Privacy.
Last updated: [validation date]
- 01
Data controller
The controller of the personal data collected on the website is [Company name], [legal form] with a share capital of €[amount], [registered office address]. For any question about your data: [contact email address].
- 02
Data collected and purposes
We only collect the data needed for the services you use:
- Orders: first and last name, delivery and billing address, email, phone number, order details. Purposes: processing and delivering the order, invoicing, customer service, guarantees. Legal basis: performance of the contract and legal obligations (accounting).
- Payment: card details are entered on the secure payment page and processed by the payment provider (Stripe); they are never transmitted to HYPE&CLUB.
- Contact form: first name, last name, email, subject and message. Purpose: answering your request. Legal basis: legitimate interest in answering the requests we receive.
- Newsletter and club: email address. Purpose: sending you HYPE&CLUB news and releases. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in every email. The name entered on the club membership card is not stored.
- Customer reviews: rating, comment and the display name you choose, published on the product page after moderation. Purpose: informing other customers. Legal basis: your consent, given when submitting the review.
- 03
Recipients and processors
Your data is intended for HYPE&CLUB and is never sold. It is processed on our behalf by the following providers:
- Wix.com Ltd. (Israel): shop, orders, payment page, forms, emails and customer reviews.
- Stripe Payments Europe, Ltd. (Ireland): card payment processing.
- Cloudflare, Inc. (United States): website hosting and security.
- The carriers in charge of delivery, for the data strictly needed to deliver the parcel.
- 04
Transfers outside the European Union
Some providers are based outside the European Union. These transfers are covered by appropriate safeguards: an adequacy decision of the European Commission (Israel; the United States for companies certified under the Data Privacy Framework) or the European Commission’s standard contractual clauses.
- 05
Retention periods
- Order data: for the duration of the business relationship, then ten years for accounting records (article L. 123-22 of the French Commercial Code).
- Contact requests: three years from the last exchange.
- Newsletter and club: until you unsubscribe, or three years without any interaction on your part.
- Customer reviews: as long as they are published, unless you ask for their removal.
- 06
Cookies and local storage
The website uses no advertising cookies and no audience measurement tool. It only stores in your browser the information strictly necessary for it to work, which does not require consent:
- the visitor session provided by Wix, which keeps your cart between visits;
- your language choice (French or English);
- a temporary marker indicating that a payment was started from the tab, deleted when the tab is closed.
- 07
Your rights
Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to access, rectify and erase your data, to restrict and object to its processing and to data portability, as well as the right to withdraw your consent at any time and to set instructions regarding your data after your death. To exercise these rights, write to [contact email address], specifying your request.
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
- 08
Security
The website is served exclusively over HTTPS and protected by security headers. Payments are processed on a secure payment page; no card data passes through the HYPE&CLUB website.
- 09
Changes
This policy may be updated to reflect changes to the website or to the regulations. The date of the last update is shown at the top of the page.