Privacy Policy
We respect your privacy and are committed to protecting your personal data in accordance with GDPR.
Last updated: 14 juillet 2025
Table of Contents
Introduction
Carpentry Enterprise (hereinafter "we", "our" or "the company") is committed to protecting and respecting your privacy. This policy explains how we collect, use and protect your personal information.
This policy applies to all services provided by Carpentry Enterprise and describes your rights regarding your personal data under the General Data Protection Regulation (GDPR).
1. What data do we collect?
Personal data:
- • First and last name
- • Email address
- • Delivery and billing address
- • Phone number (optional)
Technical data:
- • IP address
- • Browser type and version
- • Device type used
- • Cookie and browsing data
Order data:
- • Ordered products
- • Payment information (secured)
- • Delivery preferences
2. How do we use your data?
We use your personal data to:
- • Order processing - Manage your orders, payments and deliveries
- • Communication - Contact you regarding your orders and customer service
- • Service improvement - Analyze site usage to improve our services
- • Legal obligations - Comply with our accounting and legal obligations
3. Legal basis for processing
We process your personal data based on:
- • Consent - For sending newsletters and marketing communications
- • Contract performance - To process your orders and provide our services
- • Legitimate interest - For improving our services and security
- • Legal obligation - To comply with accounting and tax requirements
4. Data sharing
We never sell your data. We only share it with:
- • Payment providers - Stripe for secure payment processing
- • Carriers - For delivering your orders
- • Analytics services - To improve site performance (anonymized data)
- • Legal authorities - Only if required by law
5. Data retention
We retain your data for:
- • Account data - As long as your account is active or as per your requests
- • Order data - 10 years for accounting and tax obligations
- • Marketing data - Until you unsubscribe or 3 years of inactivity
- • Technical data - Maximum 13 months for cookies and logs
6. Your GDPR rights
In accordance with GDPR, you have the following rights:
Right of access
Get a copy of your personal data
Right to rectification
Correct inaccurate or incomplete data
Right to erasure
Delete your data in certain circumstances
Right to portability
Receive your data in a structured format
Right to object
Object to processing for legitimate reasons
Right to restriction
Limit processing in certain cases
7. Data security
We implement appropriate security measures:
- • SSL/TLS encryption for all transmissions
- • Strict access control to personal data
- • Continuous system monitoring
- • Secure and regular backups
- • Staff training on data protection
8. Contact and complaints
To exercise your rights or for any questions regarding this policy:
Data Protection Officer (DPO)
Email: dpo@carpentry-enterprise.com
Adresse: 123 Rue de l'Artisanat, 75001 Paris, France
Téléphone: +33 1 23 45 67 89
We commit to responding within a maximum of 30 days.
Right to complaint:
You have the right to lodge a complaint with the relevant data protection authority if you believe your rights are not being respected.