Privacy policy
Pursuant to the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
Last updated : 2026-06-13
Data controller
Cloture Hexagone is the controller of the personal data collected on this site. For any question, please contact our Data Protection Officer at: [email protected].
Data we collect
- Identity and contact details (first and last name, email, phone).
- Delivery and billing addresses.
- Order data (cart, payment, status).
- Technical data (server logs, IP address) for security purposes.
- Cookie consent preferences.
Purposes and legal bases
- Contract performance : processing orders, payments, deliveries and after-sales service.
- Legal obligation : retention of invoices for 10 years (French Commercial and Tax Codes).
- Legitimate interest : site security, fraud prevention, service improvement.
- Consent : analytics, advertising personalisation and any marketing emails.
Retention periods
- Customer account: active + 3 years of inactivity, then anonymised.
- Order data: 10 years (accounting and tax obligations).
- Marketing consent: 3 years from the last interaction.
- Cookie consent: 6 months.
- Server logs: 1 year.
Sub-processors
We use the following sub-processors to operate the site. All are bound by a data-processing agreement that complies with GDPR Article 28.
| Vendor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Application server hosting | Germany (EU) |
| Cloudflare, Inc. | CDN, WAF, DNS management | United States (SCC + DPF) |
| Amazon Web Services SES | Transactional email delivery | Ireland / France (EU) |
| Google Workspace | Inbound corporate email | Ireland (EU) |
| Revolut Payments UAB | Online payment processing | Lithuania (EU) |
| Pennylane SAS | Invoice issuance and archiving | France (EU) |
| ERPNext (auto-hébergé) | Internal business management | France (EU) |
| Google Analytics 4 | Anonymised audience measurement | United States (SCC + DPF) |
| Meta Platforms Ireland | Advertising campaign measurement | Ireland (EU) |
| Google Ads | Advertising campaign measurement | United States (SCC + DPF) |
| TikTok Technology Ltd. | Advertising campaign measurement | Ireland (EU) |
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, object to, and port your personal data. You can exercise these rights from your account ("My personal data" section) or by writing to the DPO at [email protected].
You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
Cookies
Cookie management is detailed in our cookie policy.