Privacy policy
ETCH Privacy Policy
The company ETCH (as defined in Article 1 below) offers kitchen utensils for sale at etch-couteaux.com.
In order to offer for sale, sell, and deliver its products, ETCH collects personal data from users of its website.
This privacy policy aims to inform users of the means implemented to collect, access, process, and store users’ personal data.
ETCH, as the data controller, undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of 27 April 2016 on the protection of personal data.
Clients are informed that certain data must be collected by ETCH in order to provide its services. If the client does not wish to provide this data, ETCH will not be able to perform its services.
This privacy policy (“Policy”) may be modified at any time by ETCH, particularly to comply with any regulatory, judicial, editorial, or technical changes. Users should refer to the latest version of the Policy before using the website.
1. Data Controller
The data controller, who collects personal data and implements data processing, is:
ETCH, a simplified joint-stock company (SAS) with a share capital of €1,000, registered with the Paris Trade and Companies Register under number 920 468 154, with its registered office at 13 rue du Baigneur, Paris 75018, France.
2. Collection of Personal Data
ETCH may collect personal data from users on the website etch-couteaux.com.
The personal data that may be collected include:
-
Transaction data: information provided by the user when making purchases, including order and return details such as phone number, address, email address, and payment information.
-
Communications with customer service.
-
Navigation data: data collected during the user’s navigation on the site and apps, such as connection date and time, browser type, browser language, IP address, and location/geolocation data.
Payment data (credit card number, expiration date, authorization number, security code) are collected directly by our provider Shopify Payments.
Third-party providers of applications, tools, widgets, and plugins on our website and mobile app, as well as networks where we publish editorial and promotional content (e.g., Facebook, Instagram, Pinterest), may also use automated means, based on interests and context, to collect user data (interactions with features and online activity profiling). These data are collected directly by these providers and/or third parties and are subject to their policies. To the extent permitted by applicable law, ETCH is not responsible for the practices of these providers or third parties.
Some services may be limited or unavailable if consent for data collection, as described in this Privacy Policy, is not provided.
3. Purposes of Personal Data Collection
The data collected in connection with the use of the website, app, or physical stores is processed to achieve the purposes described in the table below.
Current regulations protect users’ privacy and require any data controller to justify a legitimate basis for processing. Legal bases for processing include:
-
Performance of a contract to which the data subject is a party, such as a sales contract. Some personal data are necessary to deliver goods, manage customer accounts, and process returns.
-
Compliance with a legal obligation, including accounting requirements for invoice retention.
-
Prior consent of the data subject.
-
Legitimate interest of the data controller, respecting users’ rights and freedoms (e.g., improving customer experience or preventing fraud).
| Purpose of Processing | Use of Data | Legal Basis |
|---|---|---|
| Management of orders, sales, and services; handling complaints, retractions, and returns | Data used to provide products and services (shopping cart and orders, sales, returns, refunds) | Performance of a contract between the client and the company |
| Payment transactions | Payment providers (Shopify Payments) use payment data to process each order. Data may also be used to prevent payment fraud or manage unpaid orders | Performance of a contract |
| Creation and management of customer account | Personal data (email, password) of registered users | Performance of a contract; compliance with legal obligations |
| Delivery of ordered products | Personal data (contact info, email) used to ensure delivery | Performance of a contract |
| Website administration and fraud prevention | Personal data (cookies) used to update and enhance the website and prevent online fraud | Legitimate interest |
| Customer service interactions | Personal data used to communicate with customers. Interactions by phone or chat may be recorded to improve service; users can object at any time | Performance of a contract |
| Participation in special events (competitions, draws, offers) and loyalty programs (excluding online gambling) | Personal and purchase data used to manage participation and loyalty program | Performance of a contract; legitimate interest |
| Product and service evaluation, improvement, and user experience profiling | Data used to improve products/services and customer experience through anonymized statistics and analytics | Legitimate interest |
| Sending newsletters and privileged offers (with consent) | Data used to inform customers about products and services and personalize social media content | Legitimate interest; consent |
| Fulfilling contractual obligations | Data used to inform customers and personalize social media content | Legitimate interest; consent |
| Website analytics, audience measurement, surveys, statistics, and user experience improvements | Personal data including cookies used to understand website/app usage | Legitimate interest |
ETCH does not share personal data for commercial purposes with third parties.
Users can modify their personal data and withdraw consent at any time by logging into their customer account.
4. Service Providers with Access to Personal Data
Personal data collected is shared with ETCH service providers, who may process data on behalf of ETCH (subcontractors) and/or for their own purposes (data recipients). Recipients include:
-
Shopify Payments (payment provider)
-
Law enforcement or administrative authorities for judicial requests related to fraud prevention
-
Customs services in case of international delivery
ETCH subcontractors may access collected data for:
-
Preparing, shipping, and returning orders
-
Improving website and mobile app content
-
Technical maintenance and development, including web hosting, email services, analytics, and tag management services such as Google Analytics
For more details on analytics services and opt-out options:
5. User Rights Regarding Personal Data
In accordance with Articles 14 to 22 of Regulation 2016/679, any individual using the ETCH website or mobile app can exercise the following rights:
-
Access, rectify, or delete collected data
-
Object to the processing of their data
-
Request restriction of processing
-
Data portability
-
Issue directives for posthumous data handling under Article 40-1 of Law 78-17 (January 6, 1978)
If a high-risk personal data breach occurs, ETCH will notify affected users promptly. Users can exercise these rights by logging into their account, contacting customer service at aymeric@etch-couteaux.com, or by mail to ETCH – 13 rue du Baigneur – 75018 Paris, France. A proof of identity must accompany all requests.
If unsatisfied, users may contact the relevant data protection authority. For France, this is the CNIL: https://www.cnil.fr/
6. Data Retention
User data will not be retained beyond the time necessary for the purposes outlined herein, in accordance with applicable laws. Marketing data may be retained for up to three years from account closure or last contact. Data may be archived beyond this period for research, legal evidence, or criminal investigations, but will be anonymized and stored securely offline.
7. Data Security Measures
As data controller, ETCH undertakes all necessary precautions to ensure the security and confidentiality of data, preventing unauthorized access or alteration. Service contracts are in place with partners experienced in data protection. Data is hosted in France or within the EU.
8. Payment Providers
Purchases on the website and mobile app are processed via Shopify Payments. ETCH does not access clients’ payment data.
9. Cookies, Tags, and Trackers
During navigation, information about the user’s device may be recorded through cookies. Cookies allow:
-
Measuring site and app traffic and content usage
-
Saving account information
-
Preserving the shopping cart for 30 minutes
-
Personalizing content display
Users can manage cookie preferences via their browser:
-
Safari: Apple Support
-
Chrome: Google Support
-
Firefox: Mozilla Support
-
Internet Explorer: Microsoft Support
-
iOS: Apple Support
Users can also opt out at Your Online Choices.
10. Social Media
ETCH official Facebook and Instagram accounts allow users to post content. Users should be aware that posted content may be visible to third parties, and caution is advised when sharing personal data. ETCH is not responsible for damages caused by third parties.
11. Links to Third-Party Sites
The website may contain links to third-party sites, apps, or services. ETCH is not responsible for their personal data practices. Users should consult the respective privacy policies.
12. Data Protection Officer
The ETCH Data Protection Officer ensures compliance with data protection laws, including maintaining a registry of personal data processing activities.