Politique de confidentialité

1. Introduction

This privacy policy aims to inform users of the website (hereinafter “the Site”) about how their personal data is collected, processed, and protected. The data controller is: PHN Consulting whose registered office is located at 4 villa des Belles Vues, 94120 Fontenay-sous-Bois, registered under number SIREN: 832335608. Contact: contact@phn-events.com

2. Personal data collected

We collect the following data when you use the Site: 2.1. When creating an account or placing an order

• First and last name
• Postal address
• Email address
• Phone number
• Order-related information
• Payment information (managed by a secure provider, we do not store the details)

2.2. When browsing the Site

• IP address
• Cookies and trackers
• Pages viewed, products seen, actions performed
• Browser and device technical data

2.3. Customer service

• Content of your messages
• Information required to process your requests

3. Purposes of data collection

Your personal data is used to:

• Manage your order, your customer account, and delivery
• Provide customer service and ensure follow-up of communications
• Send commercial information (if you have consented)
• Improve the functioning of the Site and your user experience
• Prevent fraud and ensure secure payments
• Comply with our legal, accounting, and tax obligations

4. Legal basis for processing

In accordance with the GDPR, data processing relies on the following legal bases:

• Performance of a contract: order management, deliveries, and customer service
• Legal obligation: invoicing, accounting
• Consent: newsletters, non-essential cookies
• Legitimate interest: improvement of the Site, fraud prevention

5. Data recipients

Your data may be transmitted only to the following recipients:

• Payment service providers (e.g., Stripe, PayPal)
• Carriers and delivery services
• Site hosting provider
• Emailing and CRM solutions
• Administrative or judicial authorities if required by law

We never sell your personal data.

6. Data retention period

Data is stored for the following periods:

• Customer account: as long as it is active or 3 years after the last activity
• Order/invoicing data: 10 years (legal obligation)
• Commercial prospecting: 3 years after the last contact
• Cookies: between 6 and 13 months depending on the type

7. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

• Right of access to your data
• Right to rectification
• Right to deletion (“right to be forgotten”)
• Right to object
• Right to restrict processing
• Right to data portability
• Right to withdraw your consent at any time
• Right to file a complaint with the CNIL (www.cnil.fr)

To exercise your rights: [contact email].

8. Data security

We implement all necessary technical and organizational measures to protect your data:

• Secure HTTPS browsing
• Hosting compliant with GDPR
• Restricted access to data
• Payments processed only through secure providers

9. Cookies

The Site uses cookies to:

• Ensure proper functioning (technical cookies)
• Measure audience (analytics cookies)
• Personalize experience and advertising (marketing cookies, subject to consent)

During your first visit, a banner allows you to accept, refuse, or customize cookies. You can modify your preferences at any time via: [link or “Manage cookies” mention].

10. Data transfer outside the European Union

Some service providers (e.g., email or hosting solutions) may transfer data outside the EU. These transfers are always carried out with appropriate safeguards (Standard Contractual Clauses or other GDPR-compliant mechanisms).

11. Changes to the privacy policy

We may modify this policy to comply with legal or technical developments. The applicable version is the one available on the Site at the date of your use.