BAL Foundry - Privacy policy
March 2026 - Version 1.0
This Privacy Policy describes how personal data may be collected, processed and protected in connection with the operation of the website www.bal-foundry.com (the “Website”), in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection law.
This Privacy Policy explains how BAL Foundry may collect and process personal data of visitors, customers and users of the Website, the purposes for which such data may be processed, the legal bases relied upon for such processing, the retention periods applied, and the rights available to individuals under applicable data protection regulations.
This Privacy Policy supplements the Terms and Conditions governing the use of the Website and the End User License Agreement (EULA) governing the licensing and use of Font Software made available through the Website.
The data controller responsible for the processing of personal data on this Website is BAL Foundry (www.bal-foundry.com) a trade name and creative division operated by Guillaume Sbalchiero, Entrepreneur Individuel (E.I.), registered in France under SIRET number: 833 182 579 00 031 / VAT ID: FR48 833 182 579 / Vendor ID: BAL / Registered office at 21 rue Frédérick Lemaître, 75020 Paris, France.
BAL Foundry determines the purposes and means of processing personal data collected through the Website.
For any question relating to this Privacy Policy or the processing of personal data, BAL Foundry may be contacted at info@bal-foundry.com.
BAL Foundry only collects and processes personal data that is strictly necessary for the purposes described in this Privacy Policy.
Personal data may be collected when users:
— browse the Website
— create an account or access their orders
— place orders
— purchase or download Digital Materials
— contact BAL Foundry
— subscribe to the newsletter
Depending on the circumstances, the personal data processed may include:
— identification information such as name and surname
— contact details including email address and postal address
— billing and invoicing information
— order and transaction data
— account access information where applicable
— communications exchanged with BAL Foundry
— technical data relating to access to and use of the Website necessary for its operation and security.
Customer account access is provided through secure email access links rather than password-based authentication.
We process your personal data on the following legal bases solely for the following purposes.
In the context of customer file management:
— Legal basis: in accordance with the sales contract;
— Purposes: for customer management, including the creation of online accounts; the management of contracts, invoicing, purchase history, management of any claims.
Please note that if you are placing an order on behalf of a company, we will process your name, email address, and phone number as provided by you when placing the order.
— Legal basis: in our legitimate interest;
— Purposes: for customer management, including the creation of online accounts; the management of contracts, invoicing, purchase history, management of any claims.
— Purposes: to carry out and/or promote our business: to monitor customer relations and conduct satisfaction surveys or other studies; to manage any unpaid bills and any disputes; to send communications or promotions to customers; to select and analyze purchase histories to carry out any loyalty initiatives; to manage accounting; to manage comments following purchase and publish them on the Website if applicable; to manage promotions via social networks.
In the context of request management:
— Legal basis: in our legitimate interest in responding to such requests and to comply with a legal obligation when you exercise any of the rights provided for in this Policy;
— Purposes: to respond to requests made through our Website or by any other means; to follow up on these requests; to manage requests to exercise rights as provided for below in Article concerning User Rights.
In the context of newsletter subscriptions management:
— Legal basis: your consent;
— Purposes : to track newsletter subscriptions and unsubscriptions.
Access to personal data is limited to persons who require it in order to perform the purposes described in this Privacy Policy.
Personal data may be processed internally by BAL Foundry or transmitted to trusted service providers acting on behalf of BAL Foundry for the operation of the Website and related services.
These recipients may include:
— technical service providers responsible for hosting, maintaining or securing the Website
— payment service providers responsible for processing online transactions
— analytics providers responsible for measuring website traffic and usage
— email service providers used to send newsletters or transactional emails
— professional advisers where required to comply with legal obligations.
Payments made through the Website are processed by Stripe, which acts as a payment service provider and processes payment information in accordance with its own privacy policy: https://stripe.com/privacy
Website traffic and usage statistics are analysed using Matomo, which allows BAL Foundry to understand how visitors interact with the Website and to improve the performance and usability of its services.
These providers process personal data only to the extent necessary for the services they provide and in accordance with applicable data protection regulations.
Some technical service providers used for the operation of the Website may process personal data outside the European Economic Area (EEA), which may involve international transfers of personal data.
Where such transfers occur, they are carried out in accordance with applicable data protection regulations and subject to appropriate safeguards designed to ensure an adequate level of protection for personal data.
These safeguards may include standard contractual clauses approved by the European Commission or other mechanisms recognised under applicable data protection law.
The Website uses cookies necessary for its technical operation and for limited audience measurement.
Cookies are small text files stored on a user’s device when visiting a website in order to enable certain functions or collect information about website usage.
Certain cookies are strictly necessary for the operation of the Website, including:
— maintaining user sessions
— preserving shopping cart functionality
— enabling secure access to services.
The Website also uses Matomo analytics to collect aggregated and anonymised statistics about how visitors use the Website. This information is used solely to understand general website usage and to improve the performance and usability of the Website.
BAL Foundry does not use advertising cookies or third-party marketing trackers.
By continuing to browse the Website, users agree to the use of cookies necessary for its operation and limited audience measurement.
Personal data is retained only for the period necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations.
— Customer file management: for the management of your account while it is active or for the management of various requests sent to us, then for three years from your last action (certain data relating to billing, purchases, and contracts will be archived for the applicable legal limitation period, either due to a legal obligation to retain them or for evidentiary purposes);
— Management of requests and comments: the time required to process your request or comment, then archiving for the applicable legal retention period;
— Dissemination of comments: during the period in which the object of the comment (i.e. the product or the font) is available and for a maximum of five years;
— Newsletter subscription: until you unsubscribe (via the unsubscribe link or by sending a request as provided for the other rights below: contact form, email, or postal mail);
Once the relevant retention period has expired, personal data is deleted or anonymised where appropriate.
For more information about how Stripe processes personal data,
please refer to Stripe’s privacy policy:
— https://stripe.com/legal/privacy-center (En)
— https://stripe.com/fr/privacy (Fr)
In accordance with the GDPR, individuals whose personal data is processed through the Website have the right to:
— access their personal data
— request rectification of inaccurate or incomplete data
— request erasure of personal data where legally applicable
— request restriction of processing
— object to certain types of processing
— request data portability where applicable
— withdraw consent at any time where processing is based on consent
Requests relating to the exercise of these rights may be addressed to: info@bal-foundry.com
Individuals also have the right to lodge a complaint with the French data protection authority: CNIL — Commission Nationale de l’Informatique et des Libertés — 3 Place de Fontenoy TSA 80715 — 75334 Paris Cedex 07, France.
BAL Foundry implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction.
These measures aim to ensure a level of security appropriate to the nature of the data processed. Access to personal data is restricted to persons who require it for the purposes described in this Privacy Policy.
This Privacy Policy may be updated periodically to reflect changes in legal requirements, technical infrastructure or the operation of the Website.
Each version of this Privacy Policy is identified by a version number and publication date.
The version published on the Website constitutes the version currently in force.
Requests relating to this Privacy Policy or to the processing of personal data may be addressed to BAL Foundry using the contact details provided on the Website.
For any questions or requests, please contact info@bal-foundry.com.