PRIVACY POLICY
What data we collect, why, for how long, and how to exercise your rights.
Data controller
CUBOXO, SASU (French single-shareholder simplified joint-stock company) with share capital of €1,000, 10 Place du Golheres, 56400 Auray, France, SIRET 877 657 635 00026. Contact: contact@cuboxo.fr.
Data collected
Contact and quote forms : name, company, email address, phone, delivery region and the content of your message.
Orders : identity, delivery and billing addresses, email, phone and order details. Payment is entered on the secure page of our provider Shopify: CUBOXO never has access to your bank details.
Browsing : cookies and trackers, according to your choices, described in the cookie policy.
Data sources
Data comes from you (forms, orders, email exchanges), from our payment and order management provider when you buy, and from the cookies and trackers you accept while browsing.
Purposes and legal bases
Answering your requests and preparing quotes (pre-contractual steps at your request); processing, delivering, invoicing and tracking your orders (performance of the contract); keeping accounts (legal obligation); measuring audience and personalising advertising (your consent, which you can withdraw at any time).
Recipients
Your data is processed by CUBOXO and shared, as relevant, with Shopify (payment and order management), the carriers responsible for delivery and our host (Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus). It is never sold. Some providers may process data outside the European Union; such transfers are then covered by the safeguards of the General Data Protection Regulation (European Commission standard contractual clauses).
Payment and orders: our relationship with Shopify
The cart and payment page are provided by Shopify, which processes the data needed for the order and payment under its own privacy policy (shopify.com/legal/privacy). For some functions, such as fraud prevention, Shopify acts as a separate data controller.
Third-party sites and services
The site may contain links to third-party sites. We are not responsible for their data practices: read their policies before sharing information with them.
Minors
Our services are intended for adults. We do not knowingly collect data about minors; a parent or guardian may ask us to delete it.
Retention periods
Requests and quotes not followed up: three years after the last contact. Customer data: for the duration of the business relationship, then until limitation periods expire. Accounting records: ten years (article L123-22 of the French Commercial Code). Cookie choices: thirteen months at most.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions for what happens to it after your death. Write to us at contact@cuboxo.fr; we reply within one month and may ask you to prove your identity. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the authority in your country.
Security
The site is served over an encrypted connection (HTTPS) and access to data is limited to the people who need it to handle your request or order. As no system is infallible, please never send us sensitive information by email.
Changes
This policy may change, in particular to follow regulations; the online version is the one that applies. Last updated: October 2026.