Privacy policy
Last updated: 11 October 2026
In accordance with the amended Act No. 78-17 of 6 January 1978 and the European Union General Data Protection Regulation (GDPR), the party responsible for the collection, processing and use of personal data is EDEN BOITES / E-BOITES (hereinafter "EDEN BOITES"). EDEN BOITES's contact details are available on the "Legal Notice" page of the Site.
For any question or request regarding the protection of personal data processed by EDEN BOITES, the data protection contact can be reached by e-mail at info@eden-boites.com or by post at the following address: EDEN BOITES, Data Protection Contact, 8 avenue Saint-Jean, 06400 Cannes (France).
Data processing carried out by EDEN BOITES
1. Quote requests / callback requests
The data processed are: part, type of gearbox, make, model, serial number, registration, reference, name, address, e-mail, telephone, attachments, source of enquiry, description of the request and any other information provided voluntarily, quote number.
Purposes:
- responding to the user's quote request;
- carrying out commercial prospecting by e-mail and SMS if the user consents.
This processing is based on the performance of pre-contractual measures taken at the user's request (Article 6.1(b) of the GDPR) for responding to the quote request; and on the person's consent (Article 6.1(a) of the GDPR) for commercial prospecting. Refusing or objecting to this processing will prevent any response to the person's request.
Retention: held in active records for the duration of the exchanges, then for one (1) year from the person's last communication. Where the person has consented to being contacted for prospecting purposes, data are retained until consent is withdrawn, or for three (3) years from the last contact or communication. The person may withdraw their consent at any time via the procedure provided in prospecting communications.
Sending your quote via WhatsApp. When you provide us with a mobile phone number, we may send you your quote and answer your questions via WhatsApp, a service provided by Meta Platforms Ireland Ltd. Only your phone number and the information relating to your quote are used for this purpose. Initial responses may be provided by a virtual assistant; a member of our team can take over if needed. You may reply "STOP" at any time to stop receiving messages from us on WhatsApp.
2. Creating and managing your customer account
The data processed are: e-mail, password, surname, first name, username, saved payment methods, order history, billing and delivery addresses, comments.
Purposes:
- creating a customer account for the user;
- saving preferred payment methods;
- saving billing and delivery addresses;
- providing access to order history and documents (invoices);
- managing reviews and comments posted by the person on the Site;
- commercial prospecting by e-mail and SMS if the user consents.
This processing is necessary for the performance of a contract or pre-contractual measures (Article 6.1(b) of the GDPR). For the management of reviews and comments, the processing is based on the legitimate interests of EDEN BOITES (Article 6.1(f) of the GDPR): the person can reasonably expect their username and comments to be processed for publication on the Site. Commercial prospecting is based on the person's consent (Article 6.1(a) of the GDPR).
Retention: three (3) years from the user's last interaction with their customer account (login, update, order, etc.). For commercial prospecting, data are retained until consent is withdrawn, or for three (3) years from the last contact or communication.
3. Orders
The data processed are: e-mail, telephone, first name, surname, company name, address, registration, source of enquiry, comments, payment method, order contents, price, version of the Terms and Conditions accepted and timestamp, correspondence with the customer, quote number, order number, tracking number, product references.
Purposes:
- processing the order;
- optionally saving the customer's preferred payment methods;
- managing debt recovery (for payments in instalments);
- compliance with legal and regulatory obligations (accounting);
- commercial prospecting by e-mail and SMS if the user consents, or if the person has previously placed an order with EDEN BOITES for similar products.
This processing is necessary for the performance of the order (Article 6.1(b) of the GDPR) and for compliance with EDEN BOITES's accounting obligations (Article 6.1(c) of the GDPR). Saving payment methods is optional and based on the person's consent (Article 6.1(a) of the GDPR). Commercial prospecting by e-mail and SMS is based, depending on the circumstances, on the person's consent (Article 6.1(a) of the GDPR) or on the legitimate interests of EDEN BOITES (Article 6.1(f) of the GDPR) where the person has not consented but has previously ordered a similar product.
Retention: held in active records for one (1) year from the delivery date, then archived for a further four (4) years for evidentiary purposes. By exception, invoices and other accounting documents are retained for ten (10) years from their date of issue in accordance with accounting obligations. Where payment card details are optionally saved, they are retained until consent is withdrawn or until the card expires; the person may delete them from their customer account under the "Payment Methods" tab.
4. Customer reviews and satisfaction surveys
Following their order, the person may optionally respond to customer review requests and satisfaction surveys, on the basis of EDEN BOITES's legitimate interest in improving its products and services (Article 6.1(f) of the GDPR). Responding is optional: the person may object at any time to receiving such requests by following the unsubscribe procedure included in each message, or by writing to info@eden-boites.com. Data relating to reviews are retained until the right to object or erasure is exercised.
5. Browsing, audience measurement and technical data
When you browse the Site, certain technical data are collected automatically, where applicable via cookies and similar technologies: IP address, connection and device identifiers, browser type, pages visited, and data relating to your interaction with the Site.
Purposes: ensuring the proper functioning and security of the Site, carrying out audience measurement, and, subject to your consent, showing you personalised advertisements. The legal basis is the legitimate interests of EDEN BOITES (Article 6.1(f) of the GDPR) for the operation, security and audience measurement of the Site, and your consent (Article 6.1(a) of the GDPR) for non-essential trackers and targeted advertising. The lifespan of trackers placed is limited to thirteen (13) months and the information collected via these trackers is retained for a maximum of twenty-five (25) months. See the "Cookies" section below.
Opposition to telephone canvassing (BLOCTEL)
Consumer customers are informed that they have the right to register free of charge on the BLOCTEL telephone canvassing opt-out list. To register or find out more, please visit www.bloctel.gouv.fr.
Hosting and subcontracting
The Site is hosted and powered by the Shopify platform (Shopify International Limited, Ireland, and Shopify Inc., Canada). In this context, Shopify processes personal data on behalf of EDEN BOITES, acting as a data processor, in order to provide and secure the Services (hosting, payment processing, audience measurement, fraud prevention). For certain enhanced features (including personalised advertising and Shopify Network Intelligence), Shopify may act as a data controller. To find out more and to exercise your rights with Shopify, please visit the Shopify privacy portal: privacy.shopify.com/fr.
Access to personal data is strictly limited to authorised employees and staff of EDEN BOITES who are bound by a confidentiality obligation. Data may also be shared with EDEN BOITES's subcontractors: the hosting provider and platform (Shopify), payment service providers, carriers responsible for delivering orders, IT maintenance providers, marketing, e-mailing and audience measurement tools, and the WhatsApp messaging service (Meta Platforms Ireland Ltd) for sending quotes and communicating with customers who have provided us with a mobile number. In the course of their services, these subcontractors have only limited access to data and a contractual obligation to process it in accordance with applicable regulations. Outside the cases set out above, EDEN BOITES undertakes not to sell, rent, transfer or grant access to your data to third parties without your prior consent, except on legitimate grounds (legal obligation, fraud prevention, exercise of rights of defence, etc.).
Transfers of data outside the European Union
Some of our subcontractors, including Shopify, may process your data outside the European Economic Area (EEA). In such cases, EDEN BOITES ensures that the transfer is governed by a recognised mechanism offering an adequate level of protection: an adequacy decision by the European Commission, standard contractual clauses issued by the European Commission, or any other applicable framework such as the EU–US Data Privacy Framework.
Cookies
Cookies and trackers are placed in order to ensure the proper functioning and security of the Site, to carry out audience measurement and, subject to your consent, to show you personalised advertisements based on your interests. Non-essential cookies are only placed after your consent has been collected via the consent banner displayed on your first visit. You may modify or withdraw your choices at any time by reopening the preferences manager from this banner. The lifespan of trackers placed is limited to thirteen (13) months and the information collected via these trackers is retained for a maximum of twenty-five (25) months.
Children's data
The Site is not intended for minors and EDEN BOITES does not knowingly collect personal data relating to persons who have not reached the age of majority, nor does it "share" or "sell" data relating to persons under the age of sixteen (16). If you are the parent or guardian of a minor who has provided us with their data, you may contact us at info@eden-boites.com to request its deletion.
Your rights
In accordance with Articles 12 to 22 of the GDPR, you have the following rights regarding your data: the right of access, the right to rectification and updating, the right to object, the right to erasure, the right to restriction of processing, the right to data portability, and the right to withdraw consent where it has been given.
Requests may be submitted electronically to info@eden-boites.com, unless you prefer another means of communication. EDEN BOITES will respond within a maximum of one (1) month of receiving the request; this period may be extended to three (3) months depending on the complexity and number of requests.
Data security
The transmission of personal data does not rule out the possibility of a breach or unlawful access. Nevertheless, throughout the data retention period, EDEN BOITES implements the organisational, software, legal, technical and physical measures necessary to ensure the confidentiality and security of the data processed, so as to prevent it from being damaged, deleted or accessed by unauthorised third parties. In accordance with Article 5 of the GDPR, the data collected and processed are proportionate, relevant and limited to what is necessary for the purposes pursued.
Complaints to the CNIL
You have the right to lodge any complaint relating to the processing of your data with the Commission Nationale de l'Informatique et des Libertés (CNIL), online at www.cnil.fr or by post:
Commission Nationale de l'Informatique et des Libertés
3 place de Fontenoy – TSA 80715
75334 Paris Cedex 07
Changes to this policy
EDEN BOITES may update this Privacy Policy at any time, in particular to reflect changes in its practices or in the applicable legal and regulatory framework. The revised version is published on the Site and the "Last updated" date at the top of the document is updated accordingly. We encourage you to check this page regularly.
