Data controller
The controller responsible for your personal data is [Registered Company Name], registered in France under SIRET [SIRET Number] and VAT [VAT Number], with its registered office at 13 rue de Lommerange, 57650 Fontoy, France. If you have any questions about this policy, email info@bapedeal.com or call +33 618658997 Monday–Friday, 9:00 AM–6:00 PM CET.
What we collect
We collect information you give us when you place an order, create an account, contact us, or subscribe to marketing. This may include:
Your name, email address, phone number, billing address, and delivery address
Order details, payment method, and transaction history
Emails, phone notes, and contact form messages
Technical data such as IP address, browser type, pages visited, and time spent on the site
We do not store full payment card numbers on our servers. Card payments are handled by our PCI-DSS compliant payment provider.
Why we use your data
We use your data to:
Process and deliver your orders
Handle returns, refunds, and customer service requests
Send you marketing messages if you have opted in
Improve our website and services
Meet our legal, tax, and accounting obligations
Legal basis
We rely on the performance of a contract when processing orders, your consent for marketing and non-essential cookies, and legal obligations for keeping invoices and accounting records.
How long we keep data
Order and invoice data: 10 years, as required by French accounting law
Customer account data: 3 years after your last purchase or contact, in line with CNIL recommendations
Browsing and cookie data: up to 13 months
Marketing contact data: 3 years from your last interaction with us
Who we share data with
We share data only where necessary with:
Delivery carriers
Payment processors, including PayPal and our card payment provider
Analytics tools, if used on the site
We never sell your personal data.
Your rights
Under the GDPR and French data protection law, you have the right to access, correct, delete, restrict, or object to the processing of your data. You also have the right to data portability and to withdraw consent at any time. To exercise these rights, email info@bapedeal.com. We will respond within one month.
Security
Bapedeal uses HTTPS with a valid SSL certificate. Access to personal data is limited to authorised staff and service providers.
Cookies
We use essential cookies to make the site work. With your consent, we may also use analytics cookies to understand how visitors use the site. You can change your cookie preferences at any time through the consent banner or your browser settings.
Changes
We may update this Privacy Policy from time to time. The version published on this page is the one that applies.