Privacy policy
Last updated: 2025-08-25
This policy explains how we process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and French law, in particular the French Data Protection Act (Loi Informatique et Libertés). The French supervisory authority is the CNIL (www.cnil.fr).
1. Controller
Lave Tes Baskets (LTB) acts as the data controller for data collected through the website and related services.
2. Data we collect
- Account data: name, surname, email, password (hashed)
- Contact data: phone (optional)
- Order data: addresses, service details
- Technical data: logs, strictly necessary cookies
3. Purposes and legal bases
- Service provision (legal basis: contract)
- Customer support and security (legal basis: legitimate interests)
- Legal obligations (accounting, invoicing, security)
- Marketing with consent where required
4. Recipients and processors
Essential providers only (hosting, email), bound by GDPR-compliant data processing agreements.
5. Retention
- Account: duration of relationship + 3 years
- Orders/invoicing: statutory accounting period
- Technical logs: up to 12 months
- Marketing consents: while active + limited period
6. Your rights
Under GDPR: access, rectification, erasure, restriction, objection, portability.
Contact: privacy@lavetesbaskets.com. Supervisory authority: CNIL (www.cnil.fr).
7. Children and profiling
- Service not directed to children under 16; removal upon notice.
- No automated decision-making; minimal marketing segmentation with opt-out.
8. Social media and external links
Links to Instagram, Facebook, Snapchat, and X lead to third‑party platforms that process your data under their own privacy policies.
9. Security
Technical and organizational measures implemented (password hashing, access control, logging).
10. Cookies
Only strictly necessary cookies are used by default. A consent banner may allow enabling analytics/marketing cookies. You can change your preferences at any time.