Privacy policy
This English version is provided for convenience. In the event of any discrepancy, the French version (Politique de confidentialité) prevails.
Last updated: 17 October 2026. This policy explains what personal data we collect on barware.fr, why, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
[To be completed: company name], [To be completed: legal form and share capital], [To be completed: registered address], [To be completed: SIREN / RCS number]. Contact: contact@barware.fr.
Data collected
- Orders: surname, first name, billing and delivery addresses, email, telephone, products ordered, amount, order history.
- Customer account: username, email, password (stored encrypted), saved addresses.
- Contact form: name, email and the content of your message.
- Browsing: cart, cookie preferences and, if you agree, audience measurement data.
Purposes and legal bases
- Processing and delivering orders, after-sales service, account management: performance of the contract.
- Invoicing and accounting: legal obligation.
- Replying to your messages: legitimate interest in replying to you.
- Audience measurement (Google Analytics): your consent, collected through the cookie banner.
We never send marketing emails without your prior consent.
Recipients
Your data is intended for the seller and, strictly as needed, for its service providers: the website host (Hostinger International Ltd, Cyprus), our suppliers and logistics providers who prepare and dispatch your order (name and delivery address), carriers, our payment provider (WooPayments, operated by Automattic with Stripe) for processing payments and preventing fraud and, if you agree, Google (Google Analytics) for audience measurement. Some providers may process data outside the European Union; these transfers are covered by the safeguards provided for by the GDPR (adequacy decision or standard contractual clauses of the European Commission). Your data is never sold.
Retention periods
- Order data and invoices: 10 years (accounting obligations, article L123-22 of the French Commercial Code).
- Customer account: until it is deleted, or 3 years after your last activity.
- Contact form messages: 3 years after the last exchange.
- Cookie choices: 6 months; audience measurement cookies: 13 months at most.
Cookies
A cookie is a small file placed on your device. Cookies that are essential for the website to work are placed without consent; the others are placed only with your agreement, which you can give, refuse or withdraw at any time using the “Manage cookies” link at the bottom of every page. Refusing does not prevent you from using the website.
- Essential: cart and checkout session (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*), account login (wordpress_logged_in_*), language (barware_langue, 1 year), cookie choices (barware_cookies, 6 months), secure payment and fraud prevention (__stripe_mid, 1 year; __stripe_sid, 30 minutes; set by Stripe).
- Audience measurement, subject to your consent: Google Analytics (_ga, _ga_*), 13 months at most, to measure traffic to the website and improve its content.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set instructions regarding what happens to it after your death. To exercise them, write to contact@barware.fr; proof of identity may be requested if there is any doubt about your identity. We reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Security
The website is served over HTTPS; passwords are encrypted and access to the administration is restricted. No bank card data is stored by barware.fr: it is entered in the secure module of our payment provider (Stripe, PCI DSS certified), which processes it directly.