Privacy policy

Controller

The controller is PECETTE SAS, 6 chemin de Brouilla, 66670 Bages, France. For any question about your data, write to bonjour@pecette.com.

Data we collect

The trade portal serves businesses. The personal data we process belongs to the people who open an account and order on behalf of their company:

• account: e-mail address and password (stored hashed, never in plain text);
• company record: company name, contact name, delivery address, SIRET, EU VAT number, phone numbers and contact e-mail;
• orders: items, quantities, amounts, payment method, delivery tracking and invoices;
• card payments: the card number is entered directly with our provider Stripe and is never sent to or stored by PECETTE;
• technical data: connection logs and error reports, used to keep the Site secure and working.

Purposes and legal bases

• running your account, approving your access to trade prices and handling your orders (performance of the contract);
• issuing and sending order forms, invoices and payment reminders (performance of the contract and accounting obligations);
• arranging delivery with our carrier (performance of the contract);
• protecting forms against abuse and monitoring Site errors (legitimate interest).

We do not use your data for advertising and we do not sell it.

Recipients

Your data is handled by the PECETTE team and by the following providers, each for its own task only:

• Supabase (database and authentication);
• Vercel (Site hosting);
• Stripe (card payments);
• Pennylane (order forms, invoices and accounting);
• Geodis (order preparation and delivery: delivery name, address and phone);
• Resend (the Site's e-mails);
• Google reCAPTCHA (protection of the sign-up and forgotten password forms);
• Sentry (technical error tracking).

Some of these providers are based in the United States. Those transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

How long we keep it

• account and company record: for the whole business relationship, then three years after the last contact;
• orders, order forms and invoices: ten years, as required by article L123-22 of the French Commercial Code;
• technical logs and error reports: a few weeks to a few months depending on the provider.

Cookies

The Site sets no advertising or analytics cookies. The only cookies it uses are needed for it to work: keeping you signed in, remembering your language, Google reCAPTCHA's abuse protection on the forms that use it, and Stripe's payment security. They do not require your consent.

Your rights

You can ask to access, correct, erase, restrict or port your data, and you can object to its processing. Write to bonjour@pecette.com; we may ask you to prove your identity. Data the law requires us to keep (invoices in particular) cannot be erased before its legal retention period ends.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Changes

This policy may change. The version in force is the one published on this page, with its update date.