Privacy policy

July 11, 2026

Data controller

The controller of your personal data is INVENTISS AIGENCY, SAS, with registered office at 12 rue de Kerante, 56390 Locqueltas, France, owner of the Pilou brand.

For any question about data protection, you can write to team.piloupet@gmail.com.

Data we process

The photo of your pet that you upload to create the portrait. This image may contain technical metadata, for example the date or camera model.

The pet name, if you choose to provide it, which is optional.

Order and contact details: name, email address and shipping address.

Payment data, which is processed directly by the payment provider. We do not store your full card details.

Browsing data and cookies, under the conditions described in our Cookie policy.

Purposes and legal bases

Generating the portrait, producing and shipping your order, and handling customer support. Legal basis: performance of the contract.

Processing your pet photo to generate the portrait. Legal basis: your consent and performance of the contract.

Meeting our legal, accounting and tax obligations, in particular issuing and keeping invoices. Legal basis: legal obligation.

Ensuring the security of the site and improving our products and services. Legal basis: legitimate interest.

Carrying out analytics and sending marketing communications or showing advertising. Legal basis: your consent.

Recipients and processors

To provide the service we share data, only where necessary, with providers acting as processors on our behalf:

An artificial intelligence image generation provider, which processes the photo to create the portrait.

Print-on-demand and logistics providers located in the European Union, which produce and ship the products.

The e-commerce platform and payment provider, for example of the Shopify and Stripe type, which run the store and process payment.

A hosting and content delivery network (CDN) provider.

Analytics and advertising tools, which are only activated with prior consent, for example Pinterest or Google.

We do not sell your personal data. We only share it with third parties when necessary for the service or required by law.

International transfers

Some providers may process data outside the European Union. In such cases we apply appropriate safeguards, such as the standard contractual clauses approved by the European Commission, to ensure an equivalent level of protection.

Retention periods

The original photo you upload is kept only for as long as necessary to produce your order and is deleted within a maximum of 90 days.

Order data and invoices are kept for the applicable legal periods, which may reach several years due to tax and accounting obligations.

Data processed on the basis of your consent is kept until you withdraw it.

Your rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw the consent you have given, without affecting the lawfulness of prior processing.

To exercise them, write to team.piloupet@gmail.com stating your request. We may ask you to verify your identity.

If you believe your rights have not been properly handled, you can lodge a complaint with the competent supervisory authority: your local data protection authority, such as the AEPD in Spain, the CNPD in Portugal, or the CNIL in France.

Security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration.

Changes to this policy

We may update this policy to reflect legal changes or changes to our services. We will publish the current version on this page with its update date.