Last updated: 19 October 2026
This English version is provided for convenience. In the event of any discrepancy, the French version prevails.
This policy explains what personal data Globtrott Retails collects, why, how long it is kept and what your rights are. It has been drawn up in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the General Data Protection Regulation, “GDPR”) and French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties (Loi Informatique et Libertés).
Data controller
GLOBTROTT RETAILS33 rue Carnot, 78955 Carrières-sous-Poissy, France
Contact for your personal data: contact@globtrottretails.fr
Principle: limited data collection
We collect only the data necessary to process your orders and requests. The website does not offer customer accounts or a newsletter. It does not use any advertising cookies or audience measurement.
Mandatory fields are indicated in the forms. Without this information, we cannot process your order or your request.
Data collected, purposes and legal bases
| Purpose | Data concerned | Legal basis | Retention period |
|---|---|---|---|
| Processing, delivery and tracking of orders; order-related customer service | Surname, first name, email, telephone, delivery and billing addresses, chosen pickup point, contents and amount of the order | Performance of the contract (Art. 6(1)(b) GDPR) | 10 years from the order (accounting obligation, Article L123-22 of the French Commercial Code [Code de commerce]) |
| Invoicing and accounting | Identity, billing address, details and amount of the order, payment status and reference | Legal obligation (Art. 6(1)(c) GDPR) | 10 years (Article L123-22 of the French Commercial Code) |
| Payment and fraud prevention | Transaction status and reference; card data are processed exclusively by Stripe | Performance of the contract; legitimate interest in preventing fraud (Art. 6(1)(b) and 6(1)(f) GDPR) | Kept with the order file (10 years) |
| Handling of withdrawals, returns and legal guarantees | Name, email, order number, date and time of the request, products concerned, correspondence | Legal obligation (Art. 6(1)(c) GDPR) | Kept with the order file (10 years) |
| Replying to messages (contact form, email) | Name, email, order number (if any), content of the message | Legitimate interest in replying to your requests (Art. 6(1)(f) GDPR) | 3 years from the last exchange |
| Website security and prevention of abuse | Technical connection data (IP address, date and time, pages requested), session security token | Legitimate interest in securing the website (Art. 6(1)(f) GDPR) | Duration of the session for the cookie; a maximum of 12 months for technical logs |
| Establishment, exercise or defence of our rights in the event of a dispute | Order data and correspondence relevant to the dispute | Legitimate interest (Art. 6(1)(f) GDPR) | Until the applicable limitation periods have expired |
When these periods expire, the data are deleted or anonymised.
Payment data
Payment is made on a page hosted by Stripe. Globtrott Retails never sees or stores your bank card numbers. We receive only the payment confirmation and limited information about the transaction (amount, reference, status, type of payment method).
Recipients of the data
Your data are processed by authorised Globtrott Retails staff. They are disclosed, strictly to the extent necessary, to the following recipients:
- Stripe, our payment service provider, to process the payment and prevent fraud. For certain purposes (fraud prevention, regulatory obligations), Stripe acts as a separate data controller, in accordance with its own privacy policy;
- carriers, depending on the delivery method chosen: Mondial Relay, La Poste (Colissimo), Chronopost, as well as our shipping platform Sendcloud (Sendcloud B.V., Netherlands), used to choose the pickup point and create Mondial Relay labels. They receive your name, address or pickup point, email and telephone number in order to deliver the parcel and notify you of its delivery;
- our hosting provider, Hostinger International Ltd, which hosts the website and its data;
- our email service provider, for sending emails relating to your order and your requests;
- where applicable, our advisers (chartered accountant, lawyer), who are bound by professional secrecy, the consumer mediator if you refer a dispute to them, and administrative or judicial authorities upon lawful request.
We do not sell or rent your data.
Transfers outside the European Union
Some service providers, in particular Stripe, may transfer data to countries outside the European Union, notably the United States. These transfers are subject to the safeguards provided for by the GDPR, such as an adequacy decision of the European Commission or standard contractual clauses.
Direct marketing
We do not use your data for direct marketing purposes without your prior consent. No newsletter is offered at present.
Telephone number and cold calling
Your telephone number is requested solely for delivery purposes (notifications from the carrier) and, if necessary, to contact you about your order.
In accordance with Article L223-2 of the French Consumer Code (Code de la consommation), you may register free of charge on the Bloctel telephone preference list to opt out of cold calling (www.bloctel.gouv.fr).
Security
The website is accessible exclusively via an encrypted connection (HTTPS). Access to data is limited to the people who need it. Forms are protected against fraudulent submissions.
Automated decision-making
Globtrott Retails does not take any decision based solely on automated processing. However, Stripe may automatically analyse a transaction in order to prevent fraud and, where appropriate, decline a payment. In that case, you may contact us.
Your rights
You have the following rights over your data:
- right of access;
- right to rectification;
- right to erasure, within the limits of our legal retention obligations;
- right to restriction of processing;
- right to object to processing based on our legitimate interest;
- right to portability of the data you have provided to us;
- right to set guidelines regarding what happens to your data after your death.
To exercise these rights, write to us at contact@globtrottretails.fr or use the contact form. We may ask you to prove your identity if there is reasonable doubt. We will reply within one month, which may be extended by two months for complex requests; in that case, you will be informed.
If you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL): www.cnil.fr.
Cookies
The website uses only one technical cookie that is necessary for it to function. Full details are provided in our cookie policy.
Changes to this policy
This policy may be updated, in particular to reflect changes to our services or to the regulations. The date of the last update is shown at the top of the page.