Data Protection & Cookies
1. Data Controller
This policy applies to the e-commerce website FRANÇOIS-LOUIS TOUSSAINT – FRENCH CUTLER, accessible at https://fl-toussaint.fr. Personal data is processed in compliance with the GDPR, the French Data Protection Act (Loi Informatique & Libertés), and the guidelines of the CNIL (French Data Protection Authority).
Data Controller:
EI François-Louis Toussaint
15 avenue des États-Unis – 63300 Thiers – France
Data Protection Contact / Internal DPO: François-Louis TOUSSAINT (Owner)
Email: contact@fl-toussaint.fr
Phone: 07 68 19 18 50
For any question regarding your data or the exercise of your rights, please contact us using the details above. If you believe your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr).
2. Data Collected
The following categories of data may be collected and processed:
- Customer account creation and management: first name, last name, email address, password (hashed), delivery and billing addresses, preferences.
- Orders: products purchased, amounts, addresses, delivery method, technical order identifiers, purchase history.
- Payment: transaction information (references, status, timestamp). Banking details are never stored by FRANÇOIS-LOUIS TOUSSAINT and are processed solely by the payment service provider.
- Contact forms / customer service: email address, message content, any attachments, timestamp.
- Newsletter: email address, subscription status, open and click metrics where consented.
- Cookies / trackers: session identifier, consent preferences, aggregated analytical data, marketing trackers (Meta Pixel) where applicable.
- Technical browsing data: IP address, browser or device type, pages visited, visit duration, technical events (errors, latency).
Some data is mandatory for the performance of the contract (in particular the delivery address). Without it, the order cannot be processed.
3. Purposes and Legal Bases
| Purpose | Legal basis (GDPR Art. 6) | Examples of data |
|---|---|---|
| Customer account management | Performance of a contract (6-1-b) | Identity, email, addresses, preferences |
| Orders, delivery, invoicing | Performance of a contract (6-1-b) | Contact details, orders, invoices |
| Customer service / support | Legitimate interest (6-1-f) | Messages, emails, attachments |
| Newsletter and direct marketing | Consent (6-1-a) | Email address, preferences |
| Audience measurement | Consent (6-1-a) | Analytical cookies, aggregated data |
| Targeted advertising / retargeting | Consent (6-1-a) | Advertising identifiers, events |
| Legal obligations | Legal obligation (6-1-c) | Invoices, logs, supporting documents |
Consent may be withdrawn at any time, without retroactive effect, via the unsubscribe links or through the cookie management module.
4. Retention Periods
| Category | Duration | Notes |
|---|---|---|
| Order / invoicing data | 10 years | Accounting and tax obligations |
| Customer account | Life of account + 3 years of inactivity | Then deleted or anonymised |
| Support / complaints | 3 to 5 years | Depending on the nature of the case |
| Newsletter / direct marketing | Until consent is withdrawn | Unsubscribe at any time |
| Analytical / marketing cookies | 13 months | Audience data retained for a maximum of 25 months |
| Consent cookie | 6 months | Consent renewal |
| PrestaShop session cookie | ~20 days | Session, cart, technical preferences |
5. GDPR Rights
- Right of access
- Right to rectification
- Right to erasure
- Right to object
- Right to restriction of processing
- Right to data portability
- Post-mortem directives
To exercise your rights: contact@fl-toussaint.fr. A response will be provided within one month (extendable by two months in complex cases). Proof of identity may be requested.
8. Cookie Management
Cookies are managed via the built-in Cooky'Chef module. No non-essential cookie is set without your prior consent. You may accept, decline, or configure cookies by category, and change your preferences at any time.
Last updated: 07/02/2026