Privacy policy

1. Who handles your data

Personal data on this site is handled by the administrator of the indiscret.com service. For any question about this policy or your data, write to [email protected].

2. Adults only

indiscret.com is intended for adults 18 and older. Nobody under 18 may create an account or order here. If we learn that an account or order belongs to a minor, we cancel it and delete the data.

3. What we keep

Data	Why we keep it
Account details (email address, password stored only in hashed form, name if you add it)	To let you sign in, see your orders and manage the club
Orders (pieces, sizes, amounts, dates, payment status)	To fulfill the order, handle exchanges and replacements, and keep records the law requires
Delivery address and phone number if given	To deliver the parcel and let the carrier reach you
Size profile (your letter size, band and cup, measurements you choose to save)	To show pieces in your size and choose your monthly club piece
Messages you send us	To answer you and keep a record of what was agreed
Technical data (IP address, browser type, server logs)	To keep the site secure and prevent fraud

We never see or store your full card number. Card details are entered on the payment provider's page.

4. Who receives it

We share data only with service providers who need it to run the shop, and only the part they need. By category, they are:

• our hosting provider, which stores the site and its database,
• an adult-approved card payment provider, which processes card payments and 3D Secure checks,
• a crypto payment provider, for orders paid in crypto,
• an email delivery provider, which sends order confirmations, codes and tracking emails,
• the carrier, which receives the name, address and phone number needed to deliver the parcel.

We may also disclose data where the law requires it, for example to a court or a tax authority. We do not sell personal data and we do not share it for advertising.

5. Cookies and browser storage

We set only necessary cookies: the session cookie and a security token against forged requests. Your age confirmation and your bag are stored in your browser. There are no advertising pixels and no third party tracking. Details are in our cookie policy.

6. How long we keep it

• Account and size profile, for as long as the account is open. You can delete it at any time.
• Orders and payment records, for as long as tax and accounting laws require, generally up to seven years.
• Messages to support, up to two years after the last exchange.
• Server logs, up to 90 days, unless needed to investigate fraud.

7. Your rights as a US resident

Depending on the state you live in, you may have the right to:

• know what personal data we hold about you and receive a copy,
• correct data that is inaccurate,
• have your data deleted, apart from records we must keep by law,
• opt out of the sale or sharing of personal data for advertising. We do neither, so there is nothing to opt out of, but you may still ask us to confirm it.

To use any of these rights, write to [email protected] from the email address on your account. We may ask you to confirm your identity and we answer within the time your state law sets, usually 45 days. Using your rights never affects the price or service you receive.

8. Security

The site runs over an encrypted connection, passwords are stored only as hashes, and access to customer data is limited to what each task requires. No system is perfectly secure, and if a breach affecting your data occurs, we will notify you as the law requires.

9. Changes to this policy

When we change this policy, we update the date at the top of the page. Significant changes are also announced by email to account holders.