Introduction

This Privacy Policy describes how Buffet Crampon collects, uses and shares your personal data when you visit or make a purchase on www.buffetcrampon.com (the "Site"), and the rights you have over your data, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act.

Data controller

Buffet Crampon, a French simplified joint-stock company (société par actions simplifiée), registered with the RCS of Versailles under number 750 220 980, whose registered office is at 5, rue Maurice Berteaux, 78711 Mantes-la-Ville, France, is the controller of your personal data.

Data we collect

We collect the following data:
• Identity and contact data: first and last name, email address, postal address, phone number;
• Order data: products purchased, amounts, delivery and billing addresses, order history, invoices, returns;
• Customer account data: login credentials and account preferences;
• Payment data: payment status and transaction references. Your bank card details are collected directly by our payment service provider and are never accessible to Buffet Crampon;
• Communication data: messages you send to our customer service;
• Browsing data: IP address, device and browser type, pages visited, collected through cookies and similar technologies, subject to your consent where required.

Purposes and legal bases

We use your data for the following purposes:
• Processing and delivering your orders, managing payments, invoicing, returns and after-sales service – performance of the contract;
• Managing your customer account – performance of the contract;
• Answering your requests to our customer service – our legitimate interest in responding to you;
• Sending you our newsletter and commercial communications – your consent, which you can withdraw at any time via the unsubscribe link in each email;
• Measuring the audience of the Site and improving it, using Google Analytics – your consent;
• Preventing fraud and securing the Site – our legitimate interest;
• Meeting our legal obligations, in particular accounting and tax obligations – legal obligation.

Recipients of your data

Your data is intended for the relevant Buffet Crampon departments (e-commerce, customer service, logistics, accounting). It is also shared, strictly as needed, with our service providers acting on our behalf:
• Shopify, which hosts the Site and processes order data;
• Our payment service provider;
• DHL, for the delivery of your orders;
• Google (Google Analytics), for audience measurement;
• Our email marketing provider, for sending our newsletter;
• Our IT service providers, for the maintenance of our systems.
We never sell your personal data. We may also disclose your data where required by law or at the request of a competent authority.

Transfers outside the European Union

Some of our service providers, such as Shopify and Google, may process your data outside the European Union, in particular in Canada and the United States. These transfers are governed by appropriate safeguards: European Commission adequacy decisions (including the EU-U.S. Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

Retention periods

We keep your data only for as long as necessary for the purposes for which it was collected:
• Customer data: for the duration of our commercial relationship, then 3 years from your last purchase or last contact, for commercial communications;
• Customer account: until you close it, or after 3 years of inactivity;
• Invoices and accounting documents: 10 years, in accordance with our legal obligations;
• Customer service messages: 3 years from the last exchange;
• Cookies: 13 months at most; your consent choices are kept for 6 months.

Cookies

When you first visit the Site, a banner allows you to accept or refuse non-essential cookies (audience measurement). Cookies strictly necessary for the operation of the Site (cart, login, security) do not require your consent. You can change your choices at any time via the "Cookie preferences" link at the bottom of every page of the Site.

Your rights

You have the right to access, rectify and erase your data, to restrict and object to its processing, the right to data portability, and the right to withdraw your consent at any time. You may also give instructions on what happens to your data after your death. To exercise these rights, contact us at contact@buffetcrampon.com or by post at Buffet Crampon, 5, rue Maurice Berteaux, 78711 Mantes-la-Ville, France. We may ask you for proof of identity if we have reasonable doubts about your identity. We will respond within one month.

If you believe that your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or with the supervisory authority of your country of residence.

Children

The Site is not intended for children under 15. We do not knowingly collect personal data from children under 15 without the consent of their parent or guardian. If you become aware that your child has provided us with personal data, please contact us at contact@buffetcrampon.com and we will delete it.

Security

We take appropriate technical and organizational measures to protect your data against loss, misuse, unauthorized access, disclosure or alteration.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The applicable version is the one published on the Site, with its date of last update.

Contact

Buffet Crampon
5, rue Maurice Berteaux, 78711 Mantes-la-Ville, France
Email: contact@buffetcrampon.com

Last updated: September 29, 2026.