Nail Universelle

Privacy Policy

Last updated: July 2026

This is an English translation of the French document, which prevails in case of discrepancy.

1.Data controller

The controller of personal data is: Nail Universelle, a micro-enterprise (micro-entreprise).

Postal address: 47 rue Vivienne – 75002 Paris, France

Email: contact@nailuniverselle.com & support@nailuniverselle.com

The controller guarantees compliance with the General Data Protection Regulation (GDPR – EU 2016/679) and with the French Data Protection Act (loi Informatique & Libertés).

2.Data collected

The application only collects the data necessary for the operation of the service.

2.1. Account creation

  • Last name, first name
  • Email address
  • Phone number (optional)
  • Password (hashed, never stored in plain text)
  • Profile photo (optional)
  • Location (city)

2.2. Technician / brand profile

  • Professional name
  • Professional address
  • Photos, published inspirations
  • Services offered
  • Availability / schedule (if enabled)
  • Customer reviews

2.3. Subscription data

  • Subscription type (Trial / Basic / Premium)
  • Subscription history
  • Payments via Stripe (secure token)

No banking data is stored by Nail Universelle.

2.4. Usage history

  • Technicians viewed
  • Inspirations viewed
  • Actions (likes and favourites)
  • Account creation date

2.5. Technical data

  • IP address
  • Device identifier
  • Application version
  • Error log (diagnostics)

2.6. Booking data

In connection with service bookings, the application may collect and retain:

  • The date and time of the appointment
  • The amount of the service
  • The amount of the deposit paid
  • The status of the booking
  • The cancellation history
  • The information necessary to handle disputes related to bookings

This data is used exclusively for the proper operation of the platform and the management of bookings.

2.7. Order and shop data

In connection with purchases made in the integrated shop, the application may collect and retain:

  • The products ordered
  • The order history
  • The delivery address
  • Information relating to refunds
  • Information relating to disputes
  • Shipping and delivery statuses

This data is necessary for order processing, refund management and compliance with applicable legal obligations.

2.8. Messaging with administration and financial data

The application provides a messaging feature allowing users to contact the Nail Universelle administration. Exchanged messages may be retained in order to ensure:

  • The handling of support requests
  • The follow-up of complaints
  • Refund management
  • The processing of withdrawal requests
  • Account deletion requests
  • The prevention of fraud and abuse

In connection with withdrawal requests, certain banking information necessary for processing payments may be collected and retained in compliance with applicable legal and security obligations.

Any account deletion request may be subject to a prior verification to ensure that no withdrawal, order, booking or dispute is being processed.

3.Purposes of processing

The data is used for:

  • User account management
  • Operation of subscriptions
  • Display of profiles, recommendations and trends
  • Publication of inspirations by users
  • Securing the platform
  • Fraud prevention
  • Service improvement
  • Support and assistance

4.Legal basis for processing

Under the GDPR, processing is based on:

  • Performance of the contract (Terms of Use / Terms of Sale)
  • Consent (publication of inspiration, sending of email)
  • Legitimate interest (security, internal statistics)
  • Legal obligation (invoicing, prevention of Stripe fraud)

5.Data sharing

Data may be transmitted only to the providers necessary for the operation of the application:

  • OVH SAS: hosting of the application, servers and database (data centre in Strasbourg, France)
  • Scaleway SAS: encrypted storage of database backups (data centre in Paris, France)
  • Stripe: management of payments, deposits and subscriptions
  • Brevo: sending of transactional emails and notifications
  • Firebase Cloud Messaging (Google): sending of push notifications
  • Cloudinary: storage and management of uploaded photos and images

These providers act as processors and implement measures compliant with the GDPR for the protection of personal data.

6.Data retention

Data is retained:

  • For as long as necessary for the use of the application
  • 3 years after the last activity (inactivity)
  • 10 years for invoicing data (legal obligation)
  • Immediate deletion in the event of a compliant request

6.1. Hosting and data storage

  • The application and its MongoDB database are hosted on OVH cloud servers located in Strasbourg, France.
  • Database backups are encrypted and stored with Scaleway in Paris, France, and are automatically deleted after a limited retention period.
  • All data centres used for storage are located in France (European Union).
  • Nail Universelle favours GDPR-compliant providers.

7.User rights

In accordance with the GDPR, every user has the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to object
  • Right to restriction
  • Right to portability
  • Right to withdraw consent at any time

To exercise these rights, send a request to: contact@nailuniverselle.com. Response within 30 days.

8.Security

Nail Universelle implements:

  • SSL encryption
  • secure storage
  • hashed passwords
  • restricted access to data
  • anti-intrusion systems

No sensitive data is stored without protection.

9.Payment data (Stripe)

Payments are 100% handled by Stripe:

  • PCI-DSS compliance
  • secure tokens
  • no banking data stored by the application

Stripe acts as a GDPR-compliant processor.

10.Content published by users

Users may publish:

  • photos
  • inspirations
  • descriptions

By publishing content, they accept that it may be:

  • publicly visible
  • moderated in the event of non-compliance with the rules
  • deleted in the event of abuse

11.Minors

The application is reserved for users over 16 years of age. Minors must have parental authorisation.

12.Transfers outside the EU

Some providers (Stripe, US-based hosts) may process data outside the EU, with:

  • Standard Contractual Clauses (SCC)
  • enhanced security measures

13.Changes to the policy

Nail Universelle may modify the policy at any time. Users will be informed in the event of a significant change.

14.Contact

For any question:

← Back to home