Privacy Policy
mathisleroux.com
ARTICLE 1 : PREAMBLE
The purpose of this privacy policy is to inform users of the mathisleroux.com website :
- on how their personal data is collected and processed. Personal data is defined as any information that can be used to identify a user (last name, first name, postal address, email address, phone number, etc.).
- about their rights regarding this data ;
- on the person responsible for processing this data ;
- on the potential recipients of this data ;
- and on the site’s cookie policy.
This policy supplements the legal notices available at the following address :
https://mathisleroux.com/mentions-legales
ARTICLE 2 : PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA
In accordance with Article 5 of Regulation (EU) 2016/679 (GDPR), personal data is :
- processed lawfully, fairly, and transparently ;
- collected for specific, explicit, and legitimate purposes ;
- adequate, relevant, and limited to what is necessary ;
- accurate and up to date ;
- kept for a period not exceeding that necessary for the purposes of the processing ;
- protected by appropriate security measures.
Processing is lawful only if one of the following conditions is met :
- the person concerned has consented to the processing ;
- processing is necessary for the performance of a contract or pre-contractual measures ;
- processing is necessary for compliance with a legal obligation ;
- processing is necessary for the purposes of the legitimate interests pursued by the controller.
ARTICLE 3 : PERSONAL DATA COLLECTED AND PROCESSED THROUGH THE WEBSITE
3.1 Data collected
The personal data that may be collected on the website are :
- first and last name;
- email address;
- postal address;
- telephone number;
- content of messages submitted through the contact form or custom commission request form;
- information required for the preparation of quotations, invoices, and delivery documents;
- information relating to orders placed through the Website;
- IP address;
- technical browsing data;
- technical and analytical cookies.
Banking and payment information is never stored or retained by the Website. Payments are processed directly by the secure payment providers used by the Seller.
3.2 Purposes of processing
The collected data is used for the following purposes:
responding to inquiries submitted through the Website’s forms;
preparing quotations for artworks produced upon request;
managing orders, payments, invoicing, and deliveries;
maintaining customer relations and follow-up communications;
complying with legal, tax, and accounting obligations;
ensuring the security and proper functioning of the Website;
generating anonymous visitor statistics.
Personal data is neither sold nor rented to third parties.
Such data may only be disclosed to service providers strictly necessary for the performance of the order, including carriers, hosting providers, payment processors, accountants, tax authorities, or any competent authority where required by law.
3.3 Collection method
Personal data is collected:
directly from the User when completing a contact form, quotation request form, or custom order request form;
when placing or validating an order through the Website;
automatically through technical or analytical cookies during Website navigation.
3.4 Data Retention Period
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected.
- Contact and quotation request data: up to 3 years after the last communication.
- Order, invoice, and accounting-related data: up to 10 years, in accordance with applicable French legal requirements.
- Delivery-related information: for the duration necessary to process the order and thereafter in accordance with legal retention obligations.
- Cookies: maximum retention period of 13 months.
At the end of the applicable retention period, personal data is deleted or anonymized, unless a longer retention period is required by law.
3.5 Data hosting
The mathisleroux.com website is hosted by:
LWS (Ligne Web Services)
10 rue Penthièvre, 75008 Paris, France
Phone : +33 (0)1 77 62 30 03
Website : www.lws.fr
The data is stored on secure servers located in France.
3.6 Transfer of data to third parties
The data collected via the form is used exclusively by Mathis Leroux to respond to requests and manage orders.
Certain information (name, delivery address, telephone number) may be passed on to a delivery service provider in order to ship the artwork.
No other data is transferred, sold, or shared with third parties.
3.7 Cookies
The site uses cookies that are necessary for its proper functioning (WordPress, WooCommerce) and, optionally, analytical cookies (anonymous statistics).
Users can accept or refuse cookies during their first visit, or change their choice at any time via their browser settings.
ARTICLE 4 : DATA CONTROLLER
The data controller is :
Mathis Leroux, Entrepreneur Individuel (EI)
SIRET : 992 768 069 00013
Address : 84 Rue de Charentais, 37320 Truyes
E-mail : contact@mathisleroux.com
Phone : 06 47 73 09 27
He is the sole recipient of the data collected via the website.
No data protection officer (DPO) has been appointed, as the activity does not require it.
ARTICLE 5: USER RIGHTS
Any user concerned by the processing of their personal data has the following rights :
- right of access, rectification, and erasure (Articles 15, 16, and 17 of the GDPR) ;
- right to data portability (Article 20 of the GDPR) ;
- right to restriction or objection to processing (Articles 18 and 21 of the GDPR) ;
- right to lodge a complaint with the CNIL (www.cnil.fr).
To exercise their rights, users may contact :
or by post to :
Mathis Leroux – 84 Rue de Charentais, 37320 Truyes
ARTICLE 6: CHANGES TO THE PRIVACY POLICY
The publisher of the mathisleroux.com website reserves the right to modify this policy at any time to ensure its compliance with current legislation.
Users are encouraged to consult it regularly.
This policy was updated on June 5, 2026.