Privacy policy.
Your data, orders and rights under the GDPR and French data protection law.
Data controller
This policy covers personal data handled through mrvey.com and in connection with enquiries, quotes, production, delivery and customer support. It refers to Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act of 6 January 1978.
Orders & acceptance
Placing an order means acceptance of this privacy policy, provided it has been made available to you before you confirm the order. This acceptance records your acknowledgement of the information about how your data is handled. It does not waive your rights, replace a lawful basis for processing, or constitute blanket consent to advertising, newsletters, tracking or publication of identifiable people. Data necessary to fulfil the order is processed on the appropriate contractual or statutory basis. Optional uses requiring consent are agreed separately, and refusal does not prevent the order.
Data and sources
- Enquiries and orders: name, role, association or business, email, telephone, social-media handle, correspondence, quote details, quantities, garment sizes, artwork and production instructions that you provide.
- Fulfilment and accounting: billing and delivery details, order and invoice records, payment status and transaction references. The website has no card-payment form; do not send full card details by email or direct message.
- Technical data: the host and external resource providers may receive IP addresses, request timestamps, visited resources, browser details and security-related logs when the website is loaded.
- Publicity: authorised photos, production videos, logos and artwork. A corporate logo is not necessarily personal data; a person’s name, face, voice or identifying details can be.
- Source: usually you or the representative placing the order. If a client supplies another person’s details, MRVËY provides that person with the applicable information under Article 14 GDPR, unless a lawful exception applies. Please limit files to what is needed; anonymised size totals are preferred over lists of members’ names.
Purposes & legal bases
- Requested quotes and your order — Article 6(1)(b): taking steps at your request before a contract and performing a contract with you. For contacts acting on behalf of an organisation, Article 6(1)(f) supports necessary professional communications and management of that relationship.
- Billing and statutory records — Article 6(1)(c): complying with accounting, tax and other applicable legal obligations.
- Security and disputes — Article 6(1)(f): protecting the website, preventing misuse and preserving proportionate evidence of contractual rights; these interests are balanced against your rights.
- Optional identifiable publicity — Article 6(1)(a): prior, specific consent for the personal-data use, together with any necessary image and intellectual-property permissions. Purely corporate material is governed by the agreed licence described in the legal notice.
Contact details and information necessary for the quote, production, billing or delivery are required for the relevant service; without them MRVËY may be unable to provide it. Publicity permissions and unnecessary personal details are optional. MRVËY does not use automated decision-making producing legal or similarly significant effects, or behavioural profiling.
Project footage, logos & advertising
With the client’s express written authorisation, MRVËY may use the garments it creates, the client’s authorised logos and artwork, and photographs or videos of the production process in its portfolio, social-media content and advertising, including paid campaigns. The permitted rights, media, worldwide territory and five-year term are set out in the client-materials licence and must be accepted with the quote or order agreement.
That permission does not automatically cover identifiable customers, members, workers or other people. Their personal-data consent and image/voice permissions are obtained separately where required. Private conversations, invoices, delivery labels and other confidential information are excluded. Email remy@mrvey.com to request confidentiality, an embargo or removal, or to withdraw personal-data consent.
Recipients
Access is limited to Rémy-Aditya Jain and authorised persons who need the information for their task. Relevant recipients may include Hostinger (hosting and technical logs), email providers, Meta when you choose Instagram, and production, decoration, delivery, accounting and payment providers engaged for your order. Only necessary information is shared. MRVËY does not sell or rent personal data.
Production is carried out in India. Suppliers normally receive artwork, technical specifications and anonymised size totals; personal data is shared only if necessary and with appropriate transfer safeguards. Publicly authorised content can be viewed by website visitors, social-media users and advertising audiences. Platforms may process data under their own policies, including Meta’s privacy policy and Hostinger’s privacy policy.
International transfers
Hosting infrastructure, email, external fonts, social platforms or production providers may involve processing outside the European Economic Area. A transfer requires an applicable European Commission adequacy decision or appropriate safeguards, such as the Commission’s standard contractual clauses and any necessary supplementary measures. An adequacy framework is used only where the recipient and the processing are actually covered. Contact remy@mrvey.com for the recipients, countries and safeguards applicable to your data and a copy of relevant safeguards.
[Hosting location, email provider, external-font transfer arrangements and any other order providers must be confirmed before publication; this draft does not attest that these safeguards are already in place.]
Retention
Data is deleted or anonymised when no longer needed. A legal duty, legal hold or ongoing dispute may require limited longer retention; archived records are restricted to that purpose.
Cookies, browser storage & fonts
The current website code contains no advertising pixels or audience-analytics scripts. It uses browser local storage to remember an expressly chosen language (mrvey-lang-choice) until cleared, and session storage for a requested brief draft (mrvey-brief-draft) and a once-per-session story animation flag (mrvey-about-takeover-seen). Session data normally ends when the browser session closes. These functions are not used for advertising profiles. You can clear storage in your browser settings; doing so may reset those choices.
The logo preview tool processes the selected image inside your browser. Selecting it in that tool does not upload it to MRVËY. A file you later send by email or Instagram is processed through that channel.
The website currently loads fonts from Google Fonts, so requests to Google’s servers disclose technical information, including your IP address. See Google Fonts privacy information. Fonts are distinct from analytics. If non-essential tracking is introduced, it requires prior information and the appropriate consent mechanism before activation; a link to this policy is not consent.
Security
MRVËY applies proportionate technical and organisational measures, including limiting access to people who need the data and using secure communication and provider services as appropriate. No internet transmission or storage system is completely secure. Report a suspected privacy or security incident to remy@mrvey.com.
Your rights
- Access your personal data and correct inaccurate or incomplete information.
- Request erasure or restriction where the legal conditions are met; statutory retention can limit erasure.
- Receive eligible data in a portable form where automated processing is based on consent or a contract.
- Object, on grounds relating to your situation, to processing based on legitimate interests; object to direct marketing at any time.
- Withdraw consent at any time as easily as it was given, without affecting earlier lawful processing.
- Give instructions concerning the retention, deletion or communication of your personal data after death, within the scope of French law.
Send your request to remy@mrvey.com. Only proportionate identity information may be requested if there is reasonable doubt about your identity. Requests are normally handled free of charge within one month. Complex or numerous requests may require up to two further months; you are informed of the extension and its reasons within the first month.
You may complain to the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or to the competent supervisory authority in your EU country.
Changes & information before ordering
The version date below identifies this policy. Material changes are communicated appropriately before the affected processing begins. A later update does not retroactively grant an advertising licence or new consent. The policy and any applicable sales terms are made available before order confirmation.
Official references
CNIL: information and transparency; CNIL: consent; CNIL: cookies and storage; French record-retention rules.