隐私政策

Last updated: 12 November 2026

Who controls your data

Brinteriop, 25 Rue de la Mélinière, 44000 Nantes, France, is the data controller for information collected through . For privacy questions or to exercise any of the rights described below, email info@brinteriop.com. We do not have a separate Data Protection Officer because our processing activities do not meet the GDPR threshold for mandatory DPO appointment.

What we collect and why

We collect only what is needed to process an order and run the shop. The table below shows the categories, the purpose, and the legal basis.

What we collect    Why    Legal basis (GDPR)
Name, delivery address, email address, phone number    To process and deliver your order, and to contact you about it    Performance of a contract
Order history and payment transaction reference    To handle returns, refunds, and warranty questions    Performance of a contract
Correspondence when you email us or use the contact form    To resolve your question or complaint    Legitimate interest (customer support)
IP address and basic device/browser data    To keep the site secure and diagnose technical issues    Legitimate interest (security)
Email address for marketing (only if you opt in)    To send occasional product updates    Consent
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

Who we share it with

We share data with the service providers that make the shop work:

Payment processing: Visa and MasterCard transactions are handled through a PCI-compliant payment gateway; PayPal handles PayPal transactions. These providers receive the payment data necessary to process the transaction.

Delivery: Colissimo, Chronopost, or Colis Privé receive the name, address, and phone number needed to deliver the parcel.

Hosting and email: Our website host [Hosting provider name, address, and phone] and our email provider process data on our instructions under data processing agreements.

We do not sell your personal information. We do not share it for cross-context behavioural advertising. Because we do not engage in selling or sharing in the CCPA sense, we do not display a “Do Not Sell or Share My Personal Information” link. If that changes, this policy will be updated and the required mechanism will be provided.

International transfers

PayPal and some hosting infrastructure may process data outside the European Economic Area, including in the United States. Where this happens, the transfer relies on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision. You can ask us for more detail about the specific safeguard used for a particular provider by emailing info@brinteriop.com.

How long we keep data

Order and invoice records: 10 years from the end of the relevant accounting period, as required by French commercial and tax law.

Customer service correspondence: 3 years from the last exchange, unless it relates to an open dispute.

Marketing consent records: until you withdraw consent, plus a short period to suppress your address from future campaigns.

Site security logs: 12 months.

Your rights

Under the GDPR you have the right to access your data, correct it, request deletion, restrict or object to processing, and receive a portable copy. Where processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise any right, email info@brinteriop.com. We respond within one month, and we may ask for information to confirm your identity before acting on the request. If you are not satisfied with our response, you can complain to the CNIL (Commission Nationale de l’Informatique et des Libertés), the French supervisory authority.

California residents (CCPA)

If you are a California resident, you have the right to know what categories of personal information we collect and disclose, the right to request deletion, and the right to non-discrimination for exercising privacy rights. We do not sell personal information. To submit a request, email info@brinteriop.com with the subject line “California privacy request.” We will verify your identity before processing the request. You may use an authorized agent, but we may require proof of authorization.

Cookies

We use a small number of cookies that are necessary for the cart and checkout to function. We do not set advertising or cross-site tracking cookies. If we introduce analytics or marketing cookies in the future, we will update this policy and provide a consent mechanism where required.

How to reach us about privacy

This policy is linked from the footer of every page on the site, including product, cart, and checkout pages. The same info@brinteriop.com address appears in the Contact Us page and in the footer, so there is only one address to remember if you need to exercise a right or ask a question.