Information

Privacy Policy

This English translation is provided for information only. In the event of any discrepancy, the French version shall prevail.

This page explains what personal data we collect on franckdeville.fr, why, how long we keep it, who we entrust it to and how to exercise your rights. It supplements the legal notice and the terms and conditions of sale.

Last updated: 6 November 2026.

Data controller

The data collected on this site are processed by PHENIX, simplified joint-stock company (société par actions simplifiée) operating the Le Clos Deville shop, Centre commercial Steel, 2 rue Ferrer, 42000 Saint-Étienne, RCS Saint-Étienne 882 225 873 (hereinafter “we”).

Requests sent from the Professionals page are forwarded to the workshop, FD (Franck Deville brand), Zone Galinay aux Buissons, boulevard Gruner, 42230 Roche-la-Molière, RCS Saint-Étienne 444 690 465, which processes them on its own behalf.

For any question about your data: contact form, by telephone on 04 77 57 78 35 or by post to the address of PHENIX above. We have not appointed a data protection officer.

The data we collect

  • Orders: surname, first name, billing and delivery addresses, e-mail address, telephone number, products ordered, chosen date of receipt, text of the message card and of any personalisation, amount and history of your orders.
  • Customer account, if you create one: the same information, your password (stored in encrypted form, which we cannot read) and your preferences.
  • Payment: your card details are entered directly with our payment service provider Stripe. We never have access to them; we only receive the card type, its last four digits and the outcome of the payment.
  • Contact form: name, e-mail address, telephone number if you provide it, profile (private individual or professional) and your message.
  • Newsletter: your e-mail address, if you subscribe.
  • Browsing: technical data (IP address, browser type, pages viewed, date and time) recorded in the server logs, and the cookies described below.

When you have a gift box delivered to someone close to you, you give us their name, address and telephone number. We use them solely for the delivery; please let them know.

Mandatory fields are indicated in the forms. Without them, we cannot process your order or request.

Why we use your data and how long we keep it

Processing your orders

Preparation, delivery, invoicing, customer service and legal guarantees. Legal basis: performance of the contract of sale. Retention period: for the duration of the order, then five years in archive storage for the handling of any disputes. Invoices are kept for ten years (Article L. 123-22 of the French Commercial Code, Code de commerce), as are orders of €120 or more (Article L. 213-1 of the French Consumer Code, Code de la consommation).

Managing your customer account

Legal basis: performance of the contract. Retention period: until the account is deleted, which you may request at any time, or three years after your last login or order.

Helping you from your account

If you tick “Allow remote shopping assistance” in your account, our team can view your account and act on your behalf, for example to complete an order. Legal basis: your consent, which you withdraw by unticking the box.

Securing payments

Prevention of bank card fraud, carried out by Stripe. Legal basis: our legitimate interest, and that of the cardholder, in preventing fraudulent payments.

Responding to your messages

Legal basis: our legitimate interest in responding to the requests sent to us or, for professionals, steps taken prior to a quotation. Retention period: three years after our last exchange.

Sending you our newsletter

News, collections and events of the Maison, by e-mail only. Legal basis: your consent, given by ticking the box provided (it is never pre-ticked); if you are already a customer, our legitimate interest in presenting products similar to those you have purchased, unless you object. Each mailing contains an unsubscribe link. Retention period: until you unsubscribe, or three years after our last contact with you.

We do not carry out marketing by SMS or by telephone. Your number is used solely for the delivery and tracking of your order.

Ensuring the security of the site

Technical server logs, used to detect and remedy incidents and intrusion attempts. Legal basis: our legitimate interest. Retention period: twelve months at most.

Complying with our legal obligations

Accounting, tax, responding to requests from the authorities. Legal basis: our legal obligations, for the periods they require.

We do not take any automated decision producing legal effects concerning you, and we neither sell nor rent your data.

Who receives your data

Your data are accessible only to those members of our teams who need them. We also entrust them, to the extent necessary, to the following service providers, who are contractually bound to protect them and to use them only on our behalf:

  • IONOS (Sarreguemines, France): hosting of the site and of the data;
  • Chronopost (France): delivery, with your name, address, telephone number and e-mail address in order to notify you of the arrival of the parcel;
  • Stripe (Stripe Payments Europe, Ireland): payment and fraud prevention;
  • Amazon Web Services (servers located in Ireland): sending of the site’s e-mails (order confirmation, replies, newsletter);
  • Google: display of the site’s fonts and playback of the YouTube video featured on one of the news pages (see the “Cookies” section).

Finally, these data may be disclosed to administrative or judicial authorities that request them within the framework provided for by law.

Transfers outside the European Union

Stripe, Amazon Web Services and Google belong to US groups. Where data are accessible from the United States, these transfers are governed by the European Commission’s adequacy decision on the EU-US Data Privacy Framework, to which these companies have signed up, and by the European Commission’s standard contractual clauses.

Security

The entire site is served over an encrypted connection (HTTPS). Passwords are stored in encrypted form, access to the site’s administration is restricted and protected, and payments are processed by Stripe, which is certified PCI DSS, the highest level of security for bank card data.

Cookies

A cookie is a small file placed on your device when you visit a website. On your first visit, a window allows you to accept all, refuse all or choose category by category; refusing is as easy as accepting. Your choice is kept for six months and you can change it at any time via the “Manage my cookies” link at the bottom of each page.

Strictly necessary cookies

They are essential for the site to function and do not require your consent:

  • PHPSESSID, form_key, mage-cache-sessid, mage-messages, section_data_ids, X-Magento-Vary: session, basket, login to your account, form security and displayed messages. They expire at the end of the session or at the latest after one hour of inactivity;
  • private_content_version: a technical value, containing no personal data, used to display your up-to-date basket;
  • consent-settings: stores your cookie choices, for six months;
  • __stripe_mid, __stripe_sid: set by Stripe on the payment page to prevent fraud, for one year and thirty minutes respectively.

Audience measurement and social networks

To date, the site does not set any audience measurement cookies or any advertising cookies. If we add any, they will only be set with your consent, and this page will be updated.

The links to our Instagram, Facebook or Pinterest pages are simple links: no content from these networks is loaded unless you click on them.

Third-party content

The site’s fonts are provided by Google Fonts: to display them, your browser connects to Google’s servers, which receive your IP address. Google states that it does not use these data for advertising purposes.

One of the news pages features a YouTube video embedded in “privacy-enhanced” mode: YouTube (Google) only sets trackers when you start playback.

You can also configure your browser to block cookies; the basket and checkout will not work without the strictly necessary cookies.

Your rights

You have the right of access, rectification, erasure, restriction of processing and portability in respect of your data. You may object at any time, without having to give reasons, to the use of your data for marketing purposes, and withdraw your consent at any time, without affecting processing already carried out. Finally, you may set out instructions regarding what happens to your data after your death.

To exercise these rights, write to us using the contact form or by post to PHENIX (Le Clos Deville), Centre commercial Steel, 2 rue Ferrer, 42000 Saint-Étienne. We respond within one month, which may be extended by two months for a complex request; if we have reasonable doubts about your identity, we may ask you to prove it.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

If you do not wish to receive commercial telephone canvassing, you may register free of charge on the Bloctel telephone opt-out list at www.bloctel.gouv.fr.

Changes to this policy

We may amend this policy, in particular when we add a service to the site. The date of the last update appears at the top of the page.