Staplerstop respects the privacy of individuals who visit and use www.staplerstop.com. This Privacy Policy explains what personal information may be collected, how it is used, how long it is retained, and the rights available to individuals under applicable data protection laws.
1. Data Controller
For personal data processed through www.staplerstop.com, the data controller is:
Brand: Staplerstop
Company: [XXX]
Email: supplies@staplerstop.com
Address: [XXX]
Telephone: [XXX]
Registration Number: [XXX]
2. Personal Information We Collect
Depending on how you use the website, we may collect information such as:
- Name and contact details;
- Billing and delivery information;
- Email address and telephone number;
- Order details and transaction information;
- Information provided when contacting us;
- Website usage information, including IP address and browser-related information where applicable;
- Cookie and similar information according to your selected preferences.
We only request information that is relevant to the purposes for which it is collected.
3. How We Use Personal Information
Personal information may be used to:
- Process and manage orders;
- Arrange order-related communications;
- Respond to enquiries and customer service requests;
- Maintain records relating to transactions;
- Meet applicable legal, accounting and regulatory obligations;
- Manage the operation of the website;
- Review website usage where permitted by applicable law and cookie preferences.
4. Payment Processing
Payments made through the website are processed by Stripe.
Stripe may process information required to complete and administer a payment, which may include payment details, billing information, transaction information, contact information and information relating to the transaction.
Stripe may process personal data in different capacities depending on the relevant processing activity. Where Stripe processes personal data on our behalf for payment-related services, it acts as a data processor. Stripe may also process certain information as an independent data controller for purposes described in its own privacy documentation, including matters relating to fraud prevention, regulatory obligations and the provision of its services.
Stripe’s own privacy practices are governed by its applicable privacy documentation.
5. Legal Grounds for Processing
Where applicable, personal data may be processed on the basis of:
- The performance of a contract or steps taken at the individual’s request before entering into a contract;
- Compliance with a legal obligation;
- Legitimate interests, where those interests are not overridden by the individual’s rights and interests;
- Consent, where consent is required by applicable law.
6. Data Retention
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal and regulatory requirements.
The following retention periods apply:
Customer and order information: retained for the duration of the customer relationship and thereafter for the period required for accounting, tax, contractual, legal or regulatory purposes.
Transaction and accounting records: retained for the period required by applicable French accounting, tax and other mandatory record-keeping requirements.
Customer service communications: generally retained for up to 3 years after the matter has been closed, unless a longer period is required for a legal obligation or the establishment, exercise or defence of legal claims.
Marketing information: retained until the individual withdraws consent or objects, where applicable, or for the period permitted by applicable law.
Website and technical logs: generally retained for a limited period appropriate to their operational purpose and applicable legal requirements.
When personal data is no longer required for its original purpose or a mandatory retention period has expired, it will be deleted, anonymised or otherwise handled in accordance with applicable law. The GDPR requires organisations to avoid retaining personal data for longer than necessary and to establish appropriate periods for deletion or review.
7. Sharing of Personal Information
Personal information may be disclosed where necessary to operate the website, process orders, provide requested services, comply with legal obligations or perform other legitimate business functions.
This may include service providers involved in payment processing, website operation, order administration, communications, accounting and related business activities.
Personal information is not sold as a commercial product.
8. International Data Transfers
Where personal information is transferred outside the European Economic Area, appropriate safeguards will be applied where required by applicable data protection law.
For information processed by Stripe, the applicable international transfer arrangements are determined under Stripe’s own legal and data protection framework. Stripe states that it participates in the EU-U.S. Data Privacy Framework and related frameworks.
9. Cookies
The website may use cookies and similar technologies for necessary website functions, preferences, analytics and other purposes permitted by applicable law.
Where consent is required, non-essential cookies will only be used in accordance with the applicable consent requirements.
Further information is provided in our Cookie Policy.
10. Data Protection Rights
Subject to applicable law, individuals may have rights including:
- Access to their personal data;
- Correction of inaccurate or incomplete information;
- Erasure of personal data in applicable circumstances;
- Restriction of processing in applicable circumstances;
- Objection to certain processing;
- Data portability where applicable;
- Withdrawal of consent where processing is based on consent.
Requests concerning personal data may be submitted using the contact details provided above. Applicable rights may be subject to legal conditions or exceptions.
11. Data Protection
Personal information is handled according to applicable data protection requirements and appropriate organisational and operational measures. Access to personal information is limited according to the relevant business purpose.
No method of transmitting or storing information can be treated as entirely free from risk; accordingly, personal information is handled in accordance with applicable legal and organisational requirements.
12. Changes to This Privacy Policy
This Privacy Policy may be updated when necessary to reflect changes to the website, business practices or applicable legal requirements.
The latest version will be published on www.staplerstop.com with its effective date.
13. Contact
For privacy-related enquiries or requests concerning personal information, please contact:
Staplerstop
Company: [XXX]
Email: supplies@staplerstop.com
Address: [XXX]
Telephone: [XXX]
Registration Number: [XXX]