Privacy policy
Dernière mise à jour : 30/10/2026
This policy explains what personal data Swellcraft collects, why, how long it is kept and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
Brieuc THUDOR, sole trader (Swellcraft), 13 rue Jean Antoine de Baïf, 44600 Saint-Nazaire, France — [email protected].
What we collect, and why
| Situation | Data | Purpose and legal basis | Retention period |
|---|---|---|---|
| Order | Name, delivery and billing address, email, phone, items ordered, amount | Processing, shipping and tracking the order, customer service (performance of the contract); accounting (legal obligation) | 10 years for accounting records, 3 years after the last order for the rest |
| Payment | Card data entered on the secure Stripe page | Payment and fraud prevention (performance of the contract, legitimate interest) | Managed by Stripe; Swellcraft never has access to it |
| Newsletter | Email address, date of consent | Sending news and offers (consent, collected via a checkbox and confirmed by email) | Until unsubscription, or 3 years without opening |
| Contact form | Name, email, phone, message | Replying to your request (legitimate interest) | 3 years after the last exchange |
| Browsing | IP address and technical connection data | Security and proper functioning of the site (legitimate interest) | Short period set by the host |
We do not sell or rent your data. We do no advertising profiling.
Service providers processing your data on our behalf
- Stripe (payment) — Stripe Payments Europe, Ltd., Ireland.
- Brevo (newsletter and sending contact form messages) — Sendinblue SAS, France.
- Cloudflare (website hosting) — Cloudflare, Inc., United States.
- La Poste (delivery) — delivery name and address only.
Some of these providers may transfer data outside the European Union (notably to the United States). These transfers are covered by the safeguards provided by the GDPR (EU-US Data Privacy Framework adequacy decision or European Commission standard contractual clauses).
Cookies and local storage
The swellcraft.fr site sets no advertising or audience-measurement cookies. The content of your cart is stored only in your browser (local storage), which is strictly necessary for the service you request and does not require consent. At checkout, Stripe's secure page (checkout.stripe.com) uses its own cookies needed for payment and fraud prevention.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time (unsubscribe link in every newsletter). To exercise them, write to [email protected]; we reply within one month.
If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).