This Privacy Policy governs the processing of personal data collected through the website www.cloudnestcarpet.com (hereinafter referred to as the “Website”). We are committed to protecting your personal data in strict compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and applicable French data protection legislation (Loi n° 78-17 du 6 janvier 1978 relative à l’informatique, aux fichiers et aux libertés).
- Data Controller Identification
The data controller responsible for the processing of personal data collected via the Website is:
Brand Name: Cloudnestcarpet
Website: www.cloudnestcarpet.com
Company: CLASS TAPIS
Address: 23 Av. Général Gallieni, 93380 Saint-Denis
Phone: +33158696654
Email: message@cloudnestcarpet.com
- Categories of Personal Data Collected
We collect and process only the personal data strictly necessary for the operation of our commercial activities and fulfillment of contractual obligations. The categories of data collected include:
Identification and Contact Data: Full name, shipping address, billing address, email address, and telephone number.
Transaction and Payment Data: Order details, purchase history, and payment confirmation details. Please note that credit or debit card numbers and sensitive financial credentials are collected, processed, and stored exclusively by our external payment processing provider, Stripe. We do not store or have direct access to your full payment card details.
Technical and Navigation Data: IP address, browser type and version, operating system, time zone settings, and browsing behavior on our Website collected via cookies and similar tracking technologies.
- Legal Bases and Purposes of Data Processing
Personal data is processed only when permitted by applicable European and French laws, based on the following legal grounds and operational purposes:
Performance of a Contract (Article 6(1)(b) GDPR): Processing is necessary for the execution and fulfillment of customer orders, including order processing, payment settlement via Stripe, shipment coordination, and customer support regarding purchases.
Compliance with Legal Obligations (Article 6(1)(c) GDPR): Processing is required to comply with applicable French and European tax, accounting, and consumer protection statutory requirements.
Legitimate Interests (Article 6(1)(f) GDPR): Processing is conducted to maintain Website security, prevent fraud, ensure network integrity, and optimize our catalog presentation.
Data Subject Consent (Article 6(1)(a) GDPR): Where required by law, non-essential cookies and marketing communications require explicit prior consent, which may be withdrawn at any time.
- Payment Processing via Stripe
To ensure secure financial transactions, our Website utilizes the payment services provided by Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.). When you execute a purchase, your payment information is transmitted directly to Stripe. Stripe processes your financial data in compliance with Payment Card Industry Data Security Standards (PCI-DSS). For further details regarding how Stripe processes personal data and your rights thereunder, please consult Stripe’s privacy policy at https://stripe.com/privacy. - Data Retention Periods
In accordance with French and European legal requirements and principles of data minimization, personal data is retained only for the duration strictly necessary for the purposes for which it was collected:
Customer Account Data: Retained for the duration of the active contractual relationship and up to three (3) years from the last commercial interaction or account inactivity.
Transaction and Invoicing Records: Retained for a period of ten (10) years in compliance with French commercial and tax accounting statutory obligations (Article L-123-22 of the French Commercial Code).
Payment Transaction Metadata: Retained by our payment processor Stripe in accordance with applicable financial regulatory frameworks and legal retention duties.
Technical Logs and Cookies: Retained for a maximum period of thirteen (13) months from the date of collection.
- Data Recipients and International Transfers
Personal data collected via the Website is processed primarily by authorized personnel of www.cloudnestcarpet.com. Data may be shared with trusted third-party service providers acting as processors under strict contractual obligations, including:
Payment service providers (Stripe) for transaction processing.
Logistics and shipping carriers for order delivery.
Hosting and technical infrastructure providers.
Where personal data is transferred outside the European Economic Area (EEA), such transfers are governed by appropriate safeguards, such as European Commission Standard Contractual Clauses (SCCs) or adequacy decisions, ensuring an adequate level of data protection.
- Data Subject Rights
Under the GDPR and French data protection legislation, you possess the following rights regarding your personal data:
Right of Access (Article 15 GDPR): The right to obtain confirmation as to whether or not your personal data is processed, and access to such data.
Right of Rectification (Article 16 GDPR): The right to request the correction of inaccurate or incomplete personal data.
Right to Erasure (Article 17 GDPR): The right to request the deletion of your personal data under statutory conditions.
Right to Restriction of Processing (Article 18 GDPR): The right to limit the processing of your data in specific circumstances.
Right to Data Portability (Article 20 GDPR): The right to receive your personal data in a structured, commonly used format.
Right to Object (Article 21 GDPR): The right to object to processing based on legitimate interests.
Right to Withdraw Consent: Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at: message@cloudnestcarpet.com. You also have the right to lodge a complaint with the French supervisory authority, the CNIL (Commission Nationale de l’Informatique et des Libertés – www.cnil.fr).
- Cookies and Tracking Technologies
The Website uses cookies to enhance user experience, analyze traffic, and ensure technical functionality. Essential cookies are deployed automatically based on legitimate operational necessity. Non-essential cookies require your explicit consent via our cookie banner. You can configure your browser settings to refuse cookies at any time. - Data Security
We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. All data transmissions between your browser and our Website are encrypted using secure Transport Layer Security (TLS) technology. - Modifications to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time to reflect changes in legal, regulatory, or operational requirements. Any updates will be published directly on this page with an updated effective date. Continued use of the Website following any modifications constitutes acceptance of the revised terms.