Privacy Policy

This Privacy Policy explains how Iris Mobile collects, uses and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The data controller for the personal data described here is:

Iris Mobile — Titular: Bartian Anton
NIF: Y9418389H
Address: Calle Otumba 5, 41001 Sevilla, España
Email: support@irismobile.eu

2. What we collect

Iris photograph: the macro photo of your iris taken at our station.
Contact details: name and email or phone, if you submit a form.
Order details: the product, size and shipping address you provide at checkout.
Payment: handled by Stripe — we receive confirmation of payment and order metadata, but never your full card number.

Your iris photograph is used for decorative purposes only. We do not use it for biometric identification and do not treat it as health data.

3. Why we use it (legal basis)

To provide your photo and produce and ship your order (performance of a contract); to respond to your enquiries (legitimate interest / consent); and to meet legal and accounting obligations.

4. Who we share it with

We use trusted service providers who process data on our behalf: Stripe (payments), Supabase (secure hosting of your session and photo), Eye.Photo — our exclusive partner for fast, high-quality processing of your iris image, Resend (transactional email), Vercel (website hosting), and shipping carriers to deliver your order. Each provider acts under a data processing agreement and may only use your data to provide their service to us. We do not sell your personal data.

5. International data transfers

Some of these providers may store or process data outside the European Economic Area (EEA). Where personal data is transferred internationally, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses or an adequacy decision — so that your data receives a level of protection consistent with EU law. You can request more information about these safeguards by writing to us.

6. How long we keep it

Your personal iris page and iris photo are kept for 30 days after your visit. After 30 days they are automatically and permanently deleted from our systems. This is a full deletion, not just a disabled link: the photo file is erased from storage and the personal page together with its QR code stop working and are removed.

Order, contact and accounting data are kept for longer only where necessary to fulfil your order, provide after-sales support and comply with our legal and tax obligations. You can ask us to delete your data sooner at any time.

7. Your rights

Under the GDPR you have the right to access, correct, delete or export your data, and to object to or restrict its processing. To exercise these rights, email support@irismobile.eu. You also have the right to lodge a complaint with your local data protection authority (in Spain, the AEPD).

8. Cookies

We use only essential cookies required for the website and secure checkout to function. We do not use advertising or tracking cookies.

9. Changes

We may update this policy from time to time. The date at the top shows the latest version.