Privacy Policy
Last updated: 10 November 2026
1. Introduction
At DESIGN TO SOCIETY, we value privacy, transparency and the protection of personal information.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact our team, enquire about our services or engage in a professional relationship with us.
DESIGN TO SOCIETY is a brand operated by THE CURATOR SAS, a company registered in France.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable French data protection legislation.
2. Data Controller
The data controller responsible for the processing activities described in this Privacy Policy is:
THE CURATOR SAS
Operating under the brand DESIGN TO SOCIETY
Registered Office: Villa Fal, 1 Rue Francis Jammes, 64200 Biarritz, France
Email: info@designtosociety.com
Telephone: +33 (0)5 25 53 00 95
Website: https://www.designtosociety.com
For any questions regarding the processing of your personal data, please contact us using the details above.
3. Personal Data We Collect
Depending on your interactions with DESIGN TO SOCIETY, we may collect and process the following categories of personal data.
Personal and Professional Information
First and last name
Professional email address
Telephone number
Company, studio or organisation name
Job title and professional position
Business address and country of operation
Professional website, portfolio and publicly available professional profiles
Communications and Enquiries
Information submitted through contact forms
Email correspondence and professional communications
Requests for information, proposals or representation
Meeting details and correspondence history
Information voluntarily provided during professional discussions
Business and Contractual Information
Information required to establish and manage professional relationships
Contractual and administrative contact details
Billing and payment-related information
Project correspondence and relevant business records
Website and Technical Information
IP address and technical connection data
Browser and device information
Website usage and navigation data
Cookies and similar tracking information, where applicable
We seek to collect only personal information that is relevant and necessary for the purposes described in this Privacy Policy.
4. How We Collect Personal Data
We may collect personal data directly when you:
Visit or interact with our Website
Complete a contact form
Contact us by email, telephone or other professional communication channels
Request information about our services
Submit a portfolio, project or collaboration proposal
Enter into a contractual or professional relationship with us
Meet or communicate with our team during professional events
We may also obtain relevant professional contact information from publicly accessible sources, professional directories, company websites, business networks, referrals and professional introductions, where permitted by applicable law.
Where personal information is obtained indirectly, we provide the information required by applicable data protection legislation.
5. Purposes and Legal Bases for Processing
We process personal data only where an appropriate legal basis exists.
PurposeLegal BasisResponding to enquiries and contact requestsLegitimate interests or pre-contractual measuresPreparing proposals and evaluating collaborationsPre-contractual measures or legitimate interestsManaging client and partner relationshipsContractual necessity or legitimate interestsProviding agreed professional servicesContractual necessityManaging invoices, accounting and legal obligationsLegal obligation or contractual necessityMaintaining relevant professional contacts and developing business relationshipsLegitimate interests, subject to applicable requirementsSending newsletters and promotional communicationsConsent or another lawful basis where permittedMaintaining Website functionality and securityLegitimate interests or legal obligationUsing non-essential analytics or marketing technologiesConsent where required by lawEstablishing, exercising or defending legal claimsLegitimate interests or other applicable legal grounds
Our legitimate interests may include developing professional relationships, responding to business enquiries, maintaining our network, protecting our digital infrastructure and conducting ordinary business operations.
Where processing relies on legitimate interests, we take into account the rights and freedoms of the individuals concerned.
6. Professional Communications and Marketing
DESIGN TO SOCIETY operates primarily within the professional design, architecture, creative industries and hospitality sectors.
We may use relevant professional contact information to communicate about our services, activities, projects, events and potential collaborations, where permitted by applicable law.
When commercial communications are directed towards professionals, they must be relevant to the recipient's professional activities and accompanied by an accessible means of opting out.
Where prior consent is legally required, we will seek that consent before sending promotional communications.
You may object to direct marketing at any time by contacting info@designtosociety.com or by using the unsubscribe mechanism provided in the relevant communication.
We will not use personal data for direct marketing after receiving a valid objection.
7. Sharing Personal Data
We may share personal data with authorised recipients where necessary for legitimate business operations, service delivery or compliance with legal obligations.
These recipients may include:
Authorised members of our team
Professional collaborators involved in relevant projects
Technology, hosting and IT service providers
Customer relationship management and communication service providers
Accounting, legal and administrative advisers
Public authorities, where disclosure is required by law
Access to personal data is limited to recipients who need the information for an authorised purpose.
Where third parties process personal data on our behalf, we implement appropriate contractual and organisational safeguards as required by applicable law.
We do not sell personal data to third parties.
8. International Data Transfers
Given the international nature of our activities, personal data may be processed by authorised service providers or shared with relevant professional partners located outside the European Economic Area.
Where personal data is transferred to a country that does not benefit from an adequacy decision of the European Commission, we implement an appropriate transfer mechanism, such as the European Commission's Standard Contractual Clauses, together with supplementary safeguards where necessary.
Information about applicable transfer safeguards may be requested using the contact details provided in this Policy.
9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal, accounting and regulatory requirements.
Retention periods depend on the nature of the information and the relevant processing activity.
In particular:
Professional enquiries: retained for the period necessary to respond and manage subsequent exchanges.
Prospect information: generally retained for up to three years from collection or the last relevant interaction initiated by the prospect, in accordance with applicable CNIL guidance.
Client and contractual information: retained for the duration of the relationship and any applicable legal limitation or statutory retention periods.
Accounting and financial records: retained in accordance with applicable French accounting and tax legislation.
Marketing preferences and consent records: retained for the period necessary to demonstrate compliance and respect communication preferences.
Technical data: retained for a period proportionate to operational and security requirements.
Upon expiry of the applicable retention period, personal data is deleted, anonymised or securely archived where continued retention is legally justified.
10. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, unlawful processing, accidental loss, alteration, disclosure or destruction.
These measures are reviewed and adapted where appropriate, taking into account the nature of the information, the risks involved and available technologies.
Access to personal information is restricted to authorised persons and service providers with a legitimate need to process it.
Although we take appropriate precautions, no method of data transmission or storage can be guaranteed to be completely secure.
11. Your Rights
Under the GDPR and applicable French data protection legislation, you may exercise the following rights, subject to the relevant legal conditions:
Right of Access: request confirmation of whether we process your personal data and obtain a copy.
Right to Rectification: request the correction of inaccurate or incomplete personal information.
Right to Erasure: request deletion of your personal data in circumstances provided by law.
Right to Restriction: request that the processing of your personal data be restricted in certain circumstances.
Right to Data Portability: receive certain personal data in a structured, commonly used and machine-readable format, where applicable.
Right to Object: object to processing based on legitimate interests, subject to applicable legal conditions.
Right to Withdraw Consent: withdraw consent at any time where consent is the legal basis for processing, without affecting the lawfulness of prior processing.
Right Regarding Automated Decisions: exercise applicable rights in relation to decisions based solely on automated processing that produce legal or similarly significant effects.
You may also provide instructions regarding the handling of your personal data after your death, in accordance with applicable French legislation.
To exercise your rights, please contact:
Email: info@designtosociety.com
Postal Address: THE CURATOR SAS, 1 bis Rue Francis Jammes, 64200 Biarritz, France.
We will respond to requests within the time limits prescribed by applicable law, generally within one month, subject to any legally permitted extension.
12. Cookies and Similar Technologies
Our Website may use cookies and similar technologies to support its functionality, maintain security and, where implemented, measure audience engagement or support marketing activities.
Strictly necessary technologies may be used without consent where permitted by law.
Other technologies requiring consent will be activated only where valid consent has been obtained.
Where applicable, visitors can manage or withdraw their cookie preferences through the consent management mechanism made available on the Website.
Further information is provided in our Cookie Policy.
13. Third-Party Websites and Platforms
Our Website may contain links to external websites, social media platforms, professional networks and other third-party services.
These third parties operate independently and may process personal data in accordance with their own privacy policies.
We encourage visitors to review the privacy policies of any third-party platforms they access.
14. Children's Privacy
Our Website and professional services are intended primarily for adults and professional audiences.
We do not intentionally seek to collect personal information from children through the Website.
If we become aware that personal data concerning a child has been collected without an appropriate legal basis, we will take the measures required by applicable law.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, data processing practices, technologies or applicable legal requirements.
The latest version will be made available on the Website, together with its last updated date.
Where legally required, we will provide additional notice or obtain consent regarding material changes.
16. Complaints and Supervisory Authority
If you have concerns about how your personal data is processed, we encourage you to contact us so that we can review your request.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
In France, the competent authority is:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy
75007 Paris, France
Website: https://www.cnil.fr
17. Contact
For any questions concerning this Privacy Policy, the processing of your personal data or the exercise of your rights, please contact:
DESIGN TO SOCIETY
Brand operated by THE CURATOR SAS
info@designtosociety.com
+33 (0)5 25 53 00 95