Privacy Policy
Last updated: January 2, 2025
1. Introduction
This Privacy Policy describes how TTTravel (hereinafter "we", "our" or "TTTravel") collects, uses, and protects your personal data when you use our platform accessible at tttravel.com and app.tttravel.tattoo.
We are committed to complying with the General Data Protection Regulation (GDPR) and French data protection law.
2. Data controller
TTTravel
Email: privacy@tttravel.com
For any questions regarding your personal data, you can contact us at this address.
3. Data collected
3.1 Data provided directly
When you register and use the Platform, we collect:
- Identification data: name, first name, artist/shop name, email
- Profile data: bio, tattoo styles, city, country, portfolio photos
- Contact data: shop address, Instagram/website links
- Billing data: payment information (processed by our provider Stripe)
- Communications: messages exchanged via integrated messaging
3.2 Automatically collected data
- Connection data: IP address, browser type, operating system
- Usage data: pages visited, actions taken, timestamps
- Cookies: see dedicated section below
4. Purpose of processing
We use your data for:
| Purpose | Legal basis |
|---|---|
| Account and profile management | Contract performance |
| Artist/Shop matching | Contract performance |
| Messaging and notifications | Contract performance |
| Billing and payments | Contract performance |
| Platform improvement | Legitimate interest |
| Customer support | Contract performance |
| Newsletters and marketing | Consent |
| Legal compliance | Legal obligation |
5. Data recipients
Your data may be shared with:
5.1 Other users
Your public profile information (name, photos, bio, city) is visible to other Platform users to enable matching.
5.2 Technical subcontractors
- Convex (database, serverless functions) - Cloud hosted
- Resend (transactional emails) - GDPR compliant
- Stripe (payments) - PCI-DSS compliant
5.3 Authorities
We may communicate your data to competent authorities if required by law.
6. Data hosting
Location: Cloud infrastructure
Main provider: Convex
Our data is hosted on secure, certified infrastructure. No data transfer to third countries (outside the EU) is made without appropriate safeguards.
7. Data retention
| Data type | Duration |
|---|---|
| Account data | Account duration + 3 years |
| Messages | Account duration + 1 year |
| Billing data | 10 years (legal requirement) |
| Connection logs | 1 year |
| Cookies | 13 months maximum |
After account deletion, your data is anonymized or deleted, except for data we must retain for legal reasons.
8. Your rights
Under the GDPR, you have the following rights:
Right of access
Obtain a copy of your personal data
Right to rectification
Correct inaccurate or incomplete data
Right to erasure
Request deletion of your data
Right to portability
Retrieve your data in a structured format
Right to object
Object to processing on legitimate grounds
Right to restriction
Temporarily limit processing
To exercise your rights, contact us at privacy@tttravel.com. We will respond within one month.
You may also file a complaint with the CNIL: www.cnil.fr
9. Cookies
9.1 Essential cookies
These cookies are necessary for the Platform to function:
- Authentication session - Maintain your login
- Preferences - Remember your choices (theme, language)
- Security - CSRF attack protection
9.2 Analytics cookies
We use analytics tools to understand Platform usage. This data is anonymized and aggregated.
9.3 Cookie management
You can configure your browser to refuse cookies. Note that this may affect some Platform features.
10. Security
We implement appropriate security measures:
- Data encryption in transit (HTTPS/TLS)
- Password encryption (bcrypt)
- Restricted access to personal data
- Regular encrypted backups
- Intrusion monitoring and detection
- Regular security updates
In case of a data breach likely to endanger your rights, we will inform you within 72 hours.
11. Changes
We may modify this Privacy Policy at any time. In case of significant changes, we will inform you by email or notification on the Platform.
We encourage you to regularly check this page.
12. Contact
For any questions regarding this policy or your personal data:
Email: privacy@tttravel.com
We are committed to responding to any request within a maximum of 30 days.