Privacy Policy
Last updated: August 1, 2026 — In compliance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).
1. Who processes your data?
The data controller is:
Sole proprietorship
500 quai Pierre Dupont, 69270 Rochetaillée-sur-Saône, France
SIRET 989 751 516 00018
contact@forjsport.fr
For any questions regarding your personal data, please write to this address.
2. What data do we collect?
| Category | Data concerned |
|---|---|
| Identification | Last name, first name, email address, phone number |
| Shipping & billing | Postal address, postal code, city, country |
| Order | Purchase history, amounts, ordered products |
| Payment | Processed exclusively by our provider. We do not store any banking data. |
| Navigation | IP address, browser type, pages viewed, visit duration |
| Communication | Content of messages sent via the contact form |
3. Why and on what basis?
| Purpose | Legal basis | Retention |
|---|---|---|
| Process and deliver your orders | Contract performance | 3 years after the last order |
| Accounting and tax obligations | Legal obligation | 10 years |
| Respond to your requests | Legitimate interest | 3 years after the last contact |
| Newsletter delivery | Consent | Until consent is withdrawn |
| Audience measurement and site improvement | Consent (cookies) | Maximum 13 months |
| Fraud prevention | Legitimate interest | Duration necessary for the purpose |
4. Who has access to your data?
Your data is never sold. It is only transmitted to recipients necessary for the performance of the service:
- Shopify — store hosting and order processing
- Payment providers — securing and processing transactions
- Suppliers and carriers — preparation and delivery of your package (name, address, phone number)
- Emailing tools — sending order confirmations and newsletters
- Competent authorities — upon legal requisition only
5. Transfers outside the European Union
Some of our service providers and suppliers are located outside the European Union. These transfers are governed by the guarantees provided by the GDPR: standard contractual clauses of the European Commission, or an adequacy decision.
6. Your rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights:
- Right of access — obtain a copy of your data
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure — request the deletion of your data
- Right to restriction of processing — freeze the use of your data
- Right to data portability — retrieve your data in a reusable format
- Right to object — object to processing based on legitimate interest
- Right to withdraw your consent — at any time, without affecting the lawfulness of previous processing
- Post-mortem directives — define the fate of your data after your death
To exercise your rights: write to contact@forjsport.fr specifying the purpose of your request. You may be asked for proof of identity. We will respond within a maximum of one month.
7. Complaints
If you believe, after contacting us, that your rights are not being respected, you can file a complaint with the CNIL:
CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr
8. Security
We implement appropriate technical and organizational measures to protect your data: encryption of exchanges (HTTPS/TLS), restricted access to authorized personnel, hosting on a PCI-DSS certified infrastructure.
9. Minors
The site is not intended for individuals under 15 years of age. We do not knowingly collect data about minors without the consent of the parental authority holder.
10. Modifications
This policy may be modified to reflect legal or technical changes. The date of the last update is at the top of this page.