Privacy policy

Date of Last Update: October 23, 2025.

AC Rec. places great importance on the protection of your personal data. The purpose of this privacy policy is to inform you about how we collect, use, share, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act ("Loi Informatique et Libertés").

1. Data Controller

The data controller responsible for processing your personal data is:

AC Rec.

Sole Proprietorship under the micro-enterprise regime

Address: Amaury Cambuzat EI - 1449 Rte d'Orange - 26110 Nyons - France

Email: amaurycambuzat@gmail.com

Phone: +33(0)615724267

SIRET: 91220232200018

2. Personal Data Collected

We collect the following personal data:

When creating an account or placing an order:

  • Last name and first name

  • Email address

  • Phone number

  • Delivery address

  • Billing address

When browsing the site:

  • IP address

  • Browsing data (pages visited, duration of visit)

  • Type of browser and device used

  • Cookies (with your consent)

During payment:

  • Payment information is processed directly by our secure payment provider. We do not store your complete banking data.

3. Purposes of Processing

Your personal data is collected and processed for the following purposes:

  • Order Management: processing, preparation, shipping, and tracking of your orders

  • Customer Relationship Management: responding to your questions, managing returns and complaints

  • Payment Management: invoicing and accounting

  • Improvement of our Services: statistical analysis of website traffic

  • Marketing Communication: sending newsletters and promotional offers (only with your consent)

  • Compliance with our Legal Obligations: retention of invoicing data in accordance with tax and accounting obligations

4. Legal Basis for Processing

The processing of your data is based on the following legal grounds:

  • Contract Performance: for the processing and delivery of your orders

  • Legal Obligation: for the retention of invoicing data

  • Consent: for sending marketing communications and using cookies

  • Legitimate Interest: for fraud prevention and improvement of our services

5. Recipients of the Data

Your personal data may be transferred to the following recipients:

  • Shopify: our hosting and online store management platform

  • Payment Providers: for secure payment processing

  • Carriers: for the delivery of your orders

  • Messaging Services: for sending transactional and marketing emails (with your consent)

We ensure that these providers offer sufficient guarantees regarding the protection of personal data and process your data only according to our instructions.

6. Data Transfers Outside the EU

Some of our service providers (including Shopify) may be located outside the European Union, particularly in Canada and the United States. These transfers are governed by appropriate safeguards in accordance with the GDPR (Standard Contractual Clauses, adequacy decisions).

7. Retention Period

We retain your personal data for the following periods:

  • Customer Account Data: for the entire duration of the commercial relationship and 3 years after your last activity

  • Order Data: 10 years from the close of the financial year (legal obligation)

  • Invoicing Data: 10 years (legal tax and accounting obligation)

  • Browsing Data: 13 months maximum

  • Marketing Consent: 3 years from your last contact with us

After these periods, your data is deleted or anonymized.

8. Your Rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

  • Right of Access: to obtain confirmation as to whether or not your data is being processed and to access that data

  • Right to Rectification: to correct your inaccurate or incomplete data

  • Right to Erasure: to request the deletion of your data under certain conditions

  • Right to Restriction of Processing: to request the limitation of the processing of your data in certain cases

  • Right to Object: to object to the processing of your data for reasons relating to your particular situation

  • Right to Data Portability: to receive your data in a structured, commonly used format

  • Right to Withdraw Consent: at any time, for processing based on consent

  • Right to Define Directives: regarding the fate of your data after your death

To exercise your rights, you can contact us:

  • By email: amaurycambuzat@gmail.com

  • By mail: Amaury Cambuzat EI - 1449 Rte d'Orange - 26110 Nyons - France

We commit to responding to your request within one month of receipt.

9. Right to Lodge a Complaint

If you consider that the processing of your personal data infringes the regulations, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) in France:

CNIL 3 Place de Fontenoy TSA 80715 75334 PARIS CEDEX 07 Phone: 01 53 73 22 22 Website: https://www.cnil.fr

10. Cookies

Our site uses cookies to enhance your browsing experience and analyze site usage.

Types of cookies used:

  • Essential Cookies: necessary for the functioning of the site (cart, session)

  • Analytical Cookies: to measure audience and improve the site (with your consent)

  • Marketing Cookies: to personalize advertisements (with your consent)

You can manage your cookie preferences at any time via your browser settings or through our cookie management banner.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access:

  • SSL/TLS encryption for data transmissions

  • Restricted access to personal data

  • Regular backups

  • Regular update of security systems

12. Minors

Our site is not intended for persons under 16 years of age. We do not knowingly collect personal data concerning minors under 16 without the consent of the holders of parental authority.

13. Changes to the Privacy Policy

We reserve the right to modify this privacy policy at any time. Any modification will be published on this page with a new update date. We encourage you to regularly consult this page to become aware of any changes.

14. Contact

For any questions concerning this privacy policy or the processing of your personal data, you can contact us:

Email: amaurycambuzat@gmail.com

Phone: +33 615724267

Address: 1449, Rte d'Orange - 26110 Nyons - France