Privacy policy
PRIVACY POLICY
Last updated: 11 February 2026
This Privacy Policy explains how SPINTAP collects, uses, retains, and protects your personal data when you visit https://spintap.fr, create an account, make a purchase, or contact us.
This Privacy Policy complies with the EU General Data Protection Regulation (EU GDPR) and, where applicable, the UK General Data Protection Regulation (UK GDPR).
1. Data Controller
The data controller is:
Jefferson Cortés – Sole Trader (Micro-entreprise)
SIRET: 844 465 005 00016
VAT not applicable, Article 293 B of the French General Tax Code
Address:
64 Rue de l'Égalité
92130 Issy-les-Moulineaux
France
Email: spintap.team@gmail.com
Phone: +33 7 56 92 42 99
The data controller has not appointed a Data Protection Officer (DPO), as this is not mandatory given the nature of the business.
---
2. Data We Collect
We may collect the following categories of personal data:
• Order information:
First name, last name, billing and delivery address, email address, telephone number, products ordered, order value and purchase history.
• Payment information:
Payments are securely processed by our payment providers (Shopify Payments, Stripe and/or PayPal where available). We never have access to your full payment card details.
• Customer support information:
Messages exchanged with customer support, attachments and support requests.
• Browsing information:
IP address, browser type, device information, session identifier, pages visited and browsing activity collected through cookies and similar technologies.
• Marketing information:
Marketing preferences, consent records and email campaign statistics where you have opted in.
---
3. Purposes and Legal Bases
We process your personal data on the following legal bases:
• Performance of a contract
Order processing, payment, delivery and customer support.
• Legal obligations
Accounting, invoicing, fraud prevention and compliance with consumer protection laws.
• Legitimate interests
Website security, abuse prevention, internal analytics and service improvement.
• Consent
Sending marketing communications and placing non-essential cookies. You may withdraw your consent at any time.
---
4. Recipients of Your Data
Your personal data may be shared only with service providers necessary for operating our business, including:
• Shopify Inc. (e-commerce platform and hosting)
• Payment providers (Shopify Payments, Stripe, PayPal)
• Delivery carriers and logistics partners
• Analytics and advertising providers (such as Google Analytics and Meta Pixel, where enabled)
These providers process personal data only for the purposes described in this Privacy Policy and in accordance with applicable data protection laws.
---
5. International Data Transfers
Some of our service providers (including Shopify) may process personal data outside the European Economic Area (EEA).
Where this occurs, transfers are protected using appropriate safeguards, including:
• Standard Contractual Clauses approved by the European Commission;
• Where applicable, adequacy decisions recognised under EU or UK data protection law;
• Additional technical and organisational security measures where appropriate.
Further information is available upon request.
---
6. Data Retention
We retain personal data only for as long as necessary:
• Customer account data:
3 years after the last activity.
• Accounting records:
10 years, as required by French law.
• Customer support requests:
For as long as necessary to resolve the request and subsequently archived where required for legal purposes.
• Cookies:
Maximum 13 months where consent is required.
---
7. Cookies
Our website uses cookies and similar technologies.
Types of cookies include:
• Strictly necessary cookies
Required for the proper functioning of the website (shopping cart, checkout, security). No consent is required.
• Analytics cookies
Used to measure website performance (for example Google Analytics). Activated only with your consent.
• Marketing cookies
Used for personalised advertising (for example Meta Pixel). Disabled unless you provide consent.
• Functional cookies
Remember language and display preferences.
A cookie banner allows you to:
• Accept all cookies;
• Reject non-essential cookies;
• Customise your preferences.
You may change or withdraw your consent at any time through the "Cookies" link available in the footer.
No non-essential cookies are placed before your explicit consent.
---
8. Security
We implement appropriate technical and organisational measures to protect your personal data, including:
• SSL (HTTPS) encryption;
• Restricted access to personal data;
• Secure authentication procedures;
• Monitoring against unauthorised access.
Although no system can guarantee absolute security, we continuously work to protect your information.
Any suspected security issue may be reported to:
spintap.team@gmail.com
---
9. Your Rights
Under the EU GDPR and, where applicable, the UK GDPR, you have the right to:
• Access your personal data;
• Correct inaccurate information;
• Request deletion of your personal data;
• Object to certain processing activities;
• Request restriction of processing;
• Receive your personal data in a portable format.
To exercise any of these rights, please contact:
spintap.team@gmail.com
We will respond within one month of receiving your request. This period may be extended where permitted by law. We may request proof of identity before processing your request.
---
10. Marketing Communications
You may unsubscribe from marketing communications at any time by:
• Clicking the unsubscribe link included in every marketing email; or
• Contacting us directly at spintap.team@gmail.com.
Opting out of marketing communications does not affect communications relating to your orders.
---
11. Children
This website is not intended for individuals under the age of 18.
If we become aware that personal data relating to a minor has been collected unintentionally, we will delete it without undue delay.
---
12. Complaints
If you believe that your data protection rights have been infringed:
If you are located in the United Kingdom, you may lodge a complaint with the Information Commissioner's Office (ICO):
https://ico.org.uk
As our business is established in France, you may also contact the French Data Protection Authority (CNIL):
https://www.cnil.fr
CNIL
3 Place de Fontenoy
75007 Paris
France
---
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will always be published on this page, and the "Last updated" date at the top of this document will indicate when the most recent changes were made.
