Legal & company
Privacy Policy
What we collect, why, where it goes and the rights you have over it — written to be read, not skimmed.
Updated October 28, 20265 min readformeu.co
In short
- FORMÉ is operated by NUVEXIS (NX), Paris. We are the data controller for this site.
- We collect only what the service needs: an account if you create one, the preferences you set, and usage events tied to a rotating hash rather than to you.
- Images you send to visual search are processed to find matching products and are not kept.
- We sell no personal data, run no advertising and set no third-party tracking cookies.
- You can see, export, correct or delete your data at any time; account holders can do so from Settings without asking us.
The summary helps you read; the sections below are what applies.
01Who is responsible
The controller of personal data processed through formeu.co is NUVEXIS (NX), a company registered in Paris, France. Questions and requests about this policy go to the privacy mailbox below; we answer within one month, as the GDPR requires.
Operated by
NUVEXISNX
FORMÉ is a brand of NUVEXIS (NX), a company registered in Paris, France.
Registered office
47 Rue Vivienne, 75002 Paris · France
- VAT no.
- FR84105248322
- SIRET
- 10524832200015
- SIREN
- 105248322
02What we collect, and when
| When | What | Why |
|---|---|---|
| You browse | Pages viewed, searches, outbound clicks, your shopping region, the device type. Each event carries a hash that changes every day, not your name or IP address. | To run the site, show prices for your region, and understand which content is useful. |
| You create an account | Email address, optional name, a password hash (never the password), sign-in method (password, email link, Google, Apple), region, language. | To keep you signed in and sync your saved items, boards, alerts and preferences across devices. |
| You use a tool | Saved items, moodboards, comparisons, measured rooms, the taste summary, price-alert targets, decisions you create and votes you cast (name you type, favourite, note). | To provide the feature you asked for. Guests keep most of this in their own browser; see Cookies. |
| You send an image | The photograph or frame from your camera, downscaled on your device before upload. | To recognise objects, materials and colours and find similar products. The image is processed and discarded; it is not stored and not used to train anything. |
| You contact us | Your message, your address and anything you include. | To reply and keep a record of the exchange. |
| You follow a merchant link | The click (product, merchant, region, time, daily hash), then whatever the merchant collects on its own site under its own policy. | To report affiliate activity honestly and to spot broken links. |
We do not collect payment details: there is no checkout on FORMÉ. We do not use precise location; your region comes from the country of your connection or from your own choice, and you can change it at any time.
03Legal bases
- Contract — account features you sign up for: sign-in, saved items, boards, alerts, exports.
- Legitimate interest — running and securing the site, aggregate statistics from events that are not tied to you, honest affiliate reporting, link health checks. You can object at any time.
- Consent — the optional analytics identifier, marketing or product emails, and the processing of images you choose to send to visual search. Consent can be withdrawn as easily as it was given.
- Legal obligation — keeping the records French and EU law requires us to keep, and answering lawful requests.
Visitors in Türkiye are additionally protected by the Personal Data Protection Law (KVKK, Law No. 6698); this policy serves as the information notice under its Article 10. Visitors in California have the rights set out in the CCPA; we do not sell or share personal information in the CCPA sense.
04Who else sees it
We use a small number of service providers who process data on our instructions under written agreements. Those configured for this deployment are:
| Provider | Role | Data | Location |
|---|---|---|---|
| Hosting provider (see Legal notice) | Serves the site and runs our code | Everything the site processes, in transit and in logs kept for a short period | United States / EU edge locations |
| Database provider | Stores accounts and content | Account and preference data | EU region where available |
| Resend | Delivers transactional email | Your address and the message (sign-in links, alerts, decision outcomes) | United States |
| Vision model providers | Recognise objects in images you send | The image, for the seconds the request takes | United States |
| Affiliate networks (Awin, CJ Affiliate, Rakuten Advertising, Impact) and merchants | Record that a purchase came from FORMÉ | The click; nothing about you from us | UK, United States, EU |
Where data leaves the European Economic Area it travels under the European Commission's standard contractual clauses or an adequacy decision, with the additional measures those frameworks require. We never hand data to advertisers or data brokers.
05How long we keep it
- Account data: until you delete your account. Deletion is immediate in the live database; backups expire within 30 days.
- Usage events: raw events are kept for 13 months at most and reduced to aggregates before that; the daily hash cannot be reversed to a person.
- Visual search images: not kept.
- Price alerts: until you remove them or your account is deleted.
- Shared decisions: until the creator deletes them or 12 months after the last vote.
- Messages to us: three years after the last exchange, unless a legal claim requires longer.
06Your rights
You can ask to access the data we hold about you, correct it, delete it, restrict or object to its processing, and receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time. Account holders can export and delete everything from Settings, instantly and without asking.
To exercise a right without an account, write to the privacy mailbox from the address the request concerns. We may ask for enough information to be sure the request is yours. There is no charge.
If you are unhappy with how we handled your data, you can complain to the Commission nationale de l'informatique et des libertés (CNIL, www.cnil.fr), to your own supervisory authority in the EU/EEA or UK, or in Türkiye to the Personal Data Protection Authority (KVKK Kurumu). We would rather hear from you first.
07Security
Connections are encrypted (HTTPS, HSTS). Passwords are stored only as salted hashes; sign-in links and reset tokens are single-use and expire. Access to production data is limited to the people who operate the service and is logged. Every outbound merchant link is validated server-side so you are never sent to an address we have not approved.
08Children
FORMÉ is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, tell us and we will remove it.
09Changes
When this policy changes in a way that matters, we update the date at the top and, for account holders, say so by email or on sign-in. Earlier versions are available on request.
10Contact
- Generalhello@formeu.co
- Privacyprivacy@formeu.co
- PostNUVEXIS (NX), 47 Rue Vivienne, 75002 Paris, France