Privacy policy
Last updated : 18 July 2026
Data controller
Izzytab, a single-shareholder simplified joint-stock company (SASU) with share capital of 3 000 €, registered with the Lyon Trade and Companies Register under number 993 270 958, whose registered office is located at Espace Florentin, 59 Chemin du Moulin Carron, 69570 Dardilly, France, is the controller of the personal data collected on izzytab.com.
Izzytab undertakes to protect the privacy of its customers and to process their data transparently, in strict compliance with the General Data Protection Regulation (GDPR) and amended Law No. 78-17, known as the French Data Protection Act. For any question relating to your data: bonjour@izzytab.com.
Data collected
Data you provide: identity and contact details (first name, surname, email address, delivery and billing address, telephone number where applicable), Account identifiers, the content of your exchanges with customer service, and where applicable your intra-community VAT number for business orders.
Order and subscription data: Products ordered, amounts, purchase history, status and frequency of your box subscription, delivery tracking information.
Payment data: transactions are processed by Stripe. Izzytab does not collect, store or process any complete banking data (card number, expiry date, security code); only technical transaction identifiers are kept.
Browsing data: technical and connection data collected via cookies and trackers, under the conditions described by the cookie policy.
Purposes and legal bases
To process, prepare, deliver and track your orders, manage your Account and your box subscriptions, and provide after-sales service: legal basis, performance of the contract.
To manage billing and comply with our accounting and tax obligations: legal basis, legal obligation.
To send you commercial communications and our newsletter: legal basis, your consent, revocable at any time.
To ensure the security of the website, prevent fraud and improve our Products and services: legal basis, Izzytab's legitimate interest.
Recipients and processors
Izzytab never sells your data. It is intended for Izzytab's authorized internal departments and for processors acting on instructions and for the sole purposes described: Stripe (payment processing), Boxtal and its partner carriers (order delivery), Resend (sending of transactional emails), Supabase (database hosting, within the European Union) and Vercel (website hosting).
Each of these providers is contractually bound to comply with the applicable regulations and to use your data only for the needs of the services provided. Your data may also be disclosed to the administrative or judicial authorities when required by law.
Transfers outside the European Union
Izzytab favours the hosting and processing of data within the European Union. Where certain providers are likely to process data outside the European Union, these transfers are governed by appropriate safeguards, in particular the standard contractual clauses approved by the European Commission, in order to ensure a level of protection consistent with European standards.
Retention periods
Account data: kept as long as the Account is active. After deletion of the Account or in the absence of activity, it is deleted or anonymized, subject to the legal retention periods.
Billing data: kept for ten (10) years in respect of accounting and tax obligations.
Commercial prospecting data: kept for three (3) years from your last contact.
Cookies and trackers: thirteen (13) months maximum, in accordance with the recommendations of the CNIL.
Security
Izzytab implements appropriate technical and organizational measures to protect your data against any loss, alteration, disclosure or unauthorized access: encryption of exchanges, access controls, hosting with recognized providers. As no system is infallible, we invite you to protect your login credentials and to report any suspicious activity to us without delay.
Your rights
In accordance with the GDPR, you have a right of access, rectification, erasure, restriction of processing, objection (in particular to commercial prospecting) and portability of your data. You may also define directives relating to the fate of your data after your death.
You may exercise these rights at any time by writing to bonjour@izzytab.com. Izzytab may ask you to prove your identity. A response will be provided to you as soon as possible and no later than within the month following your request.
Complaint and contact
For any question relating to the processing of your personal data, you may contact Izzytab at bonjour@izzytab.com or by post to Espace Florentin, 59 Chemin du Moulin Carron, 69570 Dardilly, France.
If, after contacting us, you consider that your rights are not respected, you have the right to lodge a complaint with the French Data Protection Authority (CNIL), 3 Place de Fontenoy, 75007 Paris, www.cnil.fr.
Modification of the policy
Izzytab may update this privacy policy in order to reflect changes in its services or in regulations. In the event of a substantial modification, customers holding an Account are informed by an appropriate means. The date of last update appears at the top of this document.