1. Introduction
This Privacy Policy explains how [Your Company Name] (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use our website [Your Website URL].
We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
[Your Company Name]
Registered address: [Address]
Company registration number: [e.g., SIRET or other]
Email: [Contact email address]
Legal representative: [Full name]
3. Data We Collect
We may collect the following personal data:
- Identity Information: first name, last name, email address, phone number, postal address
- Account & Order Information: purchase history, payment method (no full card numbers are stored)
- Technical Data: IP address, browser type, operating system, pages visited, duration of visit
- Marketing Data: your preferences regarding marketing communications (if you opt-in)
4. Purpose of Data Processing
We process your personal data for the following purposes:
- To manage and fulfill your orders
- To provide customer support and after-sales service
- To send newsletters and promotional emails (with your consent)
- To analyze website traffic and improve our services
- To comply with legal and regulatory obligations
5. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Contract performance (e.g., to deliver your orders)
- Consent (e.g., for newsletters or marketing cookies)
- Legitimate interests (e.g., to improve our website or prevent fraud)
- Legal obligations (e.g., accounting or tax requirements)
6. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:
- Order and billing information: up to 6 years (for legal and tax reasons)
- Marketing data: up to 3 years from your last interaction
- Website analytics: generally retained in aggregated form
7. Data Sharing
Your personal data may be shared with trusted third parties, only when necessary:
- Website hosting provider: [Name]
- Payment service providers (e.g., Stripe, PayPal)
- Shipping partners (e.g., La Poste, DHL, UPS)
- Marketing and analytics services (e.g., Google Analytics, Mailchimp)
All service providers are contractually bound to protect your data and use it only for the intended purpose.
8. Data Security
We implement appropriate technical and organizational security measures to protect your data against unauthorized access, alteration, loss, or disclosure.
9. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right to access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw your consent at any time
To exercise these rights, please contact us at: [your contact email]. We will respond within one month.
If you believe your rights have been violated, you can file a complaint with the competent supervisory authority (e.g., CNIL in France or your local authority).
10. Cookies
We use cookies and similar tracking technologies to improve your browsing experience, measure audience metrics, and offer personalized content. You can manage your cookie preferences through the banner shown on your first visit or via your browser settings.
Please see our [Cookie Policy] for more information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The most recent version will always be available on our website.