Privacy policy

Valentin Resin, sole trader (French “entrepreneur individuel”, EI), trading as AzurMove (AzurStock is an AzurMove service) — SIRET 891 066 581 00028 — 1460 chemin des Terriers, 06600 Antibes, France — contact@azurstock.fr — 07 56 99 29 60.

No data protection officer has been appointed; your contact for anything related to personal data is contact@azurstock.fr.

Depending on how you use the service, we process the following data:

• Identity and contact details: first name, last name, email address, telephone number, language, password (stored only as a hash), profile picture if you sign in with a Google account.
• Addresses: pickup and delivery addresses (address book and the address frozen in each request), geographic coordinates, floor, lift, truck access, access notes.
• Estimates and quotes: declared items and volumes, options, preferred date and slot, photos you upload to request a guaranteed price, campaign parameters (UTM) of the visit that led to the quote.
• Contract and services: requests (type, dates, statuses, references), your inventory (items, photos, labels, dimensions, condition, box contents you describe, storage location), the log of every movement, check-in and delivery signatures, delivery proof photos, reservations and notes.
• Billing: customer identifier and card fingerprint at our payment provider Stripe (used to apply the launch offer once per household), invoices (number, amounts, status), subscription (billed volume, dates). AzurStock never holds your card number.
• Messaging: conversations with our team and their attachments.
• Notifications: the log of emails and SMS sent to you (recipient, subject, content, status).
• Technical data: audit log of sensitive actions (who, what, when), application logs, temporary anti-abuse counters (login attempts, code requests), cookies (section 8).
• Business enquiries and contact forms: company, contact name, email, telephone, sector, volume, message.

• Producing estimates and quotes, keeping your quote for 7 days — pre-contractual measures taken at your request.
• Creating and managing your account, performing the service (pickup, inventory, storage, deliveries, returns), service notifications by email and SMS (confirmations, reminders, delivery) — performance of the contract.
• Payment, invoicing, dunning of unpaid amounts, keeping accounting records — performance of the contract and legal obligation (accounting and tax rules).
• Securing the service and preventing fraud: verification of your email, confirmation of a new delivery address by SMS code and alert email, audit log, rate limiting, one-time use of the launch offer — legitimate interest in protecting your belongings and our service, and performance of the contract.
• Handling claims, reservations, disputes and legal requisitions — legitimate interest (defence of rights) and legal obligation.
• Replying to contact and business-quote requests — pre-contractual measures and legitimate interest.
• Sending commercial information by email — your consent (box not ticked by default, withdrawable at any time from your profile or via the unsubscribe link).
• Audience measurement (Google Analytics 4) and measurement of advertising campaigns (Google Ads) — your consent, given through the cookie banner.

Within the company, your data is accessible only to the AzurStock team and the AzurMove logistics team for the needs of their tasks: the field team sees, for each stop, your identity, address, telephone number and the list of items to load or deliver. Our processors and partners, bound by contract and confidentiality, are:

• Stripe Payments Europe Ltd (Ireland) — online payment, saved card, subscription and invoices.
• Resend Inc. (United States; data hosted in the European Union, eu-west-1 region) — sending of emails.
• Onoff Telecom (France), through AzurMove's SMS gateway — sending of SMS.
• OMG Serv, France, https://omgserv.com — hosting of the site, the database and the private file storage (inventory photos, signatures, documents).
• Google Ireland Ltd — audience measurement (Google Analytics 4) and advertising (Google Ads), only with your consent; sign-in with a Google account if you choose that option (Google then acts as a separate controller).
• Base Adresse Nationale (adresse.data.gouv.fr, French public service) — address suggestions: the address you type is sent to this service to complete it.
• AzurMove's internal scheduling tool — planning of rounds (identity, address, slot, list of items to deliver).
• Our accountants, legal advisers and insurer (in case of a claim), and public authorities upon a legal requisition.

Your data is hosted in France. Some processors (Stripe, Resend, Google) are established in or may transfer data to the United States. These transfers are governed by the European Commission's standard contractual clauses and, for certified providers, by the EU–US Data Privacy Framework. You may ask us for a copy of the applicable safeguards.

• Customer account and contract data: for the duration of the contract, then 3 years after its end (limitation period for claims), after which the account is anonymised.
• Inventory, photos, signatures and signed records: for the duration of the contract, then 3 years after the return of the items, or until the closure of an ongoing claim.
• Invoices and accounting documents: 10 years (legal obligation).
• Quotes not converted into an order: 12 months after their expiry (quotes are valid for 7 days); photos uploaded for a guaranteed price: same period.
• Contact and business-enquiry requests without a contract: 3 years after the last contact.
• Messaging: for the duration of the account.
• Email and SMS sending log: 12 months.
• Audit and technical logs: 12 months; audit records attached to a contract: same period as the contract.
• Encrypted backups: 30 days.
• Cookies: see section 8.

You have the right to access your data, to rectify it, to have it erased, to restrict or object to its processing, to receive the data you provided in a portable format, to withdraw your consent at any time, and to give instructions on the fate of your data after your death.

To exercise these rights, write to contact@azurstock.fr from the email address of your account, or by post to the address in section 1. We reply within one month (extendable by two months for complex requests) and may ask you for proof of identity in case of reasonable doubt.

Erasing your account does not end your storage contract: your items must first be returned, and invoices are kept for the legal period. Your data is then anonymised.

Commercial emails: withdraw your consent from your profile or with the unsubscribe link in each email. Service notifications required for the contract (confirmations, reminders, unpaid amounts) are maintained.

When you first visit, a banner lets you accept, refuse or customise cookies by category. Until you choose, only strictly necessary cookies are set and no measurement or advertising tag stores anything (Google Consent Mode v2, default “denied”). Your choice is kept for 6 months and can be changed at any time from the “Manage cookies” link in the footer.

• Necessary (always on): session cookie of the customer space (authjs.session-token and its security cookies, 30 days at most), the cookie that keeps your estimate (azs_quote, 7 days), your cookie choice (azurstock_consent, 6 months) and, for our staff only, the customer-support impersonation cookie (azs_imp, 1 hour).
• Audience measurement (subject to consent): Google Analytics 4 cookies (_ga, _ga_*), kept for 13 months at most, to understand how the site is used and improve it.
• Advertising (subject to consent): Google Ads cookies (_gcl_*), kept for 90 days at most, to measure the effectiveness of our campaigns; no personalised advertising is served without your consent.

Encrypted connections (HTTPS), passwords stored as hashes, role-based access (customer, field team, administration) with an audit log of sensitive actions, private photos served through temporary signed links (15 minutes) after an authorisation check, removal of photo metadata (including GPS location) on upload, rate limiting and SMS confirmation of any new delivery address, daily backups. Card data never passes through our servers.

If you consider that your rights are not respected, you may contact us at contact@azurstock.fr and, if you are not satisfied, lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.

This policy may be updated to reflect changes in the service or in the law. The date of the version in force is shown at the top of this page; substantial changes are notified to account holders by email.