Privacy Policy & GDPR
1. Data Controller
BRABANT ECOM — SIRET 10740669600016
Réunion (974), France · contact@privera.store
2. Data We Collect
- Identity & contact · first name, last name, email, phone, delivery and billing address
- Order data · purchase history, order amounts
- Payment data · processed exclusively by our payment service provider — we never see or store your card details
- Browsing data · cookies, pages viewed, device type
3. Why We Collect It
- To process and deliver your orders
- To provide customer support
- To send you our newsletter, if you have subscribed
- To improve our website and your shopping experience
- To meet our legal and accounting obligations
4. Legal Basis
Contract performance (orders), consent (newsletter, non-essential cookies), legal obligation (accounting) and legitimate interest (site improvement, fraud prevention).
5. How Long We Keep It
Customer and order data: 3 years from your last interaction, plus statutory accounting retention periods. Newsletter data: until you unsubscribe.
6. Who We Share It With
Your data is never sold. It is shared only with the categories of partners required to run the service:
- Shopify Inc. — website hosting and order management
- Our payment service provider — secure payment processing (ACPR-approved, PCI DSS compliant)
- Logistics partners — delivery of your parcel
The identity of our payment service provider can be obtained on request at contact@privera.store.
7. Your Rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your data, as well as the right to object. To exercise any of these rights, email contact@privera.store. We respond within one month.
You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
8. Cookies
We use essential cookies (site operation, cart) and, subject to your consent, analytics and marketing cookies. You can manage your preferences at any time through your browser settings.
9. Security
We apply appropriate technical and organisational measures to protect your data. Payments are secured by a certified payment institution, PCI DSS compliant and ACPR-approved.