Privacy policy

Last updated: 7 October 2026

Data controller

[Raison sociale], [Adresse du siège]. Contact: contact@example.com.

Data we collect

Customer account: first name, last name, email, phone, delivery address, email language and password (stored encrypted, never in plain text).

Orders: products, amounts, delivery address, payment and delivery status. Card details are entered on Stripe and are never sent to us.

Reviews and saved items: the reviews you publish (rating, title, text, with your first name) and the products you save.

Purposes and legal bases

Processing and delivering your orders, managing your account and customer service: performance of the contract. Keeping accounting records: legal obligation. Securing the website and preventing fraud: legitimate interest. We do not use your data for advertising and we do not sell it.

Recipients

Your data is processed by [Raison sociale] and its providers, only for the purposes above: Stripe (payment), the website host (OVH SAS, 2 rue Kellermann, 59100 Roubaix, France (ovhcloud.com)) and our email delivery provider.

Retention periods

Account: while it is active, then deleted after 3 years without activity or on request. Orders and invoices: 10 years, for accounting obligations.

Cookies and local storage

The website only uses what it needs to work: session cookies that keep you signed in to your account, and your browser's local storage to remember your bag. No analytics or advertising cookies are set, so no consent is required.

Your rights

You have the right to access, rectify, erase, object to, restrict and port your data. You can edit your profile from your account, and exercise your other rights by writing to contact@example.com. If you believe your rights are not respected, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

Security

Exchanges with the website are encrypted (HTTPS) and passwords are stored encrypted.