FUMERO
Cart

Privacy policy

This privacy policy is provided in good faith and should be reviewed by your data protection adviser (DPO) before go-live. The French version prevails.

FUMERO SAS (25-27 Rue Tronchet, 75008 Paris, France) is the data controller for personal data collected on fumero.fr. This policy explains what we collect, why, and your rights under the GDPR.

Data we collect

  • Account & order data — name, email, delivery/billing address, phone, company name and VAT number (for business accounts), order history.
  • Payment data — handled by our payment provider; we do not store full card details.
  • Usage & consent data — cookie-consent choice, and, only with your consent, analytics and marketing identifiers.

Why we use it (legal bases)

  • To process and deliver your orders, provide support and issue invoices (performance of the contract; legal obligation for accounting/tax).
  • To send transactional emails (order, shipping, invoice, password reset) — necessary for the contract.
  • With your consent, to run analytics and marketing (newsletter, abandoned-cart), and to invite reviews after delivery. You can withdraw consent at any time.

Cookies & consent

We use a cookie banner with Google Consent Mode v2. Analytics and marketing tags load only after you accept; if you decline, they stay off. You can change your choice at any time by clearing the fumero_consent cookie.

We also run privacy-friendly, self-hosted visitor statistics: they are cookieless, load only after you accept, store no IP address and no personal data (a same-day, anonymous session identifier is used solely to count unique visits and resets daily).

To protect our sign-in, registration and newsletter forms from bots we use hCaptcha, a security measure that may briefly load a challenge widget.

Processors we work with

We share the minimum data needed with service providers acting on our instructions, including: our hosting provider, GLS (delivery), our payment provider, Resend (transactional email), hCaptcha (bot protection), and — only with consent — Google Analytics 4 (analytics), Klaviyo (marketing email), and Trustpilot (review invitations). Some providers may process data outside the EU under appropriate safeguards.

Retention

We keep account and order data for as long as your account is active and as required by accounting and tax law, then delete or anonymise it. Marketing data is kept until you unsubscribe.

Your rights

You have the right to access, rectify, erase, restrict, port your data and to object to certain processing. To exercise these rights, email info@fumero.fr. You may also lodge a complaint with the French data protection authority (CNIL, cnil.fr).

Contact

Data requests: info@fumero.fr. See also our Legal notice.