what we collect, and what we do not

Card numbers are never collected by this site. They are entered on the secure payment page and are never transmitted to or stored on our servers — see payment and site security.

• We do not sell, rent or exchange personal data.
• We do not build advertising profiles and we run no advertising trackers.
• We do not use automated decision-making or profiling that affects you.
• We do not collect any special-category data: no health data, no biometrics, no opinions.
• We do not ask for a date of birth or an identity document.
• We do not require an account, so there is no password of yours for us to lose.

Only the parties needed to get a parcel to you and to keep the site running:

hosting

Vercel Inc., which hosts the site infrastructure — named in full on the mentions légales page

database

our data processor, which stores order and form records inside the European Union

payment

the payment service provider, which handles card data in its own PCI DSS certified environment and returns only the outcome

carrier

the delivery carrier, which receives the name, address and telephone number needed to deliver

accountant

for invoices, under professional confidentiality

Each acts on our instructions under a written processing agreement. Where a processor operates outside the European Union, the transfer relies on the European Commission standard contractual clauses.

• Access — ask for a copy of what we hold about you.
• Rectification — have anything wrong corrected.
• Erasure — have it deleted, except where accounting law obliges us to keep an invoice.
• Restriction — have us stop using it while a dispute is resolved.
• Portability — receive what you gave us in a machine-readable file.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — at any time, for anything based on consent, without affecting what came before.

how

email support@ouestactive.online, or write to 6 Place du Vert Buisson, 35170 Bruz, France

what we need

enough to find your record — usually the email address you ordered with

our deadline

one month, extendable to three for a complex request, and we will tell you if we extend

cost

free

If you are not satisfied with how we have handled your data or your request, you have the right to lodge a complaint with the French data protection authority, the CNIL. You do not need our permission and you do not have to come to us first.

authority

Commission Nationale de l’Informatique et des Libertés (CNIL)

address

3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France

online

cnil.fr/en/plaintes

telephone

+33 1 53 73 22 22

• The whole site is served over HTTPS. Every form submits over HTTPS.
• Access to order records is limited to the people who need it to fulfil orders.
• Order totals are recalculated server-side, and forms are rate-limited and carry an anti-abuse check.
• We hold no card data, which removes the single most damaging thing a shop can lose.

If a breach of personal data occurs that is likely to create a risk to you, we notify the CNIL within 72 hours and inform you directly where the risk is high, saying what happened and what to do about it.

This shop is for adults. Orders may be placed by people aged 18 or over, and we do not knowingly collect data from children. If you believe a child has given us data, tell us and we will delete it.