Enquiries, orders, invoicing, project support, security and legal obligations.
Privacy
Notice.
This page explains, in clear international English, which data Avelyxo uses when a business visits the website, prepares a project, places an order or contacts us.
Version dated 14 August 2026Payment is completed through Revolut. Avelyxo does not receive your full card number or complete bank credentials.
Avelyxo does not sell personal data and currently uses no advertising cookies or marketing analytics.
Information is limited to what is useful to assess and deliver your project, manage the business relationship and protect the service.
Data controller
The controller for the processing described on this page is Timéo Ferhane, a French sole trader operating under the business name Avelyxo.
- SIREN 108 645 995 · SIRET 108 645 995 00011 · RNE · APE 62.01Z
- 7 Passage Pasteur, 78420 Carrières-sur-Seine, France
- avelyxo@outlook.com
Avelyxo works exclusively with businesses and professionals. This Notice nevertheless protects the individuals whose data is used, including directors, employees, sole traders and client representatives.
Data we may collect
- Identity and contact: company or brand, any name voluntarily provided, email address, telephone number or WhatsApp details if you choose that channel.
- Project information: current website, industry, goals, visual direction, package, hosting preference, message, references and supplied content.
- Order information: billing country, currency, amount, package, order reference, timestamps and payment status.
- Contract evidence: version and profile of the Terms presented, acceptance, date, language and acknowledgement of this Notice.
- Invoicing and delivery: professional details required for invoices, communications, deliverables, support and payment records.
- Technical information: IP address, browser, device, requested page, security-verification token and result, and logs required for operation and abuse prevention.
Fields marked as required are necessary to process the enquiry or record the order. Website references, the detailed message and any field not marked as required remain optional.
Purposes and legal grounds
| Purpose | Main data | Legal ground |
|---|---|---|
| Respond to an enquiry and prepare a project | Contact, company, brief, references | Pre-contractual steps requested by the individual |
| Record and deliver an order | Project, country, currency, package, acknowledgements | Contract performance and pre-contractual steps |
| Manage invoices and accounting duties | Business identity, order and payment data | Legal obligation |
| Provide support, security and evidence | Communications, logs, references, timestamps | Contract and legitimate interests in protecting the service and legal rights |
| Keep a draft requested by the user | Form answers and entered fields | Requested functionality and legitimate interest in making the journey easier |
Avelyxo does not currently use project-form data for a newsletter, targeted advertising, profiling or automated decision-making that produces legal or similarly significant effects.
Recipients and service providers
Data is accessible to Avelyxo and, only where necessary, to technical or professional providers involved in the service:
- Cloudflare: website hosting, delivery, request rate limiting, Turnstile bot protection and secure request processing;
- Resend: delivery of enquiry, order and confirmation emails;
- Revolut: payment page and transaction processing under its own privacy information;
- Google Fonts: font delivery on the main website, which may receive technical connection data;
- WhatsApp / Meta: only if you choose to use the WhatsApp link, under the relevant service terms;
- accounting or legal advisers, insurers and authorities where required by law or to establish, exercise or defend a right.
Avelyxo does not sell or rent personal data and does not provide it to partners for their own marketing.
Processing outside the European Economic Area
Some international service providers may process data from countries outside the European Economic Area. Where the GDPR requires it, this processing must rely on a recognised mechanism, such as an adequacy decision or Standard Contractual Clauses, together with any necessary supplementary safeguards.
You may request further information about applicable safeguards by emailing avelyxo@outlook.com.
How long data is kept
| Data | Period or criterion |
|---|---|
| Enquiry that does not lead to a contract | Up to 3 years after collection or the prospect’s last contact, unless they object or the data is needed for a legal claim. |
| Client relationship and business follow-up | For the active relationship, then up to 3 years for business follow-up; contract records may be archived for 5 years. |
| Contracts, orders and business correspondence | 5 years from the relevant completion or end of the relationship, subject to any dispute. |
| Invoices and accounting records | 10 years from the end of the relevant accounting period. |
| Acceptance and payment evidence | For the period required to perform the contract, establish evidence and protect legal rights, generally aligned with contract retention. |
| Local project draft | Up to 7 days on your device, or earlier if the draft is cleared. |
| Order state held in session | For the browser session. |
| Technical and security logs | For the shortest period compatible with incident detection, security, provider configuration and applicable legal duties. |
The same information may be kept for longer in a restricted archive where a legal obligation, dispute or defence of a right requires it.
Cookies and local storage
The website currently uses no advertising cookies or marketing analytics. It does use technical mechanisms required for the project journey:
- Local storage: an optional project draft is held for up to 7 days so you can resume the form;
- Session storage: the order summary is temporarily held before and during the payment redirect;
- Technical resources: hosting, security services and Google Fonts may receive the connection data required to deliver the page;
- Abuse prevention: where Turnstile is enabled on a form, Cloudflare may use the technical mechanisms strictly necessary to perform the check. Avelyxo does not use them for advertising.
These mechanisms are not used to track you for advertising. If non-essential tools are introduced later, this Notice and any required consent mechanism will be updated before they are activated.
Your rights
Depending on your circumstances and the legal ground, you may request access, correction, deletion, restriction, portability of certain data or object to processing based on legitimate interests. Where processing relies on consent, consent may be withdrawn without affecting earlier lawful processing.
Send your request to avelyxo@outlook.com with enough information to identify the relevant data. Proof of identity will only be requested where there is reasonable doubt. A response is normally provided within one month.
You may also lodge a complaint with the French data protection authority, the CNIL, or with the competent supervisory authority in your country where applicable.
Security and payment
Avelyxo uses proportionate technical and organisational safeguards, including HTTPS encryption, restricted access, server-side validation, amount checks, security headers, request rate limiting, automated-submission controls and limited retention.
Before an order or update request is submitted, Cloudflare Turnstile may issue a single-use verification token. The token, IP address and outcome are validated on the server. To limit abuse, the website also uses a technical identifier hashed from connection data; it is not used for advertising or commercial profiling.
Payment takes place in Revolut’s secure environment. Avelyxo receives the information needed to identify and verify the transaction but does not collect full card numbers, security codes or bank credentials entered on the Revolut page.
No system is entirely risk-free. If you identify a security or privacy issue, please report it to avelyxo@outlook.com.
Updates to this Notice
This Notice describes the tools and processing planned for the website version dated 14 August 2026. It will be updated before any material change, including the introduction of analytics, advertising, new payment methods or new service providers.
The version applicable when an order is placed may be retained together with the corresponding evidence that the information was provided.
QUESTION ABOUT YOUR DATA?Contact Avelyxo directly.
avelyxo@outlook.com ↗