Privacy policy
Last updated: 27 October 2026.
This page explains what personal data we collect on microbrassage.com, why, how long we keep it, who we share it with and how to exercise your rights.
Data controller
SARL Canard Rouge, 4 rue Sépat, ZAC Sépat, 82370 Campsas, France – RCS Montauban 823 817 895.
Telephone: +33 (0)7 45 13 57 35 – Email: contact@canardrouge.com
Data collected, purposes and retention periods
| Purpose | Data concerned | Legal basis | Retention period |
|---|---|---|---|
| Processing, delivering and invoicing orders | Name, company, SIRET number, VAT number, addresses, email, telephone, order contents. For professionals in the European Union, the VAT number is checked with the European Commission’s VIES service. | Performance of a contract; legal obligation | Duration of the relationship, then 10 years for accounting records |
| Managing your customer account and wishlist | Login details, status (consumer or professional), order history, products in your wishlist | Performance of a contract | Until the account is deleted, or 3 years without activity |
| Collecting payment | Payment data, entered directly on the payment provider’s secure interface (we do not store any card number) | Performance of a contract | According to the provider; payment records 10 years |
| Answering your requests: contact, quotes, after-sales service, complaints | Contact details, message content, attachments and photos | Performance of a contract; legitimate interest | 3 years after the request is closed |
| Notifying you when a product is back in stock | Email address, product requested | Your request | Until the alert is sent, then deleted |
| Preventing fraud and spam, securing the site | IP address, connection and order data, security logs | Legitimate interest | 12 months for security logs; as long as strictly necessary for fraud |
| Newsletter to consumers | Email address, first name | Consent | Until you unsubscribe; 3 years after last contact |
| Newsletter to professionals | Business email address, company, purchase history | Legitimate interest (offers related to their business) | Until you unsubscribe; 3 years after last contact |
| Audience measurement (Google Analytics) | Browsing data, pages viewed, purchases | Consent | 13 months maximum for the cookie; 25 months for the data |
Fields marked with an asterisk in our forms are mandatory: without them, we cannot process your request.
Recipients of your data
Your data is intended for Canard Rouge. It is shared, within the limits of their tasks, with service providers who are not allowed to reuse it for their own purposes:
- Website hosting: Hostinger International Ltd (Cyprus).
- Payment: Systempay (card payment solution of the Banque Populaire) and PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg).
- Transport: La Poste (Colissimo) and DPD France, which receive your name, address, telephone number and email to deliver the parcel.
- Email and messaging: Google (sending of order emails and our mailbox).
- Statistics: Google (Google Analytics), only if you accept statistics cookies.
- Security and spam prevention: Cloudflare (Turnstile), Automattic (Akismet) and the site’s security tools.
- Accounting: our chartered accountant.
We do not sell your data.
Transfers outside the European Union
Some of these providers, in particular Google, Cloudflare and Automattic, may process data in the United States. These transfers rely on a European Commission adequacy decision (EU–US Data Privacy Framework) or on standard contractual clauses. You can ask us for a copy of these safeguards at contact@canardrouge.com.
Newsletter and commercial communications
We send news, restocks, promotions and technical advice by email. Consumers only receive them if they have ticked the box provided for this purpose. Professionals may receive offers related to their business and can object at any time. Every message contains a one-click unsubscribe link; you can also write to contact@canardrouge.com.
Cookies and trackers
The site uses strictly necessary cookies (basket, login, security), which do not require consent. Preference, statistics and marketing cookies are only placed if you accept them. The information banner lets you accept, refuse or choose, as easily to refuse as to accept. You can change your choice at any time with the “Manage consent” button at the bottom of the screen, or by deleting cookies in your browser settings.
Your rights
You can request access to your data, its rectification or erasure, restriction of or objection to its processing, and its portability. You can withdraw any consent you have given at any time, without affecting what happened before, object to commercial prospecting without giving a reason, and set directives for what happens to your data after your death.
To exercise your rights, write to contact@canardrouge.com or by post to the address above. We reply within one month and may ask for proof of identity. If you believe your rights are not respected, you can lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Security
We take reasonable measures to protect your data: encrypted connection (HTTPS), access limited to people who need it, security tools and regular updates. In the event of a breach that presents a risk to your rights, we notify the CNIL and, if necessary, you.
Changes to this policy
This policy may change. The version in force is the one published on this page, with its update date. See also our legal notice and our terms and conditions of sale. This is a translation of the French privacy policy; in case of discrepancy, the French version prevails.