Privacy policy

• Anthony Boulé, sole trader, trading as “bnboard”.
• 12 rue Charles Tillon, 56700 Hennebont, France — SIRET 802 628 255 00019.
• Contact: contact@getbnboard.com.

Account. Email address and password. The password is hashed by our authentication provider and is never readable, by us or anyone else. If you sign in with Google we receive your email address, name and profile picture — never your Google password.

Orders. Name, email address, delivery address, phone number if you provide one, and your order history.

Your panel content. Everything you enter in the configurator: property name, Wi-Fi credentials, house rules, local contact numbers and the places you recommend.

This is stored because it has to be printed, and so you can reorder identically. It is never used for anything else, and never shared with anyone other than the printer producing your order. You are free not to enter your real Wi-Fi password.

Technical data. One session cookie, strictly necessary to keep you signed in. Your basket and configuration draft are stored in your browser only and are never sent to us until you place an order.

• No analytics, advertising or tracking tool is installed on this site.
• No data is sold, rented or otherwise passed on to third parties.
• We never see or store your card details: they are entered directly with our payment provider.

• Performance of the contract: account creation, order processing, production, delivery and tracking.
• Legal obligation: invoicing and accounting records.
• Legitimate interest: service security and fraud prevention.
• Consent: marketing messages, where applicable. You may withdraw it at any time.

We rely on the following providers, strictly to operate the service:

• Supabase — authentication, database and print-file storage.
• Vercel — website hosting.
• Stripe — payment processing (PCI-DSS certified).
• Resend — confirmation and tracking emails.
• Our printer — receives the print file and the delivery address.
• OpenStreetMap (Nominatim) and Photon — turning the addresses you enter into coordinates, to generate the map on the “Local favourites” panel.
• Google — only if you choose to sign in with a Google account.

Some of these providers are established outside the European Union. Such transfers are covered by the European Commission’s standard contractual clauses.

• Account: for as long as it exists, and deleted on request.
• Orders and invoices: 10 years, as required by accounting law.
• Contact form messages: 3 years after the last exchange.
• Basket and configuration draft: until you clear your browser storage.

You have the right to access, rectify, erase, restrict, object to and port your data. Write to contact@getbnboard.com: we reply within one month at most.

If our answer does not satisfy you, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

The site is served over HTTPS only, passwords are hashed, and access to order data is limited to those who need it to fulfil your order.

This policy may change as the service evolves. The last update date appears at the top of this page.