Ilumyon

Privacy

Privacy Policy

Last updated: May 20, 2026. This policy explains how Ilumyon processes personal data when you use ilumyon.com.

1. Data controller

Ilumyon (contact: contact@ilumyon.com) is the data controller for personal data collected through this website, except where a client subsite clearly states otherwise.

2. Data we collect

  • Contact / quote forms: name, email, message, and optional fields (phone, project details, budget, deadline, timezone, NDA flag). Contact messages are processed by our contact endpoint when available, with a mailto: fallback if server email delivery is unavailable.
  • Server contact API (optional): if enabled, the same fields may be transmitted through our hosting provider to SendGrid for email delivery.
  • Theme preference: stored locally in your browser (localStorage.theme) to remember dark/light mode.
  • Cookie consent choice: stored locally (cookie_consent_v1) to remember your preferences.
  • Technical logs: our host (Vercel) may process IP address, user agent, and request metadata for security and operation.

We do not use Google Analytics, Meta Pixel, or similar marketing trackers on the main Ilumyon site.

3. Purposes and legal bases (GDPR)

  • Respond to inquiries: pre-contractual steps / legitimate interest (Art. 6(1)(b) or (f)).
  • Website operation & security: legitimate interest (Art. 6(1)(f)).
  • Theme & consent storage: strictly necessary / user preference (ePrivacy exemption where applicable).
  • Embedded YouTube videos: only after your consent for third-party embeds (see Cookie Policy).

4. Recipients and transfers

  • Vercel Inc. (United States) — hosting.
  • SendGrid / Twilio (United States) — email delivery, only if the server API is enabled.
  • Google / YouTube — only if you accept embed cookies and play a video.
  • External portfolio links — leaving our site opens third-party services under their own policies.

International transfers may rely on appropriate safeguards (e.g. Standard Contractual Clauses) where required.

5. Retention

  • Business inquiries: up to 3 years from last contact unless a longer period is required by law or contract.
  • Browser preferences (theme, consent): until you clear site data or change your choice.
  • Server logs: according to Vercel retention practices (typically limited duration).

6. Your rights

Under GDPR, you may request access, rectification, erasure, restriction, portability, or object to processing. You may also withdraw consent at any time (without affecting prior processing). You may lodge a complaint with your supervisory authority (in France: CNIL).

Requests: contact@ilumyon.com (subject: Privacy request).

7. Client subsite (/les-douceurs-dayline)

The bundled Les Douceurs d'Ayline demo subsite may load third-party resources (Google Fonts, Tailwind CDN) and includes a WhatsApp order flow that sends data to Meta/WhatsApp when you use it. That subsite is a portfolio demonstration; data entered there is handled by WhatsApp under Meta's terms.