CLICK HERE FOR YOUR FREE GIFT

Privacy policy

Last updated: 6 May 2026

The purpose of this privacy policy is to inform the users of the website capote2verre.com and the customers of SAS Capote2Verre (hereinafter “we”, “our”, “Capote2Verre”) of how their personal data is collected and processed, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended French Law no. 78-17 of 6 January 1978 (the Data Protection Act, known as “Informatique et Libertés”).

This policy is separate from our Legal Notice, General Terms and Conditions of Sale and Cookie Policy.

1. Data controller

The controller of your personal data is:

SAS CAPOTE2VERRE
RCS Evry 914 999 024
43 rue Maryse Bastié, 91280 Saint-Pierre-du-Perray, France
Email: contact@capote2verre.com
Telephone: 07 45 11 47 00

2. GDPR contact point

For any question relating to the protection of your personal data, or to exercise your rights:

Email: contact@capote2verre.com
Post: SAS Capote2Verre, for the attention of the personal data officer, 43 rue Maryse Bastié, 91280 Saint-Pierre-du-Perray.

SAS Capote2Verre is not required to appoint a Data Protection Officer (DPO) within the meaning of Article 37 GDPR, as its activity involves neither regular and systematic monitoring on a large scale nor large-scale processing of special categories of data.

3. Data collected and purposes

3.1 Order and customer account data (B2C and B2B)

Categories of data: title, last name, first name, email, telephone, postal delivery and billing address, company name and SIRET number (B2B), products ordered, amount, date, order history.

No complete banking data is stored by Capote2Verre. Card payments are processed by Shopify Payments (Stripe), and SEPA direct debits and B2B bank transfers by Qonto.

Purpose: performance of the sales contract, order management, delivery, invoicing, after-sales service, accounting management.
Legal basis: performance of the contract (Art. 6.1.b GDPR) and legal accounting obligation (Art. 6.1.c GDPR).
Retention period: 3 years from the last contact for commercial management (CNIL recommendation), 10 years for accounting records (Art. L.123-22 of the French Commercial Code).

3.2 B2B sales prospecting data

Categories of data: last name, first name, job title, business email, business telephone, company name, data from public sources (LinkedIn, Pappers, institutional websites, public company registers), interaction history (calls, meetings, email exchanges).

Purpose: commercial prospecting of legal entities (local authorities, gendarmerie, regional health agencies (ARS), prevention associations, companies).
Legal basis: legitimate interest (Art. 6.1.f GDPR), in accordance with CNIL guidelines on B2B prospecting. The business email address of a manager or employee may be used for prospecting related to their role without prior consent, provided that the origin of the data is stated and a simple right to object is offered.
Retention period: 3 years from the last contact or the prospect’s last positive action.

3.3 Communication and support data

Categories of data: content of emails exchanged via contact@capote2verre.com, requests made through the contact form.

Purpose: handling your request, customer support, quality monitoring.
Legal basis: legitimate interest (Art. 6.1.f) or pre-contractual performance (Art. 6.1.b).
Retention period: 3 years from the last exchange.

3.4 Newsletter and direct marketing data

If you subscribe to our newsletter or tick the marketing opt-in at checkout: email, first name (optional), inferred interests.

Purpose: sending marketing communications, newsletters, commercial offers.
Legal basis: consent (Art. 6.1.a GDPR) for B2C prospects; legitimate interest or consent for existing customers regarding similar products (Art. L.34-5 of the French Postal and Electronic Communications Code (CPCE)).
Retention period: until consent is withdrawn, or after 3 years of inactivity.

3.5 Browsing data and cookies

See our Cookies section below and the cookie settings accessible from the consent banner.

4. Recipients and processors

Your data may be disclosed to the following recipients, strictly as necessary for the purposes described:

Processor Purpose Location Safeguards
Shopify International Ltd E-commerce store hosting, catalogue management Ireland (EU) + servers in Canada/USA Standard Contractual Clauses + DPF
Shopify Payments / Stripe Payments Europe Ltd Card payment processing Ireland (EU) + USA DPF + SCC
Qonto (Olinda SA) B2B SEPA transfers and direct debits France (EU) GDPR applies
Sendinblue/Brevo SAS Sending transactional and marketing emails France (EU) GDPR applies
Shopify Email Native transactional and marketing emails EU + USA DPF + SCC
Google LLC (Google Analytics 4) Audience measurement USA DPF + SCC, subject to prior consent, anonymised IP
Meta Platforms Ireland Ltd (Meta Pixel) Advertising measurement and retargeting Ireland (EU) + USA DPF + SCC, subject to prior consent
TikTok Information Technologies UK Ltd (TikTok Pixel) Advertising measurement and retargeting EU + USA + Singapore SCC, subject to prior consent
La Poste / Colissimo Order delivery France/EU GDPR applies
Airtable Inc. Internal customer relationship management (CRM) USA DPF + SCC
AGE Conseils Bookkeeping and accounting expertise France (EU) Processing agreement under Art. 28 GDPR

No personal data is sold, rented or transferred to third parties for commercial purposes without your explicit consent.

5. Transfers outside the European Union

Some of our processors process data from the United States or from outside the EU (Stripe, Google, Meta, TikTok, Airtable). These transfers are governed by:

  • The Data Privacy Framework (DPF), approved by the European Commission’s adequacy decision of 10 July 2023, where the processor has joined it;
  • Standard Contractual Clauses (SCC) approved by the European Commission (Decision 2021/914), in addition to or in place of the DPF;
  • Supplementary measures following the Schrems II ruling: encryption, pseudonymisation, transfer impact assessment (TIA).

You can obtain a copy of the applicable safeguards on simple request to contact@capote2verre.com.

6. Cookies

The website capote2verre.com uses cookies to ensure it works properly, measure its audience and personalise content. When you arrive on the site, a banner lets you accept, refuse or customise the cookies that are placed.

Strictly necessary cookies (exempt from consent)

  • _session_id, _shopify_visit, _shopify_uniq, _secure_session_id, cart, storefront_digest: Shopify functional cookies, essential for browsing and the shopping basket.

Audience measurement cookies (consent required)

  • Google Analytics 4 (Google LLC): traffic measurement, analytical purpose. Duration: 13 months maximum.

Advertising and social network cookies (consent required)

  • Meta Pixel (Facebook, Instagram): advertising measurement and retargeting.
  • TikTok Pixel: advertising measurement and retargeting.

You can change your choices at any time by clicking the “Manage my cookies” link available in the site footer. Your consent (or refusal) is retained for a maximum of 6 months, in accordance with CNIL recommendations.

7. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights over your personal data:

  • Right of access (Art. 15): obtain confirmation that your data is being processed and receive a copy of it;
  • Right to rectification (Art. 16): correct inaccurate or incomplete data;
  • Right to erasure (Art. 17), also known as the “right to be forgotten”;
  • Right to restriction of processing (Art. 18);
  • Right to data portability (Art. 20): receive your data in a structured, machine-readable format;
  • Right to object (Art. 21), in particular to processing for commercial prospecting purposes, at any time and free of charge;
  • Right to withdraw your consent at any time, where consent is the legal basis for the processing, without affecting the lawfulness of the processing carried out beforehand;
  • Right to set directives concerning what happens to your data after your death (Data Protection Act, Art. 85).

How to exercise your rights

Send your request, accompanied by proof of identity (only where there is reasonable doubt about your identity, in accordance with Art. 12.6 GDPR), to:

  • Email: contact@capote2verre.com
  • Post: SAS Capote2Verre, Personal data officer, 43 rue Maryse Bastié, 91280 Saint-Pierre-du-Perray.

We will reply within one month of receiving your request, a period that may be extended by two further months where the request is complex (Art. 12.3 GDPR).

Complaint to the CNIL

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL):

  • Online: https://www.cnil.fr/fr/plaintes
  • By post: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, modification, disclosure or destruction (Art. 32 GDPR):

  • HTTPS encryption across the entire site;
  • Hosting with Shopify, certified PCI-DSS level 1 and SOC 2;
  • Access to data restricted to authorised staff only;
  • Confidentiality awareness for employees and apprentices;
  • Contractual confidentiality undertaking from all our processors within the meaning of Art. 28 GDPR.

In the event of a data breach likely to result in a risk to your rights and freedoms, we undertake to notify the CNIL within 72 hours and to inform you as soon as possible (Art. 33 and 34 GDPR).

9. Minors

Online orders are reserved for adults (aged 18 or over) or for minors with parental authorisation. We do not knowingly collect data concerning minors under 15 (the age of digital consent in France within the meaning of Art. 8 GDPR and Art. 45 of Law 78-17). The holder of parental authority may contact us at contact@capote2verre.com to request deletion of the data.

10. Changes

This policy may be amended to reflect legislative, case-law, technical or organisational developments. The applicable version is the one in force on the date of your visit.

For any questions: contact@capote2verre.com