Privacy Policy
Nail Universelle — Mobile application · Last updated: July 2026 · This is an English translation of the French policy, which prevails in case of discrepancy.
1. Data controller
The controller of personal data is: Nail Universelle, a micro-enterprise (micro-entreprise).
Postal address: 47 rue Vivienne – 75002 Paris, France
Email: contact@nailuniverselle.com & support@nailuniverselle.com
The controller guarantees compliance with the General Data Protection Regulation (GDPR – EU 2016/679) and with the French Data Protection Act (loi Informatique & Libertés).
2. Data collected
The application only collects the data necessary for the operation of the service.
2.1. Account creation
- Last name, first name
- Email address
- Phone number (optional)
- Password (hashed, never stored in plain text)
- Profile photo (optional)
- Location (city)
2.2. Technician / brand profile
- Professional name
- Professional address
- Photos, published inspirations
- Services offered
- Availability / schedule (if enabled)
- Customer reviews
2.3. Subscription data
- Subscription type (Trial / Basic / Premium)
- Subscription history
- Payments via Stripe (secure token)
No banking data is stored by Nail Universelle.
2.4. Usage history
- Technicians viewed
- Inspirations viewed
- Actions (likes and favourites)
- Account creation date
2.5. Technical data
- IP address
- Device identifier
- Application version
- Error log (diagnostics)
2.6. Booking data
In connection with service bookings, the application may collect and retain:
- The date and time of the appointment
- The amount of the service
- The amount of the deposit paid
- The status of the booking
- The cancellation history
- The information necessary to handle disputes related to bookings
This data is used exclusively for the proper operation of the platform and the management of bookings.
2.7. Order and shop data
In connection with purchases made in the integrated shop, the application may collect and retain:
- The products ordered
- The order history
- The delivery address
- Information relating to refunds
- Information relating to disputes
- Shipping and delivery statuses
This data is necessary for order processing, refund management and compliance with applicable legal obligations.
2.8. Messaging with administration and financial data
The application provides a messaging feature allowing users to contact the Nail Universelle administration. Exchanged messages may be retained in order to ensure:
- The handling of support requests
- The follow-up of complaints
- Refund management
- The processing of withdrawal requests
- Account deletion requests
- The prevention of fraud and abuse
In connection with withdrawal requests, certain banking information necessary for processing payments may be collected and retained in compliance with applicable legal and security obligations.
Any account deletion request may be subject to a prior verification to ensure that no withdrawal, order, booking or dispute is being processed.
3. Purposes of processing
The data is used for:
- User account management
- Operation of subscriptions
- Display of profiles, recommendations and trends
- Publication of inspirations by users
- Securing the platform
- Fraud prevention
- Service improvement
- Support and assistance
4. Legal basis for processing
Under the GDPR, processing is based on:
- Performance of the contract (Terms of Use / Terms of Sale)
- Consent (publication of inspiration, sending of email)
- Legitimate interest (security, internal statistics)
- Legal obligation (invoicing, prevention of Stripe fraud)
5. Data sharing
Data may be transmitted only to the providers necessary for the operation of the application:
- OVH SAS: hosting of the application, servers and database (data centre in Strasbourg, France)
- Scaleway SAS: encrypted storage of database backups (data centre in Paris, France)
- Stripe: management of payments, deposits and subscriptions
- Brevo: sending of transactional emails and notifications
- Firebase Cloud Messaging (Google): sending of push notifications
- Cloudinary: storage and management of uploaded photos and images
These providers act as processors and implement measures compliant with the GDPR for the protection of personal data.
6. Data retention
Data is retained:
- For as long as necessary for the use of the application
- 3 years after the last activity (inactivity)
- 10 years for invoicing data (legal obligation)
- Immediate deletion in the event of a compliant request
6.1. Hosting and data storage
- The application and its MongoDB database are hosted on OVH cloud servers located in Strasbourg, France.
- Database backups are encrypted and stored with Scaleway in Paris, France, and are automatically deleted after a limited retention period.
- All data centres used for storage are located in France (European Union).
- Nail Universelle favours GDPR-compliant providers.
7. User rights
In accordance with the GDPR, every user has the following rights:
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to object
- Right to restriction
- Right to portability
- Right to withdraw consent at any time
To exercise these rights, send a request to: contact@nailuniverselle.com. Response within 30 days.
8. Security
Nail Universelle implements:
- SSL encryption
- secure storage
- hashed passwords
- restricted access to data
- anti-intrusion systems
No sensitive data is stored without protection.
9. Payment data (Stripe)
Payments are 100% handled by Stripe:
- PCI-DSS compliance
- secure tokens
- no banking data stored by the application
Stripe acts as a GDPR-compliant processor.
10. Content published by users
Users may publish:
- photos
- inspirations
- descriptions
By publishing content, they accept that it may be:
- publicly visible
- moderated in the event of non-compliance with the rules
- deleted in the event of abuse
11. Minors
The application is reserved for users over 16 years of age. Minors must have parental authorisation.
12. Transfers outside the EU
Some providers (Stripe, US-based hosts) may process data outside the EU, with:
- Standard Contractual Clauses (SCC)
- enhanced security measures
13. Changes to the policy
Nail Universelle may modify the policy at any time. Users will be informed in the event of a significant change.
14. Contact
For any question: