Privacy Policy

Burpees & Croquettes – burpeesetcroquettes.fr

Last updated: April 26, 2026

This privacy policy aims to inform users of the burpeesetcroquettes.fr website about how their personal data is collected and processed, in accordance with the General Data Protection Regulation (GDPR) and the French "Informatique et Libertés" law.

1. Identity of the data controller

The controller of data collected on the site is:

Emma Casula – Individual Entrepreneur

Trade name: Burpees & Croquettes

SIREN: 833 268 592

E-mail: contact@burpeesetcroquettes.fr

2. Data collected

We collect and process the following categories of data:

Data provided by the user

• Identity: surname, first name, title

• Contact details: email address, postal address, telephone number

• Order data: products purchased, amounts, history

• Payment data: processed directly by our secure payment provider (no bank details are stored on our site)

Automatically collected data

• Connection data: IP address, browser type, pages visited, duration of visits

• Cookies and trackers (see dedicated section)

3. Purposes of processing

Your personal data is collected and processed for the following purposes:

• Processing, tracking, and delivery of your orders

• Management of your customer account

• Customer service and responding to your requests

• Sending commercial communications (only with your consent)

• Compliance with our legal and accounting obligations

• Fraud prevention and site security

• Improving our site and our services (anonymized statistics)

4. Legal bases for processing

In accordance with Article 6 of the GDPR, the legal bases for our processing are:

• Contract performance: for processing your orders and managing your account

• Legal obligation: for invoice retention (10 years) and tax obligations

• Consent: for sending newsletters and marketing communications

• Legitimate interest: for improving our services and site security

5. Data recipients

Your data may be transmitted to the following recipients, strictly to the extent necessary for the performance of their duties:

• Our printing and shipping provider (Printful)

• Our payment providers (Stripe / Shopify Payments)

• Our website host (Shopify)

• Our emailing providers (if applicable)

• Administrative or judicial authorities in case of legal obligation

No personal data is sold to third parties.

6. Transfers outside the European Union

Some of our providers (notably Printful, Shopify) may process data outside the European Union. In such cases, these transfers are governed by appropriate safeguards (standard contractual clauses of the European Commission) to ensure an adequate level of protection.

7. Retention period

• Customer account data: throughout the duration of account use, and up to 3 years after the last activity

• Order and billing data: 10 years (accounting and tax obligation)

• Commercial prospecting data: 3 years from the last contact

• Cookies: maximum 13 months

8. Your rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access: to know what data we hold about you

• Right to rectification: to correct inaccurate data

• Right to erasure ("right to be forgotten"): to request the deletion of your data

• Right to restriction of processing

• Right to data portability

•• Right to withdraw your consent at any time

• Right to define directives concerning the fate of your data after your death

To exercise these rights, contact us at: contact@burpeesetcroquettes.fr

You can also lodge a complaint with the CNIL: www.cnil.fr

9. Cookies

Our site uses cookies to improve your browsing experience and analyze site traffic.

Types of cookies used

• Essential cookies: necessary for the site to function (cart, session)

• Analytical cookies: to measure site audience (with your consent)

• Marketing cookies: to personalize advertisements (with your consent)

During your first visit, a banner allows you to accept, refuse, or customize the use of cookies. You can change your preferences at any time from the "Manage cookies" link at the bottom of the page.

10. Security

We implement all appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our site uses an SSL certificate and all payment transactions are encrypted.

11. Policy modifications

This policy may be updated at any time to reflect legal, technical, or commercial developments. The date of the last update is shown at the top of this document. We invite you to consult it regularly.