Last updated: 15/09/2026
1. Who is responsible for your data?
empreinte-moi.com is published by EURL CBAC, 8 rue de la Perrière, 49080 Bouchemaine, registered under Angers B 841 325 871. This company is the data controller for personal data collected on the site.
For any question about your data: contact@empreinte-moi.com — 02 53 61 52 31.
2. What data do we collect, and why?
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Identity and contact details (name, e-mail, phone, addresses) | Creating and managing your account, processing and delivering your orders, customer service | Performance of the contract | Lifetime of the account, then 3 years after the last activity |
| Measurements and measurement profiles | Making your made-to-measure shirts | Performance of the contract | With your account; deleted with it |
| Orders, invoices, history | Fulfilling the sale, accounting and tax obligations, warranties | Performance of the contract, legal obligation | 10 years (accounting records) |
| Payment data | Collecting payment for your order | Performance of the contract | Your card number never passes through our servers: it is entered directly on our payment provider's secure page (see §4). We only keep the transaction identifier. |
| Contact form messages | Answering your requests | Legitimate interest (replying to those who write to us) | 3 years after the last exchange |
| Newsletter e-mail address | Sending you our news | Consent | Until you unsubscribe (link in every e-mail) |
| Gift card recipient (name, e-mail, message) | Delivering the card to the person you designate | Performance of the contract | With the order |
| Technical logs (IP address, pages viewed, browser) | Site security, abuse detection, troubleshooting | Legitimate interest | 12 months |
| Audience measurement data | Understanding how the site is used | Consent (cookie banner) | See §6 |
Fields marked as required in our forms are necessary for the requested service; without them we cannot respond.
3. Who has access to your data?
Your data is processed by EURL CBAC staff authorised to do so, and by the following providers, each for the sole task entrusted to them:
- Payment: Lyra Network (SystemPay), Villeurbanne, France — secure card payment.
- Transactional e-mails: Brevo (Sendinblue SAS), Paris, France — order and account confirmations, contact form messages.
- Hosting: OVH SAS, 2 rue Kellermann — 59100 Roubaix — France — servers located in France.
- Shipping: the carrier chosen for your order (Colissimo, Chronopost or equivalent) receives your name, address and, where applicable, phone number for delivery.
- Audience measurement and advertising: only if you accept it, Google (Analytics, Tag Manager) and Meta (pixel). These companies may transfer data to the United States under the European Commission's standard contractual clauses.
We neither sell nor rent your data. It may be disclosed to authorities where the law requires it.
4. Secure payment
When paying, you are redirected to our bank's payment page. Your card details are entered and encrypted there; EURL CBAC has no access to them and does not store them.
5. Your rights
Under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act, you have the right to access, rectify, erase, restrict, port and object to the processing of your data, to withdraw your consent at any time, and to set instructions regarding your data after your death.
From your customer area, under My data, you can at any time download all your data and delete your account. You can also write to contact@empreinte-moi.com or to the postal address above; we reply within one month.
If you believe your rights are not respected, you may lodge a complaint with the CNIL (www.cnil.fr), 3 place de Fontenoy, 75007 Paris, France.
6. Cookies and trackers
The site sets:
- a session cookie, essential to operation (basket, login), deleted when the browser closes;
- a "remember me" cookie, only if you tick that box when logging in, kept for 30 days;
- your cookie choice, stored in your browser so we do not ask again at every visit.
Audience measurement and advertising tools (Google Analytics, Google Tag Manager, Meta pixel) are loaded only after you agree in the banner shown on your first visit. Refusing has no effect on your use of the site. You can change your mind by clearing the site data in your browser: the banner will be shown again.
Embedded videos come from YouTube and only load when you click the thumbnail.
7. Security
Exchanges with the site are encrypted (HTTPS). Passwords are stored hashed and are never readable, including by us. Access to the site's administration is restricted to named accounts, protected by password.
8. Minors
The site is intended for adults. We do not knowingly collect data from children under 15.
9. Changes to this policy
This policy may be updated to follow changes to the site or to regulations. The date at the top of the page indicates the version in force.