Privacy Policy

1. Data controller

The data controller is Néo Lebouteiller, sole trader (Digikart), 52 boulevard Villebois-Mareuil, 35000 Rennes, France. Contact: contact@digikart.fr.

2. Data collected

Concerning the merchant (Client)

• Email, business name, town, address (optional).
• Password (stored encrypted, never in clear text).
• Subscription data handled by Stripe (Digikart does not store the bank card).

Concerning the end customer

• A card identifier (anonymous), the number of stamps and the date of visits.
• A first name, only if voluntarily provided.
• No banking or sensitive data is collected.

3. Purposes

• Provide the loyalty card service and count visits.
• Manage accounts, authentication and security.
• Manage billing and the subscription.
• Send the notifications requested by the merchant.

4. Legal bases

Performance of the contract (providing the service), legitimate interest (security, improvement), legal obligation (billing) and, where applicable, consent.

5. Recipients and processors

• OVH : server hosting (France).
• Stripe : payment processing.
• Apple and Google : generation of Wallet cards.
• No data is sold to third parties.

6. Retention period

Account data is kept while the account is active, then deleted if the account is deleted. Billing data is kept in accordance with legal obligations (10 years).

7. Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction, objection and portability. The merchant can delete their own account and all their data from their area. To exercise your rights: contact@digikart.fr.

You may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

8. Cookies and local storage

The Service uses the browser's local storage (localStorage) to: keep the sign-in session, remember a trusted device (2FA, 30 days) and link an end customer to their loyalty card. No advertising or third-party tracking cookie is used.

8 bis. Audience measurement

We measure traffic to our public pages with an in-house tool, hosted on our own servers (no third-party service, no Google Analytics). Your IP address is never recorded, and no data allowing you to be identified is stored.

This measurement uses a single cookie, set by digikart.fr and named dk_v. It contains a random value, with no information about you, whose only role is to avoid counting you twice when you come back to the site, and to know through which channel you found us. Its lifetime is 13 months and it is never extended automatically: it is only set again if it has disappeared.

This cookie serves only to produce aggregated traffic statistics. It cannot be read by JavaScript, is never passed to a third party, allows no cross-referencing with another site, and is used for no advertising purpose. In line with the CNIL's recommendations, audience measurement limited in this way is exempt from consent : which is why you see no banner on this site.

If your browser sends a do-not-track signal (Global Privacy Control, or Do Not Track), no cookie is set and the measurement falls back on a non-reversible technical identifier, regenerated every day and stored nowhere on your device. You can also delete this cookie at any time from your browser settings, with no consequence for your use of the site.

9. Security

Communications are encrypted (HTTPS), passwords hashed, access protected by two-factor authentication and a firewall. Daily backups are made.

10. Contact

For any question about the protection of your data: contact@digikart.fr.