This page sets out what data we collect, why, how long we keep it, and what you can require of us.
Who is responsible for your data
The data controller is Alexandre Prouteau, sole trader, SIRET 91052976700022, operating the shop Confort Cars — full contact details in the legal notice.
What we collect, and why
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| First name, surname, postal address, email address, telephone | Processing the order, delivering it, keeping you informed, handling a return | Performance of the contract | 3 years after last contact |
| Order and payment details | Accounting and tax obligations | Legal obligation | 10 years |
| Email address alone | Replying if you have contacted us | Legitimate interest | 3 years |
| IP address, server logs | Site security, abuse detection | Legitimate interest | 12 months |
We collect no sensitive data. We carry out no profiling, no automated decision-making, and we do not sell on any list. We never have access to your card number : it goes straight to our payment provider.
Who receives your data
Only those who need it for your order to arrive:
- Our payment provider, to take and secure the payment.
- Our supplier and the carrier, which receive your name and delivery address — and nothing else. Some are located outside the European Union; those transfers are governed by the European Commission's standard contractual clauses.
- Our hosting provider, which technically stores the site and its database.
We do not sell, rent or exchange your data with anyone.
Cookies
The site sets only the cookies needed for it to work: keeping your basket between pages, maintaining your session if you have an account, and remembering your display preferences. These cookies do not require your consent because without them the shop does not function.
We use no advertising cookies and no third-party behavioural tracking. Were that to change, a consent banner would appear and this page would be updated before anything was installed.
Your rights
You may at any time requestaccess to your data, its rectification, its erasure, the restriction of its processing, its portability in a readable format, and you may object to processing based on our legitimate interest.
Simply write to us at the address given in the legal notice. We reply within one month. Proof of identity will only be requested if there is genuine doubt as to who you are.
Two honest limits: we cannot erase invoice data before the statutory ten-year period expires, and we cannot delete a delivery address already passed to the carrier for a parcel in transit.
Complaints
If our answer does not satisfy you, you may refer the matter to the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.
Security
The site is served entirely over HTTPS. Access to the administration area is restricted and password-protected. The database is not reachable from outside the server.