← Back to site

Privacy Policy

In force as of 31/05/2026

Creative and Cool attaches great importance to the protection of your personal data. The purpose of this policy is to inform you about how we collect, process and protect your data, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act of 6 January 1978 as amended.

1. Data controller

Creative and Cool (SAS)
7 Rue des Oujardes, 49190 Rochefort-sur-Loire
Email : hello@creative-and-cool.com

2. Data collected

We collect the following categories of data:

  • Identification data: last name, first name, email, phone, postal address
  • Order data: products purchased, amounts, dates, delivery method
  • Payment data: no banking data is stored on our servers (handled by our providers Stripe / PayPal)
  • Business data (if Pro account): company name, SIRET, VAT number
  • Connection data: IP address, browser, pages visited

3. Purposes of processing

Your data is collected for the following purposes:

  • Management of your customer account
  • Processing and tracking of your orders (delivery, invoicing)
  • After-sales service and response to your requests
  • Sending emails relating to your orders (confirmation, shipment)
  • Compliance with our legal obligations (accounting, taxation)
  • Fraud prevention and service improvement

4. Legal bases

Our processing is based on:

  • The performance of the sales contract you have entered into with us
  • Our legitimate interest in operating and improving our site
  • Your legal obligations (retention of invoices, etc.)
  • Your consent for marketing communications (where applicable)

5. Data recipients

Your data is accessible only to authorised personnel within Creative and Cool, as well as to our technical subcontractors:

  • Stripe Payments Europe Ltd (card payment — Ireland)
  • PayPal (Europe) S.a.r.l. et Cie, S.C.A. (PayPal payment — Luxembourg)
  • Mondial Relay / Chronopost (delivery — France)
  • O2switch SAS (website and database hosting — France)
  • Brevo SAS (transactional email sending — France)

All our subcontractors are contractually committed to respecting the GDPR and the confidentiality of your data. Data Processing Agreements (DPA) compliant with article 28 of the GDPR are available upon request at hello@creative-and-cool.com.

6. Retention period

  • Customer account data: retained as long as the account is active. After 3 years of inactivity, the account is anonymised (personal data is erased while preserving the integrity of invoices retained under our legal obligations).
  • Order / invoicing data: retained for 10 years (legal obligation).
  • Technical logs: maximum retention of 12 months.

7. Your rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain confirmation that your data is being processed and access it
  • Right of rectification: correct inaccurate data
  • Right to erasure: request the deletion of your data ("right to be forgotten")
  • Right to restriction: limit processing
  • Right to portability: retrieve your data in a structured format
  • Right to object: oppose processing
  • Right to withdraw your consent at any time

To exercise these rights, contact us at hello@creative-and-cool.com. We will respond within a maximum period of 1 month.

You may also lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.

8. Security

We implement all appropriate technical and organisational measures to ensure the security of your data: HTTPS connection, hashed passwords, regular backups, restricted access.

9. Cookies and trackers

9.1 Strictly necessary cookies

Our site uses cookies essential for its operation (cart management, login session, CSRF token). In accordance with article 82 of the French Data Protection Act, these cookies are exempt from the requirement to obtain consent.

9.2 Managing your preferences

Our site currently does not use any third-party audience measurement or analytics tools (Google Analytics, Matomo, etc.). Only strictly necessary cookies are used.

On your first visit, a banner compliant with CNIL recommendations allows you to accept or refuse non-essential cookies, should we introduce any in the future. Refusing is as simple as accepting.

You can change your choice at any time by clicking on the padlock at the bottom right of each page, or via your browser settings.

10. Modification of the policy

This policy may be modified at any time. The version in force at the time of your visit to the site applies.

Last updated: 31/05/2026