Privacy & Cookies

1. Introduction

FCH (« we », « our ») is committed to protecting the privacy of users of its online sales site. This page describes how we collect, use and protect your personal data, as well as the use of cookies on our site, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (« Informatique et Libertés »).

2. Data controller

The data controller is FCH, a company offering comfort and home equipment products. For any questions regarding your data or this policy, you can contact us via the Contact.

3. Personal data collected

In the context of using our site and our online sales services, we may collect the following data:

• Identification and contact : name, email address, phone number, postal address (delivery and billing).
• Order and payment data : order history, invoice references, information necessary for payment processing (secure sub-contractor). We do not store full card numbers.
• Connection and browsing data : IP address, browser type, pages visited, timestamp, session identifiers (including via cookies, see Cookies section).
• User account data : if you create an account, the information you provide (name, email, hashed password) and associated preferences.

4. Purposes and legal bases

Your data is used for the following purposes, on the legal bases indicated:

• Order fulfilment : order processing, delivery, invoicing, after-sales support (basis: contract performance).
• Account management and authentication : creation and securing of your customer area (basis: contract performance).
• Communication and support : responses to your requests via the contact form or by email (basis: legitimate interest / contract performance).
• Marketing : sending newsletters or offers only with your explicit consent (basis: consent).
• Site improvement and statistics : usage analysis (aggregated or pseudonymised data) to improve our services (basis: consent for non-strictly necessary cookies).
• Security and compliance : fraud prevention, compliance with legal obligations (basis: legitimate interest / legal obligation).

5. Retention period

We retain your data for the period strictly necessary for the purposes described above, then in accordance with legal obligations (including accounting and tax):

• Order and billing data : financial data (amounts, VAT, references) is retained for 10 years in accordance with the French Commercial Code (Art. L123-22). Associated personal data (names, addresses) is anonymised after this period.
• Account data : retained while the account is active. If the account is deleted by the user, personal data is erased immediately (order data is anonymised, in accordance with accounting obligations). In case of prolonged inactivity (no login or order for 3 years), the account may be deleted in accordance with CNIL recommendations.
• Sessions and verification tokens : automatically deleted upon expiry (sessions: 7 days; verification tokens: according to their validity period). Daily automatic cleanup is performed.
• Marketing data : until withdrawal of your consent or your objection.
• Cookies : see the table in the Cookies section below. The maximum duration of consent cookies is 12 months, in accordance with CNIL recommendations.

6. Data recipients

Your data may be shared with authorised internal services of FCH, as well as with technical service providers (hosting, payment processing, email sending, delivery) within the strict scope of their missions and under contracts guaranteeing confidentiality and security. We do not sell your data to third parties for commercial purposes.

7. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access : obtain a copy of data concerning you.
• Right to rectification : have inaccurate or incomplete data corrected.
• Right to erasure : request deletion of your data within the limits provided by law.
• Right to restriction of processing : request restriction in certain cases.
• Right to data portability : receive your data in a structured, commonly used format.
• Right to object : object to processing based on legitimate interest or to marketing.
• Withdrawal of consent : when processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

You can exercise some of these rights directly from your customer area: data download (portability) and account deletion (erasure) are available in the « My data and rights » section of your profile. For other rights or any specific request, contact us via the Contact page. You also have the right to lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés): www.cnil.fr.

8. Use of cookies

Our site uses cookies and similar technologies to ensure the proper functioning of the site, remember your preferences and, with your consent, analyse site usage. You can modify your choices at any time via the banner or cookie settings (« Manage cookies » link in the footer).

Types of cookies used

You can accept all cookies, accept only essential cookies, or customise your choices at any time by clicking « Manage cookies » in the footer or by accessing this section and using the settings offered on the site.

9. Data security

We implement appropriate technical and organisational measures (restricted access, encryption where relevant, secure hosting) to protect your data against any unauthorised access, loss or alteration.

10. Changes to this policy

We reserve the right to adapt this privacy and cookie policy in line with legislative changes or our practices. The last update date is shown at the top of the page. We invite you to consult it regularly.

11. Contact us

For any questions regarding the protection of your personal data or the use of cookies, you can contact us via our Contact page.