Politique de confidentialité

Who is responsible for your data

For website and order-processing activities described here, the operator of restaurantequipmentx.shop acts as the data controller. Privacy requests may be sent to info@restaurantequipmentx.shop. The legally required identity and contact details of the operating entity must also be published in the Legal Notice; where those details are not yet displayed, the website must not be launched as fully compliant.

Personal data we collect

Identity and contact data, such as name, billing and delivery address, email address and telephone number.

Order and transaction data, including products, order value, payment status, returns, refunds and correspondence. Full payment-card details are generally handled by payment processors rather than stored by us.

Account data, preferences, saved addresses and authentication records.

Technical and usage data, such as IP address, browser, device, approximate location, pages viewed, referring source, session activity and security logs.

Marketing and consent data, including subscriptions, campaign interactions and cookie choices.

Support data, including messages, photographs of products or packaging, call or chat records where offered, and information required to resolve a claim.

How data is obtained

We obtain data directly from you, automatically through the website and cookies, and from service providers involved in payments, fraud prevention, logistics, analytics, customer support and advertising. We may also receive updated delivery events from carriers and dispute information from payment providers.

Purposes and legal bases

Performance of a contract

We process data to operate the cart and checkout, accept payment, fulfil and deliver orders, provide tracking, handle returns and refunds, manage accounts, respond to order-related requests and provide products or services you request.

Compliance with legal obligations

We process and retain data for accounting, tax, consumer protection, product safety, recalls, warranty records, anti-money-laundering obligations where applicable, and responses to lawful authority requests.

Legitimate interests

Where our interests are not overridden by your rights, we may secure the website, prevent fraud, diagnose errors, improve navigation, measure service performance, manage legal claims, maintain business records and communicate with existing customers about closely related products as permitted by law. You may object to processing based on legitimate interests.

Consent

We rely on consent for non-essential cookies, certain analytics or advertising technologies, and electronic marketing where consent is required. Consent is voluntary and may be withdrawn at any time without affecting earlier lawful processing.

Cookies and similar technologies

Strictly necessary technologies may be used to provide requested functions such as security, checkout, shopping-cart storage, load balancing and consent preference storage. Non-essential analytics, personalisation and advertising cookies are not activated before valid consent where consent is legally required. The website should offer an equally accessible way to accept or refuse non-essential cookies and a way to change choices later.

Cookie details, providers, purposes and durations should be shown in the consent interface or cookie notice deployed on the live website. This policy does not itself activate or configure consent controls; the website operator must ensure the actual Shopify theme and installed apps respect the choices collected.

Recipients and service providers

We may share only necessary data with Shopify and hosting providers, payment processors, banks, fraud-prevention services, warehouses, suppliers or fulfilment partners, carriers, customer-support systems, email providers, analytics and advertising providers selected through consent, professional advisers and public authorities where legally required. Providers may act as processors under contract or as independent controllers for their own regulated activities.

International data transfers

Some providers may process data outside France or the European Economic Area. Where required, transfers are protected by an adequacy decision, approved standard contractual clauses, supplementary safeguards or another lawful mechanism. Information about relevant safeguards may be requested at info@restaurantequipmentx.shop.

Retention

We keep personal data only for as long as needed for the stated purpose and applicable legal periods. Order and invoicing records may be retained for statutory accounting and tax periods; customer-service and warranty records for the life of the claim and limitation periods; security logs for a limited risk-based period; inactive account data until deletion is appropriate; and marketing data until consent is withdrawn or the relationship becomes inactive, subject to periodic review. Data may be retained longer where necessary for litigation, fraud prevention, legal hold or a binding authority request.

Your GDPR rights

Subject to legal conditions, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; and object at any time to direct marketing. You may also give instructions concerning personal data after death where French law permits. We may need to verify identity proportionately before acting.

Send a request to info@restaurantequipmentx.shop. We normally respond within one month, although the period may be extended by up to two further months for complex or numerous requests, with notice. If you believe your rights were not respected, you may complain to the Commission nationale de l’informatique et des libertés (CNIL) or another competent supervisory authority.

Marketing communications

Marketing email is sent only where a lawful basis exists. Every promotional email should include a functioning unsubscribe method. Service messages about orders, safety, recalls, account security or policy changes are not marketing and may still be sent when necessary.

Security

We use proportionate organisational and technical measures designed to protect data, including access controls, secure connections, service-provider review, backups, logging and incident procedures. No internet transmission or storage system is completely secure. Customers should protect passwords and notify us promptly of suspected account misuse.

Children

The website is intended for adults and professional purchasers and is not directed to children. We do not knowingly seek personal data from children for independent purchasing. If a parent or guardian believes a child supplied data improperly, contact us.

Automated decisions

Fraud and payment tools may produce risk indicators or automated recommendations. Where a decision produces legal or similarly significant effects and applicable law grants specific rights, you may request human intervention, express your view and contest the decision.

Third-party links and apps

The website may link to third-party services or use Shopify apps. Their independent processing is governed by their own notices. The website operator must review installed apps and keep this policy aligned with actual data flows; generic wording cannot substitute for that operational review.

Changes and contact

We may update this policy to reflect legal, operational or technical changes. The current version will show its effective date. Material changes will be highlighted where appropriate. Questions and rights requests should be sent to info@restaurantequipmentx.shop.