Privacy Policy

1. Data controller

The controller of the data collected on the site vesxpress.com is VESXPRESS, whose registered office is located at 46 CLOS SAINT-CORNEILLE, 60410 VERBERIE, FRANCE. For any question relating to your personal data, you can write to us at contact@vesxpress.com.

2. Personal data collected

We collect only the data strictly necessary for the purposes described below:

• Identification and contact details: surname, first name, postal address, e-mail address, telephone number.
• Order data: products purchased, amount, order history, delivery and billing address.
• Payment data: processed exclusively by our banking provider; we never keep your full bank card number.
• Browsing data: IP address, browser type, operating system, pages viewed, duration of visit, traffic source.
• Marketing data: e-mail address and consent, when you subscribe to our newsletter.

3. Purposes and legal bases

4. Retention periods

• Customer account data: for the duration of the commercial relationship, then 3 years from the last purchase.
• Accounting documents and invoices: 10 years, in accordance with the French Commercial Code.
• Marketing data: 3 years from the last contact or until consent is withdrawn.
• Cookies and browsing data: 13 months maximum.

5. Recipients of the data

Your data may be transmitted to the following categories of recipients, to the extent necessary:

• Our carriers and logistics providers, for delivery.
• Our payment provider and our bank, for securing transactions.
• Our host and our technical providers, for the hosting and maintenance of the site.
• Our audience measurement and e-mailing tool, for analysis and communication.
• Administrative or judicial authorities, where required by law.

No data is sold or rented to third parties.

6. Transfers outside the European Union

Some of our providers may be established outside the European Union. In that case, the transfer is governed by appropriate safeguards (standard contractual clauses of the European Commission) or by an adequacy decision.

7. Your rights

In accordance with the GDPR (RGPD) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:

• Right of access to your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure (right to be forgotten), subject to our legal retention obligations.
• Right to restriction of processing.
• Right to object, in particular to processing for commercial prospecting purposes.
• Right to portability of your data.
• Right to withdraw your consent at any time.
• Right to define directives concerning the fate of your data after your death.

To exercise these rights, write to us at contact@vesxpress.com. A reply will be provided to you within one month. You may also lodge a complaint with the CNIL (French Data Protection Authority) (www.cnil.fr).

8. Cookies and trackers

The site uses cookies necessary for its operation (basket, session, security) and, with your consent, cookies for audience measurement and advertising personalisation. You may change your choices at any time via the cookie banner or your browser settings. Refusing non-essential cookies does not prevent browsing or ordering.

9. Security

We implement appropriate technical and organisational measures to protect your data: encryption of exchanges via HTTPS/TLS, access control, regular backups, awareness-raising of authorised persons. In the event of a data breach likely to result in a high risk to your rights, you will be informed as soon as possible.

10. Minors

The site is not intended for persons under 16 years of age. We do not knowingly collect data concerning minors without the consent of the holder of parental authority.

11. Amendment of this policy

This policy may be updated to take account of changes in our services or in the regulations. The applicable version is the one published on this page, whose update date appears at the top of the document.