01Who is responsible
The data controller is PEDALIX, SASU (société par actions simplifiée à associé unique), 38 Rue des Aqueducs, 69005 Lyon, France, SIREN 108 977 455. For any question about your data, write to contact@pedalix.boutique.
02What we collect
- When you order: your name, email address, phone number if you give one, delivery address, the products ordered, any note you add, and the payment status. We never see or store your card number.
- When you contact us: your name, email address, your message and, if relevant, your order number.
- When you browse: our hosting provider records technical logs (IP address, browser, pages requested, date and time) to keep the site secure and working.
- On your own device: your cart and a few preferences, kept in your browser’s local storage and never sent to us. See our cookie policy.
We do not use analytics tools, advertising cookies, social media pixels or any other tracking.
03Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing, delivering and following up your order | Performance of a contract, Art. 6(1)(b) |
| Invoicing and accounting | Legal obligation, Art. 6(1)(c) |
| Handling returns, refunds and warranty claims | Contract and legal obligation, Art. 6(1)(b) and (c) |
| Answering your questions before or after a purchase | Steps taken at your request and legitimate interest, Art. 6(1)(b) and (f) |
| Keeping the website secure | Legitimate interest, Art. 6(1)(f) |
We do not send marketing emails. If we ever offer a newsletter, it will only be sent to people who have asked for it.
04Who receives it
Your data is used by the Pedalix team and shared only with the service providers we need to run the shop:
- delivery companies, which receive your name, address and phone number to deliver your parcel;
- our payment service provider, which processes your payment;
- our website hosting and email providers.
These providers act on our instructions and must protect your data. We may also disclose data when the law requires it. We never sell or rent your data.
05Transfers outside the EU
We prefer providers that store data in the European Union. If a provider processes data outside the European Economic Area, the transfer is covered by an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or by the Commission’s standard contractual clauses.
06How long we keep it
| Data | Kept for |
|---|---|
| Orders and invoices | 10 years, as required by French accounting law |
| Customer account data used for follow-up | 3 years after your last order or contact |
| Messages sent to customer service | 3 years after the last exchange |
| Server security logs | 12 months at most |
| Cart and preferences on your device | Until you empty your cart or clear your browser data |
07Your rights
You have the right to access your data, have it corrected or erased, restrict or object to its use, and receive it in a portable format. You can also give instructions about what happens to your data after your death.
To use any of these rights, email contact@pedalix.boutique. We answer within one month. If we have reasonable doubt about your identity, we may ask for proof of it.
If you believe your rights are not respected, you can complain to the French data protection authority, the CNIL: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
08Security
The website is served over an encrypted HTTPS connection. Access to customer data is limited to the people who need it, and payments are handled by a provider certified to the PCI DSS card security standard.
09Children
Our shop is meant for adults. We do not knowingly collect data from children under 15. Products for children, such as kids’ fenders, are bought by their parents or guardians.
10Changes to this policy
If we change how we use your data, we update this page and the date at the top. Significant changes are announced on the website.