Privacy policy
Last updated:
01Data controller
Victor DELLOYE, sole trader trading under the name "Delta-Lab", 30 boulevard de Sรฉbastopol, 75004 Paris โ SIREN 931 909 196 โ contact@delta-lab.store. For any question about your data, write to this address.
02Data processed, purposes and retention periods
| Processing | Data | Legal basis | Retention period |
|---|---|---|---|
| Orders, delivery, invoicing, customer service | Name, addresses, email, phone, products ordered, amounts, payment method (no card number) | Performance of the contract; accounting obligations | Length of the relationship, then 10 years for invoices and accounting records |
| Customer account | Login details, order history, preferences | Performance of the contract | Until the account is deleted, or 3 years after the last activity |
| Loyalty programme: ฮ-COINS, levels, quests and referrals | Balance and history of ฮ-COINS, referral code, related orders | Running the programme | Length of membership, then 3 years |
| Preventing referral fraud | Encrypted (irreversible) fingerprints of theemail, phone number and address | Legitimate interest: preventing abuse | 3 years |
| Age check | Confirmation that you are of age (stored in your browser) | Obligation not to sell to minors | See the cookie policy |
| Website chat assistant | Messages exchanged, order number if you give it | Legitimate interest: replying quickly | 12 months |
| Customer service by WhatsApp and email | Number, name, content of the conversations | Performance of the contract; legitimate interest | 3 years after the last conversation |
| Emails about orders and ฮ-COINS | Email, name | Performance of the contract | Length of the relationship |
| Emails (promotional) | Email, name, purchase history | Consent, or legitimate interest for products similar to those already bought; one-click unsubscribe in every email | 3 years after the last contact |
| Invitation to leave a review | Name, email, order reference, sent to Trustpilot | Legitimate interest | According to Trustpilot's policy |
| Business account requests (Wholesale) | Company name, SIRET, VAT number, contact | Pre-contractual measures | 3 years after the last contact |
| App notifications | Technical device identifier | Consent (permission on your phone) | Until the app is uninstalled or the permission is withdrawn |
| Audience measurement and advertising (Meta pixel) | Pages viewed, source of the visit, cookie identifiers | Consent via the banner | See the cookie policy |
0 cardWe never collect any card number: payment is handled directly by Trust Payments.
03Recipients and processors
Your data is used by Delta-Lab and shared only with the providers we need:
- o2switch (hosting of the website and emails, France);
- Trust Payments (card payments);
- Chronopost (delivery and email tracking);
- Anthropic (Claude), United States: processing of messages sent to the website assistant, and internal management analyses. For these internal analyses, customers are identified by an anonymous code, with no name or email ;
- Meta (WhatsApp for customer service, Meta pixel if you accept it), United States;
- Automattic (Jetpack statistics, if you accept them), United States;
- Trustpilot (customer reviews, Denmark);
- our accountant and, on lawful request, the authorities.
We never sell your data.
04Transfers outside the European Union
Some providers (Anthropic, Meta, Automattic) process data in the United States. These transfers are covered by the EUโUS Data Privacy Framework for certified companies, or by the European Commission's standard contractual clauses.
Do not send sensitive data (health, identity documents) to the chat assistant.
05Security
The website is served over HTTPS, access to the administration is restricted and logged, and fraud data is stored as irreversible fingerprints.
06Your rights
You can access, correct or erase your data, restrict its processing, object to processing based on legitimate interest or to direct marketing, retrieve your data (portability), withdraw your consent at any time and set instructions for what happens to it after your death. Write to contact@delta-lab.store; we reply within one month. Some data must be kept despite an erasure request (invoices, proof of transactions).
If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
07Minors
18+The website is for people aged 18 and over only. We do not knowingly collect data about minors; if we do, it is deleted.
08Changes
This policy may change. The date of the latest update is shown at the top of the page.