Privacy policy

Controller

[COMPANY LEGAL NAME], [FULL ADDRESS], France. Contact: [CONTACT EMAIL].

What we collect and why

Order data: your configuration, vehicle identification number, decoded vehicle details, name, email, telephone and delivery address. Legal basis: performance of the contract. Purpose: manufacturing the correct wheel for your vehicle and delivering it.

Enquiry data: the brand, model, year and message you send when your vehicle is not listed, plus your contact details. Legal basis: steps taken at your request prior to a contract.

WhatsApp messages: where you consent to lifecycle updates, your telephone number and message history with us. Legal basis: consent, withdrawable at any time.

Audience measurement: aggregate, cookieless page statistics. No individual profiling, no cross-site tracking.

A note on the VIN

A vehicle identification number identifies a vehicle, and combined with your name and address it constitutes personal data. We use it solely to confirm fitment before manufacture and we do not sell, share or publish it.

It is transmitted to a vehicle decoding service to obtain make, model, year and equipment. By default this is the free NHTSA vPIC public database operated by the United States Department of Transportation, which involves a transfer outside the European Union. [IF YOU SWITCH TO A EUROPEAN COMMERCIAL DECODER, NAME IT HERE AND REMOVE THIS TRANSFER NOTICE.]

Retention

Order records, including the VIN and configuration: 10 years, matching the French commercial accounting retention obligation and the duration of the warranty.

Enquiries that do not result in an order: 3 years from the last contact.

Audience statistics: aggregate only, no personal data retained.

Processors

Vercel Inc. (hosting), Shopify (payments and order management), Meta Platforms Ireland (WhatsApp Business), [ANALYTICS PROVIDER], [EMAIL PROVIDER].

Transfers outside the European Union are covered by the European Commission standard contractual clauses.

Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing, by writing to [CONTACT EMAIL]. We respond within one month.

You may lodge a complaint with the CNIL, 3 place de Fontenoy, 75007 Paris, or at cnil.fr.

Cookies

We use no advertising or tracking cookies. Audience measurement is cookieless and aggregate, so no consent banner is required.

A single technical cookie stores your administrator session if you log into the internal dashboard. It is strictly necessary and exempt from consent.

[IF YOU ADD META PIXEL, GOOGLE ADS OR ANY ADVERTISING TAG, THIS SECTION IS NO LONGER ACCURATE AND YOU WILL NEED A CONSENT BANNER.]