Privacy Policy
This page explains what data we collect on Qalliya, why we use it, how long we keep it and how you can exercise your rights.
1. Who is the data controller?
The controller of the data collected on the website is:
- Name: Qalliya
- SIRET : À compléter
- Address: À compléter
- Email : admin@qalliya.com
- Website: https://qalliya.com
2. What data is collected?
We only collect data needed to operate Qalliya, manage orders, provide customer support and secure the website.
| Situation | Data involved |
|---|---|
| Account creation | First name, last name, email, encrypted password, phone number if provided, preferred language. |
| Order or guest checkout | Name, email, ordered items, amount, payment status, download links. |
| Contact and support | Contact details, subject, message, possible order reference and messages needed to process the request. |
| Newsletter | Email, first name if provided, language, consent and subscription status. |
| Browsing and security | IP address, technical logs, browser, pages viewed, security events, login attempts. |
| Personalized features | When using a personalized feature, the information you enter may be used to create the requested content. |
3. Why do we use this data?
Each processing activity has a specific purpose and a legal basis: contract performance, legal obligation, consent or legitimate interest.
| Purpose | Legal basis |
|---|---|
| Create and manage your customer account | Contract performance |
| Process orders, payments, downloads and subscriptions | Contract performance |
| Issue and retain required records | Legal obligation |
| Reply to requests sent through the contact form | Legitimate interest or pre-contractual measures |
| Send newsletters | Consent |
| Secure the website and prevent abuse | Legitimate interest |
| Measure audience or improve the service if tools are enabled | Consent or legitimate interest depending on the tool |
4. Cookies, payment and third-party services
Qalliya may use cookies required for the website to function, for example session, cart, security or selected language cookies. Some third-party services may also be used depending on the website configuration.
- Stripe : secure payment processing. Full bank card numbers are not stored by Qalliya.
- Google reCAPTCHA : anti-spam protection if enabled.
- Transactional email : sending confirmations, download links and account-related messages.
- Analytics tools : only if installed/configured on the website.
- AI provider : if a personalized creation feature is used, the entered information may be sent to the configured provider to generate the requested content.
When non-essential trackers are used, they may require your consent depending on their purpose.
5. How long do we keep data?
The periods below are indicative and may be adjusted when the law requires a different period or when a dispute requires longer retention.
| Data type | Period |
|---|---|
| Customer account | For as long as the account is used, then limited archiving if necessary. |
| Orders, invoices and payments | Legal retention periods required for accounting and tax obligations. |
| Download links | Usually 15 days after purchase, unless otherwise stated in your account. |
| Contact requests | For the time needed to process the request, then up to 3 years for follow-up. |
| Newsletter | Until unsubscribe or consent withdrawal. |
| Security logs | A limited period required for site security and abuse prevention. |
| Reset tokens | A short period, only while the reset request is being completed. |
6. Who can access the data?
Data is only accessible to people and providers who need it to provide the service: website management, hosting, payment, emails, support, security and legal obligations.
Some providers may be located outside the European Union. In such cases, we rely on safeguards provided by applicable regulations where necessary.
7. Data security
Qalliya implements reasonable security measures: restricted access, encrypted passwords, secure sessions, CSRF protection, input validation, limited access to sensitive files and payment through a specialized provider.
No transmission or storage method is completely infallible, but we work to reduce risks and quickly fix identified issues.
8. Your rights
Under the GDPR, you may exercise several rights over your personal data.
9. Children’s data
Qalliya offers creative content that may be used by families or in classrooms. Account creation, purchases and subscriptions must be handled by an adult or under adult responsibility.
10. Changes to this policy
This policy may be updated to reflect changes to the website, our services or regulations. The update date shown at the top identifies the applicable version.
Privacy FAQ
A question about your data?
You can write to us from the contact page or directly by email. We will answer your request as clearly as possible.