Privacy policy
Last updated: October 2026.
1. Data controller
The personal data collected on the lesboxdebacchus.com website is processed by Les Box de Bacchus, SARL, 185 rue du Néolithique – 62250 Marquise – France, RCS Boulogne-sur-Mer 952 150 944, represented by its managing director Irma Belkessa. Contact for any data-related question: contact@lesboxdebacchus.com.
2. Data collected
| When | Data | Nature |
|---|---|---|
| Customer account creation | surname, first name, email, password (encrypted), phone, date of birth | required |
| Order | billing and delivery addresses, products ordered, amount, purchase history | required |
| Payment | bank card details, entered only on Up2Pay's secure page; never stored by Les Box de Bacchus | required |
| Newsletter | email address | optional, with consent |
| Customer service | content of exchanges by email or phone | depending on the request |
| Browsing | IP address, pages viewed, device and browser type, cookies | see section 9 |
The date of birth is used solely to verify that the customer is of legal age, a legal obligation for the sale of alcohol.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Management of the account, orders and deliveries | performance of the contract |
| Invoicing and accounting | legal obligation |
| Verification of legal age | legal obligation (French Public Health Code, Code de la santé publique) |
| Customer service and after-sales follow-up | performance of the contract |
| Sending commercial offers and newsletters | consent (withdrawable at any time); legitimate interest for offers on similar products sent to customers, with the option to object to each mailing |
| Payment fraud prevention | legitimate interest |
| Audience measurement and advertising (Google Analytics, Google Ads) | consent (cookies) |
| Site improvement and internal statistics | legitimate interest |
| Management of box subscriptions (instalments, recurring debits, cancellation) | performance of the contract |
No fully automated decision producing legal effects is taken on the basis of your data.
4. Retention periods
| Data | Duration |
|---|---|
| Customer account and purchase history | 3 years after the last order or last contact, then deletion or anonymisation |
| Invoices and accounting records | 10 years (legal obligation), in a separate archive |
| Newsletter subscription | until unsubscribing, or 3 years without opening an email |
| Exchanges with customer service | 3 years |
| Proof of cookie consent | 6 months |
| Cookies and trackers | 13 months maximum; audience measurement data 25 months maximum |
| Connection logs (server logs) | 1 year (legal obligation) |
5. Recipients and processors
Your data is neither sold nor rented. It is accessible to authorised Les Box de Bacchus staff and passed on only to the necessary service providers, each acting on our instructions:
| Provider | Role | Data location |
|---|---|---|
| Numericu SAS (Ajaccio) | hosting, development and maintenance of the site and its database | France (Scaleway servers) |
| Up2Pay – Crédit Agricole | secure payment | France |
| Boxtal and partner carriers | shipping and delivery | France / destination country |
| Brevo | sending newsletters and transactional emails | European Union (France) |
| Google LLC (Analytics, Ads, Merchant) | audience measurement, advertising, catalogue distribution | United States |
Transfers outside the European Union (Google) are based on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.
Your data may also be disclosed to the authorities where required by law.
6. Your rights
In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:
- right of access to your data and to obtain a copy;
- right of rectification;
- right to erasure, subject to legal retention obligations;
- right to restriction of processing;
- right to portability of the data you have provided to us;
- right to object, in particular to direct marketing, at any time and without giving a reason;
- right to withdraw your consent at any time, without affecting previous processing;
- right to define directives on the fate of your data after your death.
To exercise them: contact@lesboxdebacchus.com or by post to the registered office, enclosing proof of identity if necessary. We reply within one month. You can also change your data and newsletter choices from your customer account.
You may lodge a complaint with the CNIL: www.cnil.fr – 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
7. Security
Les Box de Bacchus and its host implement appropriate technical and organisational measures: encryption of exchanges (HTTPS/TLS), passwords stored in hashed form, data access limited to authorised persons, regular backups, servers located in France. Payment data never passes through our servers.
In the event of a data breach likely to result in a high risk to your rights, you will be informed as soon as possible.
8. Minors
The site is reserved for adults. No data is knowingly collected from minors; any account identified as belonging to a minor is deleted.
9. Cookies
A cookie is a small file placed on your device when you browse the site.
| Category | Examples | Consent |
|---|---|---|
| Strictly necessary | session, basket, authentication, cookie choices, payment security | not required |
| Audience measurement | Google Analytics | required |
| Advertising and personalisation | Google Ads, remarketing | required |
On your first visit, a banner allows you to accept, refuse or customise non-essential cookies. Refusing is as easy as accepting. Your choice is kept for 6 months and can be changed at any time via the "Manage cookies" link in the footer. No non-essential cookie is placed before your agreement.
You can also set your browser to block cookies; some site features (basket, login) may then no longer work.
10. Changes to this policy
This policy may be updated to reflect changes to the site, our service providers or the regulations. The date of the last update appears at the top of the page; any substantial change is flagged on the site or by email.
11. Contact
contact@lesboxdebacchus.com – +33 9 79 07 87 25 – Les Box de Bacchus, 185 rue du Néolithique, 62250 Marquise, France.