At ApéroBeauf, we take your personal data as seriously as your apéro. This page explains what we collect, why, for how long, and most importantly your rights.
1. Data controller
The data controller for personal data collected on this site is:
Ohorizon Trade Company (trading as ApéroBeauf)
SAS with €50.00 share capital — RCS Paris 990 265 209
Registered office: 149 avenue du Maine, 75014 Paris, France
Email: contact@aperobeauf.com
Phone: +33 (0)6 46 68 78 73
2. Data collected and purposes
We only collect personal data in the following cases:
| When? | Data collected | Why? | Legal basis |
|---|---|---|---|
| You submit the contact form | Name, email, subject, message | To reply to you | Consent |
| You place an order | Name, email, shipping address, phone, payment info | To process and ship your order | Contract performance |
| You sign up for the newsletter (if enabled) | Email + name (optional) | To send you news and promotions | Consent |
| You browse the site | Technical data (IP, browser, pages visited) — anonymized | Statistics + security | Legitimate interest |
3. Retention period
| Data type | Duration |
|---|---|
| Order data (invoices) | 10 years (accounting obligation) |
| Active customer data (account) | 3 years after last interaction |
| Newsletter | Until unsubscription |
| Contact form | 1 year after last exchange |
| Browsing logs | 13 months (anonymized) |
| Non-essential cookies | 13 months max (GDPR) |
4. Recipients and processors
Your data is only shared with providers necessary for the site to function:
| Provider | Role | Data shared |
|---|---|---|
| Netlify, Inc. (USA) | Website hosting | Anonymized technical data |
| OVHcloud (France) | Domain registrar | No customer data |
| Shopify Payments & PayPal (Ireland / Canada) | Online payment | Email, payment IDs (stored by Shopify / PayPal, not us) |
| Partner suppliers (China via AliExpress) | Order preparation and shipping | Name, shipping address, phone, email |
Transfer outside EU: some of our processors (Netlify, Shopify, PayPal, partner suppliers) are located outside the European Union. We ensure these transfers comply with GDPR requirements (standard contractual clauses, adequacy decisions, or explicit consent).
5. Cookies
Current state: the site does not use non-essential tracking cookies (no analytics, no Facebook Pixel, no ads).
If we enable analytics (Google Analytics, Plausible…) or advertising cookies in the future, a consent banner will be displayed to let you accept or refuse them case by case.
Essential technical cookies
Only cookies strictly necessary for the site's functioning are used (e.g. cart, session).
6. Your GDPR rights
Under GDPR, you have the following rights regarding your data:
- Right of access: obtain a copy of the data we hold about you
- Right of rectification: correct inaccurate data
- Right to erasure ("right to be forgotten"): delete your data
- Right to object: refuse certain processing (e.g. marketing)
- Right to restriction: temporarily suspend processing
- Right to portability: retrieve your data in a reusable format
- Right to withdraw consent at any time
To exercise these rights, email us at contact@aperobeauf.com with a copy of an ID (to prevent identity theft). We reply within 30 days maximum.
7. Security
We implement technical and organizational measures to protect your data:
- HTTPS across the entire site (encrypted exchanges)
- Secure hosting (Netlify, ISO 27001 and SOC 2 certified)
- Secure payments via Shopify Payments and PayPal (PCI-DSS Level 1 certified)
- No local storage of card data (fully managed by Shopify / PayPal)
- Data access limited to authorized personnel only
8. Complaint to the CNIL
If you believe your rights are not respected, you may file a complaint with the French data protection authority:
CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Phone: +33 1 53 73 22 22
Website: www.cnil.fr
Last updated: May 23, 2026
This policy may be modified at any time. The online version prevails.