This policy explains what personal data is collected on Foot-Destocking, why it is collected, how long it is kept and how you can exercise your rights. Last updated: 26 October 2026.
1. Data controller
O’ DESTOCK, Route des Termes, ZAC des Termes, 13124 Peypin, France.
Personal data contact: [email protected].
2. Data collected
- Order: first name, last name, email, phone, billing and delivery addresses, order contents, history.
- Payment: chosen payment method and transaction status. Full payment data is processed by PayPal and is not stored by us.
- Customer account: email, name, address, order history.
- Newsletter: email, consent date, subscription status.
- Contact and reviews: name, email, order number, message, photos sent and consent.
- Browsing: cookies strictly necessary for the cart, session and security.
3. Why and on what basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Process orders, deliver and handle returns | Performance of the contract | Duration of the business relationship, then accounting obligations |
| Respond to contact requests and moderate reviews | Consent / legitimate interest | Up to 24 months after the request |
| Send the newsletter and offers | Consent | Until consent is withdrawn |
| Prevent fraud and secure the website | Legitimate interest | Duration necessary for security |
| Comply with accounting and legal obligations | Legal obligation | 10 years for accounting documents |
4. Recipients
Data is accessible to our team and to the providers required to process the order: hosting provider, email service provider, carrier and PayPal. They use the data only for the tasks entrusted to them. No data is resold.
5. Cookies
The website uses cookies strictly necessary for the cart, customer session, security and payment. These cookies are not used for targeted advertising. If audience measurement tools are added later, they will be subject to your prior consent.
You can delete or block cookies in your browser settings. Blocking essential cookies may prevent you from placing an order.
6. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability provided by the GDPR. To exercise them, write to [email protected] stating your request. We respond within one month at the latest.
You can also lodge a complaint with the CNIL (French data protection authority): www.cnil.fr, or with your local supervisory authority.
7. Security
We implement technical and organisational measures to protect data: restricted access, HTTPS encryption, compliant payment providers and backups. No system is infallible, but we limit the data collected to what is strictly necessary.
8. Changes to this policy
This policy may be updated to reflect changes to the website or regulations. The last update date appears at the top of the page. In the event of a significant change, information is published on the website.