Privacy Policy

Last updated: June 21 2026

1. Data Controller

The data controller responsible for personal data collected on this website is:

Arbour EIRL Lieu Dit Nouaillats, 82140 Saint-Antonin-Noble-Val, France Email: info@cycliclaw.com

2. Data We Collect

Identification data

  • First and last name

  • Delivery and/or billing address

  • Email address

  • Phone number (if provided)

Transaction data

  • Order details and purchase history

  • Payment data (processed directly by our payment providers — we do not store your card details)

Browsing data

  • IP address (anonymised)

  • Browser type and device

  • Pages visited and session duration

  • Cookies (see our Cookie Policy)

3. Why We Collect Your Data

PurposeLegal basisProcessing and managing your ordersPerformance of contractSending order confirmations and shipping notificationsPerformance of contractCustomer service and complaint handlingPerformance of contract / Legitimate interestManaging returns and refundsPerformance of contractCompliance with legal and accounting obligationsLegal obligationSending newsletters and commercial communications (with your consent)ConsentImproving our website and servicesLegitimate interestFraud preventionLegitimate interest

4. How Long We Keep Your Data

Data typeRetention periodCustomer account dataDuration of the commercial relationship + 3 yearsOrder data10 years (accounting and tax obligation)Payment dataNot stored on our serversBrowsing data / cookiesMaximum 13 monthsNewsletter subscriptionUntil you unsubscribe

5. Who Has Access to Your Data

Your data is never sold to third parties. It may be shared with the following recipients solely in the context of our operations:

  • Squarespace Ireland Limited — website hosting and technical maintenance

  • Stripe, Inc. and PayPal (Europe) S.à r.l. — secure payment processing

  • Postal carriers and shipping services — order delivery

  • Competent authorities — upon legal or judicial obligation

All our service providers are contractually bound to protect your data and may only use it for the specific purposes for which it was shared.

6. International Data Transfers

Some of our service providers may be based outside the European Union (notably in the United States). In such cases, data transfers are governed by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or the EU-US Data Privacy Framework.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — obtain a copy of the data we hold about you

  • Right to rectification — correct inaccurate or incomplete data

  • Right to erasure — request deletion of your data, subject to our legal obligations

  • Right to restriction — request temporary suspension of processing

  • Right to data portability — receive your data in a structured, machine-readable format

  • Right to object — object to processing based on legitimate interest, or to direct marketing at any time

  • Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at: info@cycliclaw.com or by post to the address above.

We will respond within one month of receiving your request.

If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority:

CNIL — Commission Nationale de l'Informatique et des Libertés 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07 www.cnil.fr

8. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. Payments are processed through PCI-DSS certified providers. Our website uses HTTPS encryption.

9. Newsletter

If you have subscribed to our newsletter:

  • Legal basis: Consent (Art. 6.1.a GDPR)

  • Data collected: Email address, first name (optional)

  • Unsubscribe: Via the unsubscribe link in every email or by contacting us directly

  • Retention: Until you unsubscribe

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or applicable law. The date of the latest update is shown at the top of this page. We will notify you of any material changes by email or via a notice on the website.

For any question regarding this Privacy Policy, contact us at info@cycliclaw.com

BACK TO HOMEPAGE