000 Dijon, France RCS Dijon B 883 574 857 Email: [email protected]

Article 2 – PERSONAL DATA COLLECTED

2.1 Types of data collected

A) Identification and contact data:

• Title, first and last name
• Postal address (billing and delivery)
• Email address
• Phone number

B) Professional data (professional clients only):

• Company name
• Contact details

C) Order-related data:

• Products, materials, formats, and quantities ordered
• Order history
• Transaction amounts
• Payment data (processed exclusively by our secure payment providers)

D) Files and designs:

• Visuals uploaded by you in the creation module (images, photographs, logos, text)
• Saved designs and proofs generated
• Design validation history

E) Connection and browsing data:

• IP address
• Browser type and operating system
• Pages visited
• Cookie data

F) Customer account data:

• Login ID
• Password (encrypted)
• Saved designs

2.2 Mandatory nature of data

Fields marked with an asterisk (*) are mandatory to process your order. Without this information, we will not be able to proceed.

2.3 Special case of Visuals you upload

The visuals you upload to the Site may contain personal data about you or third parties, particularly in the case of photographs of identifiable persons.

In accordance with the Terms of Sale, you guarantee that you have obtained, prior to uploading, the authorization of any identifiable person appearing on a visual, or that of their legal representatives if they are a minor. We process these files solely on your instructions and for the purpose of fulfilling your order.

We recommend that you do not upload files containing sensitive data within the meaning of Article 9 of the GDPR (data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, health status, or sexual orientation). If you choose to do so, this upload is at your own initiative and sole responsibility.

Article 3 – PURPOSES AND LEGAL BASES FOR PROCESSING

Article 4 – DATA RECIPIENTS

Your data is intended for:

A) Our internal departments: sales, customer service, production, accounting, limited to what is necessary for their tasks.

B) Our service providers (sub-processors under GDPR):

• Payment providers: Stripe, PayPal, Apple Pay, Google Pay, for secure payment processing
• Carriers: La Poste / Colissimo, Chronopost, 2Shop, for shipping orders
• Hosting provider: Google Cloud Platform (Google Ireland Limited, Ireland, EU)
• Emailing and communication tools: RESEND
• Analytics tools: GA4 Google
• Manufacturing workshop: for product production

C) Competent authorities: upon legal request (tax administration, customs, judicial or police authorities).

D) Third-party claimants: in the event of a complaint based on an infringement of third-party rights by a visual, information strictly necessary to handle the report may be disclosed within the applicable legal framework.

We do not sell or rent your data to third parties.

Article 5 – TRANSFERS OUTSIDE THE EU

Data is hosted in the European Union (Ireland).

Some of our service providers, particularly payment or digital tool providers, may perform transfers outside the European Union. These transfers are governed by appropriate safeguards provided by Chapter V of the GDPR, such as standard contractual clauses adopted by the European Commission or, where applicable, an adequacy decision.

You can obtain a copy of these safeguards by writing to [email protected].

Article 6 – DATA SECURITY

We implement appropriate technical and organizational measures:

• SSL/TLS encryption for exchanges and payments
• Passwords stored in encrypted form
• Data access restricted to authorized personnel
• Regular backups
• System monitoring
• Staff training

Article 7 – YOUR RIGHTS

Under the GDPR, you have the following rights:

7.1 Right of access — You can obtain a copy of your personal data.

7.2 Right to rectification — You can have inaccurate data corrected.

7.3 Right to erasure — You can request the deletion of your data, subject to our legal retention obligations.

7.4 Right to restriction of processing — You can request the limitation of processing in cases provided by the GDPR.

7.5 Right to data portability — You can retrieve the data you have provided to us in a structured and commonly used format.

7.6 Right to object — You can object to the processing of your data for reasons relating to your particular situation, and at any time and without reason for commercial prospecting.

7.7 Right to withdraw consent — Where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before this withdrawal.

7.8 Right to post-mortem instructions — You can define guidelines for the fate of your data after your death.

7.9 How to exercise your rights?

• By email: [email protected]
• By mail: AV DIGITAL – Protection des Données, 19 Rue des Ardennes, 21000 Dijon

In case of reasonable doubt about your identity, we may ask you for additional proof.

Response time: one month, extendable by two months for complex or numerous requests, in which case you will be informed.

Article 8 – COMPLAINTS TO A SUPERVISORY AUTHORITY

If you believe that the processing of your data constitutes a violation of the GDPR, you can lodge a complaint with the CNIL:

Commission Nationale de l'Informatique et des Libertés (CNIL) 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07 Phone: 01 53 73 22 22 Website: www.cnil.fr

If you reside in another EU Member State, you can also contact the supervisory authority of your country of residence.

Article 9 – COOKIES

The Site uses cookies. See our Cookie Policy for more information on their nature, purpose, and how to manage them.

Article 10 – MINORS

The Site is not intended for minors. Placing an order requires the legal capacity to contract.

Regarding processing based on consent, the age at which a minor can consent alone varies by EU member state. In France, Article 45 of the Data Protection Act sets this age at fifteen; below that, consent must be given jointly by the minor and the holder(s) of parental authority.

We do not knowingly collect data concerning minors. If you are a holder of parental authority and believe your child has provided us with data, contact us at [email protected] so we can proceed with its deletion.

Article 11 – CHANGES TO THE POLICY

We reserve the right to modify this Policy at any time. In the event of a substantial modification, we will inform you by an appropriate means.

We invite you to consult this page regularly.

Article 12 – RETENTION PERIOD

Retention periods are indicated in Article 3. Upon expiry, your data is deleted or anonymized, subject to archiving periods imposed by law.

Article 13 – LINKS TO THIRD-PARTY SITES

The Site may contain links to third-party sites, to which this Policy does not apply. We invite you to consult their own privacy policies.

Article 14 – CONTACT

For any questions regarding this Policy: [email protected]

Last updated: August 21, 2026

By using the Site, you acknowledge having read this Privacy Policy.