{"id":656,"date":"2026-07-09T12:44:52","date_gmt":"2026-07-09T10:44:52","guid":{"rendered":"https:\/\/hk-handmade.com\/politique-de-confidentialite\/"},"modified":"2026-08-04T15:50:11","modified_gmt":"2026-08-04T13:50:11","slug":"politique-de-confidentialite","status":"publish","type":"page","link":"https:\/\/hk-handmade.com\/en\/politique-de-confidentialite\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"
\n
\n

Personal data<\/p>\n

Privacy Policy<\/h1>\n

What data we collect, why, how long we keep it and how to take back control. Updated 4 August 2026. This English version is provided for information only; in the event of any discrepancy, the French version prevails.<\/p>\n<\/header>\n

\n
\n
\n

Who processes your data<\/h2>\n

The data controller is BHM EXPORT<\/strong>, a French private limited company (SARL) with share capital of \u20ac60,000, 82 rue Manin, 75019 Paris, Paris Trade and Companies Register 819 429 200, operating the website hk-handmade.com under the trading name HK Handmade.<\/p>\n

No data protection officer has been appointed, as this is not mandatory for our activity. For any question, write to contact@hk-handmade.com<\/a>.<\/p>\n

What we collect, why and for how long<\/h2>\n\n\n\n\n\n\n\n\n\n\n\n
Purpose<\/th>\nData<\/th>\nLegal basis<\/th>\nRetention<\/th>\n<\/tr>\n<\/thead>\n
Processing and tracking orders<\/td>\nName, delivery and billing addresses, email, telephone, order details<\/td>\nPerformance of the contract<\/td>\n10 years (accounting obligation)<\/td>\n<\/tr>\n
Payment<\/td>\nAmount, transaction status, payment identifier<\/td>\nPerformance of the contract<\/td>\n13 months with the provider<\/td>\n<\/tr>\n
Customer account<\/td>\nLogin details, order history<\/td>\nPerformance of the contract<\/td>\nUntil deletion, then after 3 years of inactivity<\/td>\n<\/tr>\n
Replying to your messages<\/td>\nName, email, content of the message<\/td>\nLegitimate interest in replying to you<\/td>\n3 years after the last exchange<\/td>\n<\/tr>\n
Analytics<\/td>\nPages viewed, browsing path, device, browsing data<\/td>\nConsent<\/td>\n13 months maximum<\/td>\n<\/tr>\n
Advertising and campaign measurement<\/td>\nAdvertising identifiers, purchase events<\/td>\nConsent<\/td>\n13 months maximum<\/td>\n<\/tr>\n
Site security<\/td>\nIP address, connection logs<\/td>\nLegitimate interest in securing the service<\/td>\n12 months<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

We do not collect any sensitive data, and we carry out no automated profiling producing legal effects and no automated decision-making concerning you.<\/p>\n

Your payment card details<\/h2>\n

We never have access to your card numbers. Payment is processed directly by our payment provider, which alone handles this data in an environment certified as compliant with the PCI-DSS standard.<\/p>\n

Who receives your data<\/h2>\n

We do not sell or rent your data. It is shared only with the service providers needed to run the service, who act on our instructions:<\/p>\n\n\n\n\n\n\n\n\n
Provider<\/th>\nRole<\/th>\nLocation<\/th>\n<\/tr>\n<\/thead>\n
Hostinger International Ltd<\/td>\nWebsite hosting and email delivery<\/td>\nEuropean Union (Cyprus)<\/td>\n<\/tr>\n
Stripe Payments Europe Ltd<\/td>\nPayment processing<\/td>\nEuropean Union (Ireland), with possible transfers outside the EU<\/td>\n<\/tr>\n
Google Ireland Limited<\/td>\nAnalytics, advertising and catalogue distribution<\/td>\nEuropean Union (Ireland), with possible transfers outside the EU<\/td>\n<\/tr>\n
Carrier<\/td>\nParcel delivery<\/td>\nFrance<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Your data may also be disclosed to an administrative or judicial authority where the law requires it.<\/p>\n

Transfers outside the European Union<\/h2>\n

Some of our providers belong to groups with entities established outside the European Union, notably in the United States. These transfers are governed by the safeguards set out in Chapter V of the GDPR: the European Commission\u2019s standard contractual clauses and, where applicable, an adequacy decision.<\/p>\n

Your rights<\/h2>\n

You have the following rights over the data that concerns you:<\/p>\n