Privacy Policy
Last updated: 31 August 2026
This page states exactly what data we collect, why, how long we keep it, and what you can require of us. It is written to be read, not to be accepted unread.
1. Who is responsible for your data
matcheur.com is published by Vincent Leroux, sole trader (entrepreneur individuel), registered in France under SIREN 920 480 191, trading as Matcheur.
For any question or request about your data, write to us through the contact form.
2. What we collect
When you place an order — first and last name, e-mail address, phone number, delivery and billing addresses, order contents and history.
When you pay — card payments are processed by Stripe. We never see or store your card number; we receive only confirmation that the payment went through. For bank transfers, we see the account details carried by the transfer.
When you create an account or join a group — username, e-mail address, password (never visible to us in clear text), order history, and anything you post.
When you book a workshop slot — the service chosen, the date, and your contact details.
When you write to us — through the contact form or the site's chat: what you tell us, and what we need in order to answer.
When you simply browse — IP address, device and browser type, pages viewed, referring source. This serves audience measurement and site security.
We collect no sensitive data within the meaning of the GDPR: no health data, no opinions, no origin. If you describe an injury to us in order to choose a string, write it only if you are comfortable doing so — that message is kept like any other.
3. Why, and on what legal basis
What we do : Legal basis
Process and ship your orders, handle after-sales service, hold your bookings : Performance of the contract
Issue and keep invoices and accounting records : Legal obligation
Answer your messages, secure the site, measure audience : Legitimate interest
Advertising cookies and advertising audience measurement (see §6) : Your consent
4. Who receives it
We do not sell your data, and we do not rent it. It goes only to those who need it for the service to exist:
-
Wix.com Ltd, our host, which also provides the store, bookings, chat and member area;
-
Stripe Payments Europe, for card payment processing;
-
the carrier handling the shipment, which receives your name, address and phone number — nothing else;
-
Meta Platforms Ireland, if and only if you have accepted advertising cookies (see §6);
-
our accountant and the tax authorities, as our legal obligations require.
Some of these providers may process data outside the European Union. Such transfers are covered by the European Commission's standard contractual clauses or by an adequacy decision.
5. How long we keep it
-
Orders, invoices and accounting records: 10 years, as French commercial law requires.
-
Customer account: as long as the account exists, then 3 years after your last activity.
-
Messages, forms and conversations: 3 years after the last exchange.
-
Browsing data and cookies: 13 months for the trackers themselves, 25 months for the statistics derived from them.
After those periods, data is deleted or anonymised.
6. Cookies and trackers
The site sets three families of files:
-
Strictly necessary cookies — cart, session, security, language choice. Without them the site does not work; they do not require your consent.
-
Wix audience measurement — pages viewed, referring source, device, in aggregate form.
-
The Meta (Facebook) pixel — it measures how our advertising performs and tells Meta which pages you viewed on our site. It is an advertising tracker, and it only fires with your agreement.
You can change your choices at any time through the consent banner, available in the site footer, or refuse and delete these trackers through your browser settings. Refusing advertising and statistical trackers does not prevent you from ordering on the site. »
7. Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, objection and portability over your data, as well as the right to give instructions on what becomes of it after your death. Where we rely on your consent, you may withdraw it at any time, without calling into question what was done beforehand.
To exercise these rights, write to us through the contact form. We answer within one month. We may need to verify your identity before acting — that protection is for you.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority, the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or cnil.fr. You may also contact the supervisory authority of your own country of residence.
8. Minors
Orders placed on this site are placed by adults. If you are under 15, a parent or legal guardian must order on your behalf and agree to the processing of your data. We do not knowingly collect data about children under 15; if it happens, tell us and we will delete it.
9. Security
The site is served over HTTPS, payments go through a PCI-DSS certified provider, and access to order data is limited to what is needed to fulfil it. No system is infallible: in the event of a data breach likely to create a risk to your rights, we notify the CNIL and, where the risk is high, notify you directly.
10. Updates
This policy changes as the site and its tools change. Any significant modification is flagged by the date at the top of the page.
