This English translation is provided for convenience. In case of discrepancy, the French version prevails.

This policy explains what personal data L'Atelier Hoche by CYR collects through the website latelierhoche.fr and the “private salon” client area, why, how long it is kept and how to exercise your rights. It is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978, as amended, known as the “Informatique et Libertés” Act.

Data controller

CYR (acronym: L'Atelier Hoche), a single-member limited liability company which runs the house L'Atelier Hoche by CYR, 14 bis avenue Hoche, 75008 Paris, RCS Paris 753 840 875.

For any question about your data: [email protected] or +33 6 65 71 76 36.

The house has not appointed a data protection officer; requests are handled by its managing director, Christian Rousset.

The data we process

Appointment requests

When you request an appointment through the website's form, we collect:

surname and first name;
email address and telephone number;
your message;
the time slot chosen and the type of appointment (at the atelier or by video call).

This information is passed to the house's management tool, hosted by Base44.

Purpose:to arrange and confirm your appointment, and to contact you again about it.
Legal basis:pre-contractual measures taken at your request (Article 6(1)(b) GDPR).

“My selection” and access to the private salon

When you keep looks from the lookbook or composed outfits, then ask to find them in your private salon, we collect:

surname and first name;
email address and, if you wish, telephone number;
the looks and outfits in your selection.

This information is passed to the house's management tool, hosted by Base44.

Purpose:to prepare your consultation, send you your personal access to the private salon and contact you about it.
Legal basis:your consent, given by ticking the box on the form; you may withdraw it at any time.

WhatsApp conversations

If you choose to write to us via WhatsApp, your messages pass through the service provided by WhatsApp Ireland Ltd (Meta group). WhatsApp then processes your data under its own privacy policy, as a separate controller. This channel remains optional: the form, email and telephone are always available.

Purpose:to respond to your request through the channel you have chosen.
Legal basis:pre-contractual measures taken at your request, or our legitimate interest in responding to people who contact us.

“Private salon” client area

If you have an account, we process:

your login credentials;
your body measurements;
your preferences (cloths, cuts, options);
your order history.
Purpose: to manage your account, carry out your orders and keep your measurements for your future garments.
Legal basis: performance of the contract between us (Article 6(1)(b) GDPR).

Audience measurement

When audience measurement is enabled, it relies on Cloudflare Web Analytics, a tool that sets no cookies, does not access your device and collects no data that could identify you. It provides us with aggregated statistics (pages viewed, where visits come from, website performance).

Legal basis:our legitimate interest in understanding the website's traffic and improving it.

Protection against bots and spam

The forms may be protected by Cloudflare Turnstile, which analyses technical data from your device and your connection (IP address, browser, technical characteristics of the connection) in order to distinguish a human visitor from a bot. This data is not used for advertising purposes.

Legal basis:our legitimate interest in securing the website and preventing abuse.

Technical logs

Like any hosting provider, Cloudflare records technical logs (IP address, date and time, page requested, browser) that are necessary for the operation and security of the website.

Legal basis:our legitimate interest in ensuring the availability and security of the website.

Information about our collections

We may send you information about our collections and our seasonal appointments:

if you are a client, about services similar to those you have already ordered, unless you have objected to this;
if you are not yet a client, only with your consent.

Every message allows you to unsubscribe easily.

Recipients

Your data is intended for L'Atelier Hoche by CYR. It is also processed, on our behalf and on our instructions, by our technical service providers:

Cloudflare, Inc.hosting of the public website, audience measurement, security;
Wix.com Ltd. (Base44)management tool, booking calendar, “private salon” client area and guest configurator.

The measurements and specifications needed to make your garments may be passed on to the ateliers that make them, strictly to the extent required for that purpose. For certain collections, notably wedding party attire and professional attire for teams, the making may be entrusted to ateliers located outside the European Union.

Your data is never sold or rented.

Transfers outside the European Union

Some of our service providers are established, or store data, outside the European Union:

Cloudflare, Inc.is established in the United States;
Wix.com Ltd.is established in Israel, a country covered by an adequacy decision of the European Commission; data on the Base44 platform is hosted in the United States;
the ateliers that make certain collections (wedding party attire, professional attire for teams) may be located outside the European Union; they receive only the measurements and specifications needed to make the garments.

Where data is transferred to the United States, such transfers are governed, depending on the provider, by the EU–US Data Privacy Framework where the recipient company has joined it, and/or by the standard contractual clauses adopted by the European Commission. Transfers to these ateliers are covered by appropriate safeguards, in particular the standard contractual clauses adopted by the European Commission, or, failing that, are limited to what is strictly necessary to perform your order (Article 49(1)(b) GDPR). You can obtain information about these safeguards by writing to us.

Retention periods

Data	Period
Appointment requests and contacts not followed up (prospects)	3 years from the last contact
Client data	Duration of the business relationship, then 3 years from the last contact for sending information about our collections
Body measurements	For as long as your client account exists; deleted on request
Accounting records (invoices, orders)	10 years, in accordance with the French Commercial Code (Code de commerce)
Technical logs	Limited period set by the hosting provider for security purposes

At the end of these periods, the data is deleted or anonymised.

Security

We take appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), access to the client area protected by personal credentials, and access to internal tools restricted to authorised persons.

Cookies and trackers

Our approach

The website sets no advertising cookies, no social network cookies and no audience measurement cookies.

Only cookies that are strictly necessary for the security of the website may be set. In accordance with Article 82 of the Informatique et Libertés Act and the recommendations of the CNIL, the French data protection authority, these cookies are exempt from consent. This is why no cookie banner is displayed.

Should a tracker requiring consent be added, a consent management tool would be put in place beforehand and this page would be updated.

What may be set

Name	Issuer	Purpose	Duration	Consent
`__cf_bm`	Cloudflare	Distinguishing human visitors from bots to protect the website	30 minutes of inactivity	Not required (security)
`cf_clearance`	Cloudflare	Remembering that a security check has been passed, so that it is not presented again	30 minutes by default	Not required (security)
Cloudflare Web Analytics	Cloudflare	Audience measurement	No cookie set	Not applicable

The “private salon” client area also uses the technical elements needed to maintain your login session, which are likewise exempt from consent.

Your browser's storage

“My selection” keeps in your browser (local storage, keys beginning with lh_) the looks and outfits you have chosen, and whether the panel has already been offered to you. Nothing leaves your device until you send the form. This storage serves the function you asked for and does not require consent; you erase it by clearing the website's data in your browser.

Browser settings

You can block or delete cookies at any time in your browser settings. Blocking security cookies may, however, lead to additional checks when you submit a form.

Your rights

You have the following rights over your data:

accessto know what data we hold and to obtain a copy of it;
rectificationto correct inaccurate or incomplete data;
erasureto request the deletion of your data, subject to our legal retention obligations;
restrictionto request that processing be temporarily suspended;
objectionto object to processing based on our legitimate interest and, at any time, to receiving commercial information;
portabilityto receive the data you have provided to us in a structured and commonly used format;
post-mortem directivesto set directives on what happens to your data after your death.

Where processing is based on your consent, you may withdraw it at any time.

How to exercise your rights

Write to [email protected], or by post to CYR (L'Atelier Hoche), 14 bis avenue Hoche, 75008 Paris. We may ask you to prove your identity if we have reasonable doubts. You will receive a reply within one month, which may be extended by two months if the request is complex.

Complaints

If you consider that your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority:

CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr

Changes to this policy

This policy may change, in particular when a new service is introduced or a service provider is replaced. The date of the last update appears at the top of the page.

Privacy policy