Privacy policy
Data controller
The data controller is SARL Rezo, registered office at 10 rue Jean Perrin, 17000 La Rochelle, France. You can contact us by phone at 05 46 34 52 05 or from our contact page.
Data collected
We collect only data necessary for the site's operation and for processing your orders: identification data (name, first name, email, phone) at contact or order, delivery data (postal address), payment data (processed directly by our provider without transiting our servers), and browsing data via anonymous technical cookies. If you sign in via Google or Microsoft, we receive your name and email address from the chosen account. When you order in guest mode, your email address is kept to let you track your order.
Processing purposes
Your data is used to process and track your orders, manage customer relations and support, send you quotes or marketing communications with your agreement, and improve the site with anonymous browsing statistics.
Legal basis
Processing is based on contract performance for orders, your consent for marketing communications, and our legitimate interest in answering your requests (contact form, email or phone exchanges) and improving the service.
Retention period
Data related to your orders is kept 10 years in accordance with our accounting obligations; invoices issued are archived for the same period on a durable medium (article L.123-22 of the French Commercial Code). Your contact data, including messages received via the contact form and email exchanges, is kept 3 years from your last contact with us, then deleted. Cookies have a maximum lifetime of 13 months.
Data recipients and transfers
Your data is processed by us and our technical providers:
- OVH SAS (hosting and transactional emails), servers located in France.
- Stripe Payments Europe, Ltd. (payment processing), based in Ireland. Banking data is collected directly by Stripe and does not transit our servers.
- Carriers (Colissimo, Chronopost, DHL, FedEx, UPS): your delivery address is transmitted to them for order routing, limited to information necessary for delivery (name, address, phone, order reference).
- Google and Microsoft (sign-in via your Google or Microsoft account, at your initiative): when you choose this sign-in method, your name and email address are transmitted to us by the provider. This service may involve a data transfer outside the European Union, governed by the EU-US Data Privacy Framework.
Your data is never sold to third parties.
Your rights
In accordance with GDPR, you have rights of access, rectification, erasure, processing limitation, portability and opposition concerning your personal data. We commit to answer your request within one month. You can also file a complaint with the CNIL at www.cnil.fr. To exercise these rights, contact us from our contact page.
Orders placed without account
When you place an order without creating an account (guest mode), your email address is kept to let you track your order. If you create an account or sign in later with that same email, guest-mode orders may be linked to your account. This processing is based on the sales contract execution and your legitimate interest in accessing your order history.
Cookies
The site uses only technical cookies necessary to its operation (session, cart, preferences). No advertising or third-party tracking cookies are used. To learn more, see our cookie policy.
