Privacy policy
Updated: 4 October 2026.
1. Data controller
Rayon Rando, a French single-member simplified joint-stock company (SASU) with share capital of €200,000, registered with the Chambéry Trade and Companies Register under number 108 708 686, 28 route de Montrigon, 73700 Bourg-Saint-Maurice, France. Contact: contact@rayonrando.com.
2. Data, purposes, legal bases and retention periods
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Orders: payment, delivery, invoicing, after-sales service, warranties | identity, contact details, addresses, orders, correspondence; name and email address of a gift card recipient | performance of the contract; legal obligation for invoicing | duration of the relationship, then 5 years (limitation period); accounting records: 10 years |
| Customer account and loyalty programme | login details, order history, loyalty points | performance of the contract | until the account is deleted, or after 3 years of inactivity |
| Abandoned basket reminder (customers with an account) | email address, basket contents | legitimate interest: reminding you about your basket | a maximum of two emails, 1 hour and 48 hours after abandonment; you can unsubscribe in each email |
| Back-in-stock alert | email address, product | consent | until the alert is sent, for a maximum of 1 year |
| RayonRandoZine magazine | email address, language, registration date | consent | until you unsubscribe (link in each email) |
| Contact and customer service | email address, message, attachment | legitimate interest: responding to you | 3 years after the last correspondence |
| Notifying you when the Bourg-Saint-Maurice shop opens | email address, poster through which you registered | consent | until the shop opens |
| Job applications | name, email address, message, CV | steps taken at your request before entering into a contract | 2 years after the last contact, unless hired |
| Customer reviews | reviews published by Avis Vérifiés: first name, surname initial, rating, comment | legitimate interest: displaying reviews | as long as Avis Vérifiés publishes them |
| Audience measurement (Plausible) | page views, referring website, device type, country; IP address read without being stored | legitimate interest: anonymous website traffic statistics | no identifier retained for more than 24 hours |
| Measuring orders resulting from a Google ad, if you consent | click identifier, order reference and amount; hashed email address, telephone number, name and address | consent | cookies: 90 days; your choice: 6 months |
| Security and fraud prevention | IP address, login and payment data | legitimate interest: protecting the website and payments | a maximum of 1 year |
The data requested for an order is necessary to fulfil it: without this data, the order cannot be placed. You enter your bank card details with Revolut, our payment provider: we never have access to the full card number.
3. Recipients
Data is never sold. Only the Rayon Rando team and our service providers have access to it, to the extent necessary to perform their tasks:
- hosting of the website, audience measurement and our management software (Odoo): OVH (France); website images: Scaleway (France);
- payment: Revolut Bank UAB (Lithuania);
- emails: Zoho, ZeptoMail and Zoho Mail (data centre in the European Union);
- order preparation and dispatch: Ageneau (France), then the selected carrier: Colissimo, Chronopost, GLS or Mondial Relay;
- address suggestions as you type: IGN, Géoplateforme (France); collection point map: OpenStreetMap Foundation (United Kingdom);
- measurement of orders resulting from an ad, with your consent: Google (Google Ads).
4. Transfers outside the European Union
Google may process data in the United States: these transfers are based on the European Commission's adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework). The United Kingdom also benefits from an adequacy decision.
5. Your rights
You have the right to access, rectify and erase your data, restrict its processing, object to its processing (for direct marketing, without having to give a reason), and data portability, as well as the right to withdraw your consent at any time and to give instructions on what should happen to your data after your death.
To exercise these rights: contact@rayonrando.com, or Rayon Rando, 28 route de Montrigon, 73700 Bourg-Saint-Maurice. We respond within one month. Proof of identity may be requested if there is reasonable doubt about your identity.
You may lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority in your country of residence.
6. Cookies
See the Cookie information page.