FlowFR

Privacy Policy

Last updated: July 3, 2026

This policy describes how HEADZ PRODUCTION collects and processes your personal data when you use the site getyourflow.co and place an order, in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection law.

1. Data controller

The data controller is HEADZ PRODUCTION, 184 avenue du Dr Marcel Armanet, 83400 Hyères, France (SIRET 97762569800013). For any question about your data: flow@liori.studio.

2. Data collected

We only collect the data necessary to process your order and manage the customer relationship:

  • Identity and contact details: first and last name, email address, phone number where applicable;
  • Delivery and billing address;
  • Order information (products, amount, history);
  • Technical connection and usage data of the site.

Payment data (card number) is collected and processed directly by Stripe. We never have access to it and do not store it.

3. Purposes and legal bases

  • Process and deliver your order, provide customer service: performance of the contract;
  • Comply with our legal and accounting obligations (invoicing, retention): legal obligation;
  • Prevent fraud and secure payments: legitimate interest;
  • Send you communications where applicable: consent, revocable at any time.

4. Recipients and processors

Your data is accessible to our teams and processors, strictly for the purposes above:

  • Stripe – payment processing;
  • Mailgun (Sinch) – sending confirmation and shipping emails;
  • Airtable – order management;
  • Vercel – site hosting;
  • Meta Platforms Ireland – advertising effectiveness measurement, only with your consent (see the Cookies section).

We do not sell or rent your personal data to third parties.

5. Retention period

Data related to an order is kept for the duration of the commercial relationship and then archived for the duration of applicable legal obligations (notably ten years for accounting documents). Data processed on the basis of consent is kept until consent is withdrawn.

6. Transfers outside the European Union

Some of our processors (notably Stripe and Vercel) may process data outside the European Union. These transfers are governed by appropriate safeguards, such as the European Commission's standard contractual clauses.

7. Cookies

The site uses cookies and technologies strictly necessary for its operation (for example remembering your order and language choice), which do not require consent.

Only with your consent, we also use the Meta pixel (Meta Platforms Ireland Ltd) to measure the effectiveness of our advertising campaigns. Until you accept, no advertising cookie is set and no data is sent to Meta by your browser. You can change your choice at any time via the “Cookies” link at the bottom of the page.

8. Your rights

In accordance with the GDPR, you have the following rights over your data:

  • Right of access, rectification and erasure;
  • Right to restriction of and objection to processing;
  • Right to data portability;
  • Right to withdraw your consent at any time.

To exercise these rights, write to flow@liori.studio. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).