Privacy Policy
This is an English translation; in case of discrepancy the French version prevails. French version
1. Data controller
The controller of your personal data is Carry Box, reachable at contact@carrybox.fr.
2. Data collected
Orders: name, delivery and billing address, e-mail, phone, basket contents (processed via Shopify).
Payment: card data is processed directly by Shopify Payments / Stripe; we never store it.
Customer account and reviews: e-mail, encrypted password, published reviews.
Contact and chatbot: messages you send us by e-mail or through the site chatbot.
Statistics: pages viewed, traffic source, anonymised technical data (Google Analytics, Search Console).
3. Legal bases
Performance of the contract (orders, delivery, after-sales), legal obligation (keeping invoices for 10 years), legitimate interest (site security, fraud prevention) and consent (analytics and marketing cookies, newsletter).
4. Recipients and processors
Shopify (e-commerce and payment), our database and server provider (EU), Lovable (hosting), Google (Analytics, Search Console, Gemini for the AI chatbot) and carriers for delivery. Transfers outside the EU are covered by standard contractual clauses or adequacy decisions.
5. Retention
Orders and invoices: 10 years. Customer account: until deletion plus 3 years of inactivity. Reviews: while the product is online. Analytics cookies: 13 months maximum. Chatbot and support messages: 12 months.
6. Your rights
You have the right to access, rectify and erase your data, to restrict and object to processing, to data portability, to set post-mortem instructions and to withdraw consent at any time. Write to contact@carrybox.fr. You may also lodge a complaint with the CNIL (www.cnil.fr) or your local data protection authority.
7. Cookies
The site uses strictly necessary cookies (basket, session, authentication) and, subject to your consent, analytics cookies (Google Analytics) and, where applicable, advertising cookies.
8. Security
We use appropriate technical and organisational measures (HTTPS, password encryption, access control) to protect your data.
9. Contact
For any question about this policy: contact@carrybox.fr.