Who is responsible
The data controller is DISTRIBUTION PRODUCTION LOGISTIQUE (D.P.L.), 3 Rue de la Varenne, 36700 Châtillon-sur-Indre, France. For any question about your data, or to exercise a right, write to support@dplclothing.shop or to the postal address above.
We are not required to appoint a data protection officer: we process data on a small scale to run an online shop, and we carry out no large-scale monitoring and process no sensitive categories of data.
What we collect and why
| When | What | Why |
|---|---|---|
| You place an order | First and last name, email, telephone, delivery address, order contents and size allocation, delivery notes | To take the order, deliver it, invoice it, and handle withdrawal or guarantee claims afterwards |
| You pay | Amount, transaction reference, payment status, last four digits of the card | To reconcile payments and process refunds. We never receive or store a full card number |
| You write to us | Name, email, telephone if given, subject and message | To answer you and keep a record of the exchange |
| You send a team enquiry | Organisation, contact name, email, telephone, quantities, size spread, date needed | To prepare and send a written quotation |
| You browse | Cart contents and your cookie choice, stored in your own browser | To keep your cart between pages and to remember your cookie decision |
We run no advertising cookies, no third-party analytics and no cross-site tracking. We do not build profiles, we take no automated decisions with legal effects, and we never sell or rent your data.
Legal bases
- Performance of a contract — order, delivery, invoicing, withdrawal and guarantee handling.
- Legal obligation — keeping accounting records and invoices for the statutory period.
- Legitimate interest — answering your messages, preparing quotations, and protecting the site against fraud and automated abuse, balanced against your rights.
- Consent — for anything not strictly necessary. Nothing non-essential is set before you choose, and refusing is exactly as easy as accepting. See cookies.
How long we keep it
- Order and delivery data: 3 years from the last contact, for customer service and guarantee claims.
- Invoices and accounting records: 10 years, as French commercial law requires.
- Messages and team enquiries: 3 years from the last contact, then deleted.
- Cookie choice: 6 months, after which we ask again.
- Cart contents: held in your browser only, until you clear it or clear your browser storage.
Who else sees it
Only our own staff who need it, plus the following processors, each bound by contract to process data only on our instructions:
- Our hosting provider, which runs the servers this site is served from — identified on mentions légales.
- Our payment services provider, which handles card entry and processing on PCI DSS certified infrastructure.
- Our carriers, which receive the delivery name, address and telephone number needed to deliver the parcel — and nothing else.
- Our email provider, which sends order confirmations and replies.
We may also have to disclose data to a public authority where the law requires it. We disclose nothing to anyone for marketing purposes.
Transfers outside the EU
Data is processed within the European Union wherever possible. Where a processor operates from outside the EU, the transfer relies on an adequacy decision of the European Commission or on the European Commission's standard contractual clauses, together with the supplementary technical measures required.
You may ask us for a copy of the safeguards applying to a specific transfer by writing to support@dplclothing.shop.
Security
The whole site is served over HTTPS with TLS. Access to order data is restricted to the staff who need it. Card details never reach our systems. Details of the payment path are on paiement et sécurité.
Should a personal data breach occur that is likely to result in a risk to your rights, we notify the CNIL within 72 hours and inform you directly where the risk is high.
Your rights
Under the GDPR and the Loi Informatique et Libertés you have the right to:
- be told what data we hold about you and obtain a copy of it (access);
- have inaccurate data corrected (rectification);
- have data erased where we no longer have grounds to keep it (erasure);
- restrict processing while a dispute about accuracy or grounds is resolved;
- receive your data in a portable, machine-readable format;
- object to processing based on our legitimate interest;
- withdraw consent at any time, without affecting what was done before;
- give directions about what happens to your data after your death.
Write to support@dplclothing.shop or to 3 Rue de la Varenne, 36700 Châtillon-sur-Indre, France. We answer within one month. If a request is complex we may extend that by two months and will tell you why within the first month. Exercising a right is free; we may charge only for a manifestly excessive repeat request.
We may need to confirm your identity before acting on a request — that check protects your data from someone else asking for it.
Complaining to the CNIL
If you consider that your data is not being handled lawfully, you have the right to lodge a complaint with the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL):
- Online: www.cnil.fr/fr/plaintes
- By post: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
- By telephone: +33 1 53 73 22 22
You may complain to the CNIL without contacting us first, though we would rather have the chance to put something right.
Minors
This shop is intended for adults with the legal capacity to contract. We do not knowingly collect data from minors. If you believe a minor has given us personal data, write to support@dplclothing.shop and we will delete it.