Privacy Policy

This policy describes how AFD44 collects, uses and protects the personal data of visitors to afd44.fr and of its professional customers, in accordance with Regulation (EU) 2016/679 (GDPR) and French data protection law.

2.1 Data you provide

Identity and business contact details (first name, last name, role, company, SIRET, intra-EU VAT number), email address, phone number, billing and delivery addresses, and the content of messages sent through the contact or account-opening forms.

2.2 Account and order data

Login credentials, cart and order history, amounts, invoices, payment status. No card details are collected or stored by AFD44: payments are processed directly by Stripe.

2.3 Technical data

Browsing data strictly necessary for the operation of the site (technical logs, security) and, subject to your consent, audience-measurement and marketing data.

• Handling account-opening requests and enquiries — legitimate interest / pre-contractual measures
• Managing orders, deliveries, payments and customer service — performance of the contract
• Invoicing and accounting/tax obligations — legal obligation
• Fraud prevention and site security — legitimate interest
• Audience measurement and marketing communications — consent (withdrawable at any time)

Data is accessible only to authorised AFD44 staff and to its service providers acting as processors:

• Stripe — online payments and invoicing
• Supabase — database hosting and authentication (EU)
• Carriers — order delivery
• Google Tag Manager / audience measurement — subject to consent

No data is sold or rented to third parties. Any transfer outside the European Union is governed by the European Commission's standard contractual clauses.

• Prospects and enquiries: 3 years from the last contact
• Customer accounts: duration of the business relationship, then 3 years
• Invoices and accounting records: 10 years (legal obligation)
• Audience-measurement trackers: 13 months maximum

The site uses strictly necessary cookies (session, cart, security) which do not require consent, as well as audience-measurement and marketing trackers set only after your agreement. You may change your choices at any time via your browser settings.

AFD44 implements appropriate technical and organisational measures: encrypted connections (HTTPS), restricted database access, customer account authentication, and outsourcing of payment to a PCI-DSS certified provider.

You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time and to give post-mortem instructions.

AFD44 may update this policy to reflect legal or technical changes. The applicable version is the one published on the site on the date of your visit.