Política de Privacidad

Last updated: November 2026

Development notice. Loch Ness is a personal project under active development, run for now by a private individual on a non-professional basis. Features, prices and pages may change while the project grows.

1. Who we are

The data controller is the publisher of lochness-paris.com, a private individual running a personal project under development (see the Aviso Legal). Contact: contact@lochness-paris.com. We never sell or rent your data.

Intended audience. This website is written in English and designed for an international audience. It is not specifically aimed at the French market. Some free tools and pages are also offered in other languages for convenience.

2. Purchases

Data: name, email, phone, delivery address, the items ordered and the order history. Card details are entered directly with the payment provider (for example Stripe) and never reach our server.

Purpose: processing, delivering and following up your order. Legal basis: performance of the contract. Retention: as long as needed for the order and its follow-up, then as long as required by accounting and tax rules. Recipients: the payment provider, the carrier and, for some products, the supplier who ships the item directly to you, only for what they need.

3. Free tools, quizzes and tests

Some tools ask for your email address to show your result. That email is used only to unlock your result. We send you news or tips only if you tick the optional box “Yes, send me occasional news and tips…”; the wording you accepted and the date are recorded as proof of consent. You can unsubscribe at any time by replying to any email or writing to contact@lochness-paris.com.

Forms are delivered to our inbox through the Web3Forms service. Retention: emails without consent are kept at most 12 months; with consent, until you unsubscribe and at most 3 years after our last exchange. Photos you analyse in our tools are processed in your browser and are not stored.

4. Bracelet builder, gallery and Stone of the Day

Published designs contain no name or contact details. To prevent abuse we keep an encrypted fingerprint of your IP address (never the address itself), deleted within 24 hours. Stone of the Day sign-ups (email, optional first name, language, consent wording) are kept until you withdraw your consent and at most 3 years after your last visit. Full details: detailed privacy policy of the Loch Ness tools.

5. Chat

Messages you send in the chat window (and your first name and email, if you give them) are used only to answer you. Conversations are deleted 12 months after the last message, or earlier on request.

6. “See it on a wrist” (AI images)

When you ask for this image, only the picture of the bracelet you designed and your choices (woman / man, skin tone, wrist size) are sent to an AI image service (Google Gemini, OpenAI or fal.ai, depending on the settings). No photo of you is requested. Daily counters use an encrypted fingerprint of your IP address, deleted after 30 days. Generated images contain no personal data and may be reviewed by the publisher and shown, labelled as AI illustrations, on the page of the matching design.

7. Cookies and audience measurement

GoatCounter counts visits without cookies and without storing IP addresses. Some pages also use Google Analytics, which sets cookies to measure audience; where required, these are only set with your consent. WordPress and the shop use technical cookies needed for the cart, checkout and login. Some preferences are kept only in your browser (local storage) and never sent to us.

Reviews and comments: if you leave a product review or a comment, your name, email (never displayed) and the text are stored; your name and review are shown publicly. You can ask us to remove them at any time.

8. Embedded content

Pages may include content from other websites (videos, fonts, payment forms). These websites may collect data about you as if you visited them directly, under their own policies.

9. Where your data is stored

Our server is hosted by OVH in the European Union. Some providers (payment, email forms, AI image services, analytics) may process data outside the EU, under the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).

10. Your rights

You can ask for access, correction, erasure, restriction or portability of your data, object to processing based on legitimate interest and withdraw your consent at any time by writing to contact@lochness-paris.com. We reply within one month. You can also complain to the French data protection authority (CNIL, cnil.fr) or to the authority of your country of residence.

11. Changes

This policy will evolve with the project. The date at the top shows the latest version.