1. Data controller
The data controller is Respectful Markets SAS, whose registered office is located at France (adresse du siège à finaliser). You can contact our Data Protection Officer (DPO) at dpo@respectfulmarkets.com.
2. Data collected
We collect the following categories of data:
- Identification: last name, first name, email, phone number, password (encrypted).
- Address: delivery and billing addresses.
- Sellers: bank account details, KYC documents, Kbis extract, VAT no..
- Transactional: orders, invoices, purchase history, reviews.
- Technical: IP address, browser type, cookie identifiers, pages visited.
- Communications: messages exchanged via support and internal messaging.
3. Purposes and legal bases
| Purpose | Legal basis | Retention period |
|---|---|---|
| User account management | Performance of the contract | 3 years after inactivity |
| Order processing | Performance of the contract | 10 years (accounting obligation) |
| Sending newsletters | Consent | Until consent is withdrawn |
| Fraud prevention | Legitimate interest | 5 years |
| Statistics and improvement | Legitimate interest / Consent | 13 months (cookies) |
| Legal obligations (KYC, tax) | Legal obligation | According to applicable law |
4. Data recipients
Your data may be shared with:
- The sellers concerned by your order (only the necessary data).
- Our sub-processors (hosting, Stripe payments, Resend email, carriers).
- The competent authorities upon lawful request.
5. Transfers outside the European Union
Certain subprocessors may be located outside the EU (e.g. the United States). In this case, transfers are governed by Standard Contractual Clauses of the European Commission or equivalent mechanisms.
6. Your rights
In accordance with the GDPR, you have the following rights:
- Right of access to your data.
- Right to rectification in the event of inaccuracy.
- Right to erasure ("right to be forgotten").
- Right to restriction of processing.
- Right to data portability.
- Right to object, in particular to profiling and marketing.
- Right to withdraw your consent at any time.
- Right to define instructions regarding what happens to your data after your death.
To exercise these rights, contact us at dpo@respectfulmarkets.com and attach proof of identity. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
7. Security
We implement appropriate technical and organizational measures to protect your data: TLS encryption, password hashing (bcrypt), access control, logging, regular backups.
8. Cookies
The use of cookies is detailed in our Cookie Policy. You can change your preferences at any time from the dedicated banner.
9. Minors
The Platform's services are not intended for persons under 15 years of age. If you are a parent and believe your child has provided us with data, contact us for deletion.
For any questions regarding your personal data: dpo@respectfulmarkets.com