1. About us

IzzyTown is a service designed to revitalize the downtown ecosystem through the implementation of proposals dedicated to merchants and their customers, including the possibility of shopping hands-free by having your shopping bags delivered directly to a specific area. We work with passion to provide you with the best mobile ergonomics and the latest technologies available, serving the first application 100% dedicated to the dynamism of the city center.
‍
In increasingly pedestrianized cities, if you want to free your arms (and mind), enjoy longer and fully a city returned to pedestrians, but especially consume locally in downtown shops always more attractive and who also want to make your life in the city easier...IzzyTown is there for you.
‍
And we will not stop there. IzzyTown will also allow you to discover facets of the city that you might not know about, open up new perspectives of discovery, and finally give you the benefit of advantages at a certain number of partner merchants.On IzzyTown, your shopping belongs to you and so does your data. We do not share your information with anyone, and if we ever do, we will ask for your permission beforehand.

2. Who is the data controller?

When you use our services, you share your information with IzzyTown, a service marketed by IzzyTown, a simplified joint stock company with a capital of 30,000 euros, whose registered office is located at 36 avenue Foch - 69006 Lyon, registered with the Lyon Trade and Companies Register under number 913 724 779. IzzyTown SAS is responsible for processing the data

3. What are the collection methods?

We may collect your data directly, in particular:
- when you visit our website and/or our mobile application
- when you register on the Site
- when you post a review on our Site
- when you contact us following a complaint or a request for information
- when you visit IzzyTown's social networksFor example, to create your account we need your name, your date of birth and your telephone number. They will allow you to identify yourself on IzzyTown.

Your name serves as your identifier, your date of birth allows us to know if you are of legal age, your phone number serves to authenticate your account.

We also need a means of payment, which will allow you to pay online for the delivery of your bags through a perfectly secure banking interface.

4. What treatments do we perform and what are their characteristics?

For each processing operation we carry out, you are informed of the purpose of this processing, i.e. for what purposes we use your data, associated with their retention period as well as the legal basis for the processing carried out. In this regard, only the departments of IzzyTown and the subcontractors authorized to process your personal data have access to the data, within the limits of their respective attributions.
‍
When the processing is based on consent, the Data Subjects have the right to withdraw it at any time and free of charge.

*At the end of these retention periods, your Data will be archived in a secure manner for the necessary retention and/or prescription periods resulting from the applicable legislative or regulatory provisions. At the end of these periods, your Data will be deleted, in accordance with the regulations in force

5. What is the basis for using your data?

As a company based in Europe (France specifically), we have the right to use your personal data, only when certain conditions are met. These conditions are called "legal bases"; at IzzyTown we mainly use one of the following four:
‍
- Contract. One of the reasons we may use your data is simply because without it we could not provide our services, as described in our Terms of Service. For example, it is because IzzyTown is an application based on your shopping journey and the delivery of your shopping bags that we need to have certain information about you, such as your name, a delivery address, a means of payment. The app simply would not work properly without this information.
‍
- Legitimate Interest. Another reason is known as "legitimate interest". For example, we need to use your data, to provide and improve our services to you, to protect your information, to answer a support question. An important point about legitimate interest is that it does not override your right to privacy. We rely on legitimate interest only when we believe that the way we use your data does not impact your privacy and makes sense to you, or if there is a clear reason to do so.
‍
- Consent. In some cases, we may ask you for your consent before we use your data. In these cases, we will ensure that you can opt out, either directly in the app or through the permissions associated with your phone's usage. Even if we do not rely on your consent to use your data, we may ask for your permission to access your data: for example, your location data through your phone's permissions.
‍
- Legal basis. We may need to use your information in order to comply with the law, such as during a valid judicial requisition, or when we need to take action to protect our users.

6. How do we protect your personal data?

We take all precautions to preserve the security and confidentiality of your personal data, in particular to prevent it from being distorted, damaged, disclosed or accessed by unauthorized third parties.

6.1 Security of your data

All the pages of the Site and mobile application on which you are led to communicate personal data as well as the pages relating to the transactions are secured and are in https.

6.2 Transaction security

For payment purposes, your credit card information is processed on behalf of IzzyTown by a certified payment processor. Our provider is PCI-DSS certified. This standard is an international security standard whose objectives are to ensure the confidentiality and integrity of cardholder data, and thus secure the protection of card and transaction data.
‍
When you place an Order for payment by credit card, our Order taking system redirects you to the system of our payment provider who collects your data and carries out various checks to avoid abuse and fraud. The payment data is stored on our provider's servers and is not transmitted to IzzyTown's servers at any time. Our service provider requests authorization from the bank and sends us a transaction number that allows operations up to the amount of the authorization.

In order to avoid having to re-enter your bank details for future Orders, you can choose, by checking the acceptance box provided for this purpose, to have your bank cards associated with your online account. Your credit cards are stored securely with our service provider. You can decide at any time to delete them in the My Account section. They are automatically deactivated when the validity date of the card expires.

6.3 Security of data transmitted to our external service providers

We always select our external service providers with the utmost care and attach great importance to the way in which your data is secured.

Thus, these service providers only act on the instructions of IzzyTown and at no time use your data for anything other than the performance of the services we entrust to them. A contract is systematically concluded between IzzyTown and the selected service providers in which we request that appropriate technical, physical, logical and organisational measures be implemented to ensure the confidentiality and security of the personal data processed and thus prevent it from being distorted, damaged or accessed by unauthorised third parties.

7. How do we use the information?

We want to provide you with the most complete application to perfectly deliver your shopping bags but also offer you new shopping routes, points of interest in town or specific benefits to reward your use of the IzzyTown service. For this reason, we may use your information to:
‍
- Develop, operate, improve, update and secure our services.
‍
- Communicate with you, including via email. For example, we may respond to inquiries to our Support by email (you can access this through the app as well)
‍
- Create statistical studies, track and analyze usage trends. For example:
- Analyze usage by age range, location, gender
- Perform statistical calculations, globally and anonymously. We will never disclose your identity.
- Study metrics on registrations and in usage paths.
‍
- Better understand the shopping paths in downtown. We develop algorithms to measure, analyze, and characterize users' shopping journeys over time. For example, by studying your shopping habits (never what you buy of course, that we have and will never know), we can estimate whether you go more to such and such type of store, such and such category of outlets.
‍
- Customize the IzzyTown service. For example, suggest downtown routes, shopping routes, new store addresses,...
‍
- Send you notifications. Of course, if you don't want to receive them, just disable them in the system settings. You can also check your notification preferences in the app.
‍
- Verify your identity, and prevent fraud, or any other unauthorized or illegal activity.
‍
- Enforce our Terms of Service and other usage policies.

8. Who are the recipients of your Data and do we transfer your personal data outside the European Union?

We strictly control all transfers as well as the relations with the recipients of your Data.
‍
(i) Recipients of your Data
Your Data is strictly intended for us, our competent internal departments as well as our specifically authorized technical personnel, in compliance with the purposes listed above.

We may communicate some of your Data to our subcontractors in order to process certain requests, in particular as part of the delivery of your shopping bags to the indicated location. These subcontractors are required to respect the confidentiality, integrity and security of the Data provided to them and to use it only for the purpose of performing their services. Under special circumstances, we may disclose your Data to third parties for legal reasons. We may share information about you if we believe disclosure is necessary to:
‍
- Comply with a valid legal process or administrative request, or comply with laws, rules and regulations.
- Investigate, remedy, or even penalize violations of the Terms of Service.
- Protect our rights, property, and safety, or that of users or others.
- Detect and correct fraud and security problems.
- Other third parties. We may also share aggregated, non-personally identifiable and anonymized information.
‍
(ii) Transfers of your dataYour personal data is processed and hosted on servers located in the European Union.

In addition, it is possible, exceptionally, that a subcontractor located in a Third Country to access your personal data.When this is the case, we always select them with the utmost vigilance.
‍
Thus:
‍
- We select by priority subcontractors "recognized as adequate by the European Union"
- These service providers only act on IzzyTown's instructions and at no time use your Data for anything other than the performance of the services we entrust to them.
- We support these transfers with appropriate legal mechanisms, including the signing of contractual clauses specifically for this type of transfer.
- A contract is systematically concluded between IzzyTown and the selected service providers in which we request that appropriate technical, physical, logical and organisational measures be implemented to ensure the confidentiality and security of the personal data processed and thus prevent it from being distorted, damaged or accessed by unauthorised parties.

9. What are your rights?

In accordance with the Regulation, you have, as a Data Subject, the rights listed below:
‍
- A right of access, i.e., to obtain confirmation as to whether or not the Data concerning you are being processed and, when they are, access to said Data, as well as various information including the purposes of the processing, the category of Data concerning you, the recipient(s) of the Data, etc.
- a right to rectify, as soon as possible, Data concerning you that are inaccurate, incomplete, outdated or equivocal, or whose collection and processing are prohibited;
‍
- a right to object to the processing of Data by the data controller or to a transfer of Data, unless there are compelling legitimate reasons that override your interests;
‍
- a right to the deletion of your Data on the following grounds:- The Data is no longer necessary for the purposes for which it was collected or processed;
- You have withdrawn the consent on which the processing was based, and there is no other legal ground for processing your Data ;
- You object to the processing of the Data and there is no overriding interest that justifies the processing;
- The Data has been processed unlawfully;
- The Data must be erased in order to comply with the legal obligation to which we may be subject;
- The Data was collected when the data subject was a minor.
‍
- A right to have your account deleted. We will be sad to see you go, but if you wish to delete your account, you can always contact us at contact@izzytown.com. You can also do it directly from the application.- A right to reinstate the account. If you have asked us to delete your account and change your mind, you have 30 days to reinstate it; after that time, we will delete your information from our servers.
‍
- A right to arrange in advance and during your lifetime the conditions under which you wish your Data that we have collected and processed to be stored and communicated after your death;
‍
- Of a right to Data portability and retrieval allowing you to receive the Data you have transmitted to us in a structured, commonly used and machine-readable format, and to transmit it to another data controller, without us, as the data controller to whom the Data was originally communicated, being able to prevent this.

10. How to exercise your rights?

If you wish to exercise any of the above rights, you may send your request:
For France: electronically to contact@izzytown.com or by post addressed to IzzyTown's headquarters 36 avenue Foch - 69006 Lyon.
‍
If you exercise any of these rights electronically, the Data will be provided to you, where applicable, electronically where possible, unless you have specifically requested otherwise.
‍
If you consider that our exchanges have not been satisfactory, you may lodge a complaint with the national supervisory authorities in charge of compliance with personal data protection obligations, namely the Commission nationale de l'informatique et des libertés (Cnil) for France.

11. Can we change the Privacy Policy?

We may change our Privacy Policy by posting an update on the Site and at www.izzytown.com.Nous. We encourage you to frequently visit the "Privacy Policy" and/or the TOS section of the Site to stay informed of your rights.

12. How to contact us ?

If you have any questions about our Privacy Policy or if you would like to access, correct, or request the deletion of your data, you may email us at any time at contact@izzytown.com
. Thank you for using IzzyTown!