Privacy policy

This policy explains what personal data Unmapped collects, why, and how to exercise your rights over it.

1. Data controller

Victor Lajri, sole trader (see legal notice), is the data controller for the personal data collected on unmappedtcg.com. Contact: victor.lajri92@gmail.com

2. Data collected

• Email and password (user account)
• Name, first name, phone, shipping address (customer area)
• Reservation and room history
• Payment data: handled directly by Stripe, Unmapped never stores card numbers

3. Purposes

• Creating and managing your account
• Processing your reservations and payment pre-authorizations
• Shipping your displays and communicating tracking info
• Responding to your support requests
• Meeting our legal and accounting obligations

4. Sub-processors

Unmapped relies on the following providers to run the site:

• Supabase Inc.: database hosting and authentication
• Stripe: payment processing
• Brevo: transactional emails (account confirmation, password reset)
• Vercel Inc.: site hosting

Some of these providers are located outside the European Union (United States); where applicable, this transfer is governed by the European Commission’s standard contractual clauses.

5. Retention period

Your data is kept for as long as you hold an account on the site, then archived for the period required by our legal and accounting obligations (notably 10 years for billing documents).

6. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict, object to and port your personal data. You can exercise these rights by writing to victor.lajri92@gmail.com. You also have the right to lodge a complaint with the CNIL (cnil.fr).

7. Security

Unmapped implements reasonable technical measures (password encryption, role-based access control, secure HTTPS connections) to protect your data.

8. Cookies

The site uses technical cookies necessary for its operation, detailed in our cookie policy.