Privacy policy

Who processes your data

HIRAYA, a SAS with a share capital of €2,000, 18 avenue Fauveau, 93800 Épinay-sur-Seine, France (SIREN 109 752 923), publisher of hirayaparis.fr, is the data controller. Contact: contact@hirayaparis.fr · +33 7 71 74 02 85.

Data we collect

Private chef booking

Name, email, phone, address of the service, menu, number of guests, time slot, access instructions, allergies or dietary requirements (optional).

Bento order

Name, email, phone, delivery address or collection, items ordered, notes.

Quote request

Type of occasion, name, email, phone, number of guests, date, venue, message.

Payment

Processed directly by Stripe. HIRAYA neither receives nor stores your card details.

Why we use it

• To handle your quote request, booking or order and deliver it (Article 6(1)(b) GDPR: pre-contractual steps and performance of the contract).
• To send you confirmations and practical information about your experience.
• To adapt your menu to your allergies or requirements, only if you share them (Article 9(2)(a) GDPR: explicit consent, which you may withdraw at any time).
• To meet our legal and accounting obligations (Article 6(1)(c) GDPR).

We never send marketing emails without your consent, and we never sell your data.

Who we share it with

Your data is only shared with the providers needed to run the service, acting on our instructions:

• Stripe Payments Europe (online payment and transaction security).
• Amazon Web Services, through our technical provider's Mail Hub sending service (confirmation emails).
• OVH SAS (website hosting, in France).
• The IGN Géoplateforme, a French public service (address suggestions while you type the service or delivery address).

Where one of these providers processes data outside the European Union, the transfer is covered by the European Commission's standard contractual clauses or by the EU–US Data Privacy Framework.

How long we keep it

• Quote requests that do not lead to a booking: 3 years after the last contact.
• Bookings and orders: for the duration of the business relationship, then 3 years.
• Allergies and dietary requirements: until the end of the experience concerned.
• Accounting records (invoices, payments): 10 years, as required by French commercial law.

Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability and the right to withdraw your consent at any time. Write to us at contact@hirayaparis.fr: we reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

Cookies and local storage

No advertising cookies and no audience measurement. For the duration of your visit, the website only keeps a technical flag with no personal data (the opening animation has already been shown). During payment, Stripe sets cookies that are strictly necessary for the security of the transaction.