1. Who We Are
Champion Spirit SAS (RCS Paris 791 237 830), 11 rue de Solférino, 75007 Paris, France (“Champion Spirit”, “we”).
E-mail for privacy matters : legal@championspirit.com (Attn. Abdoulaye Fadiga).
2. Scope
This notice applies to personal data collected via store.championspirit.com, championspirit.com and any sub-domain (the “Website”), including cookies and server logs.
3. What Personal Data We Process
| Category | Examples | Source |
|---|---|---|
| Identification | name, postal address, e-mail, phone | you |
| Transaction | order ID, products, amounts, payment token (last 4 digits only) | you / Stripe |
| Delivery | parcel tracking no., carrier events | carriers |
| Technical | IP address, browser/OS, cookie IDs | your device |
| Analytics | aggregated visit statistics (Google Analytics) | cookies |
No birth date, health, or other special-category data are collected.
4. Why We Process & Legal Bases
| Purpose | Legal basis (GDPR Art 6) |
|---|---|
| Accept & ship your order | Contract performance Art 6-1(b) |
| Process card payment (Stripe) | Contract performance |
| Customer service & after-sales | Contract performance |
| Fraud prevention & security logs | Legitimate interest Art 6-1(f) |
| Website analytics (non-essential cookies) | Consent Art 6-1(a) |
| Compliance with accounting & tax laws | Legal obligation Art 6-1(c) |
| Respond to legal requests | Legal obligation |
We send no marketing e-mails, SMS or push notifications.
5. Who Receives the Data
| Recipient | Country | Safeguard |
|---|---|---|
| OVH Cloud (hosting) | France | data stay in EU |
| Stripe Payments Europe Ltd | Ireland | EU entity (EEA) |
| Colissimo / La Poste | France | EU |
| DHL International | EU/EEA | EU bound |
| FedEx Express | EU/EEA | EU SCCs if applicable |
| Google Ireland Ltd (Analytics) | Ireland | EU |
We do not transfer data outside the European Economic Area.
6. Retention Periods
| Data | Retention |
|---|---|
| Customer account & orders | active account + 5 years |
| Invoices & accounting records | 10 years (French Comm. Code) |
| Stripe payment tokens | stored by Stripe under PCI-DSS |
| Server logs | 12 months |
| Analytics cookies | 13 months (EU CNIL rule) |
7. Your Rights (GDPR Art 15-22)
-
Access, rectification, erasure, restriction, portability, objection.
-
No automated decision-making.
-
Exercise your rights by e-mailing legal@championspirit.com (proof of ID may be requested).
-
You may lodge a complaint with the CNIL (www.cnil.fr).
8. Cookies & Trackers
The Website shows a banner (Consent-Manager embedded in the application) giving you control over:
-
Necessary cookies – cart, session (always active)
-
Analytics cookies – Google Analytics (_ga, _gid, _gat) – loaded only after opt-in.
You can withdraw consent at any time via the “Cookie Settings” link in the footer.
9. Security
We apply industry-standard safeguards: HTTPS, TLS 1.3, firewall, least-privilege access, encrypted backups, PCI-DSS card handling via Stripe.
10. Policy Updates
We may amend this notice; the new version will be posted with a new “last-updated” date. Substantial changes will be highlighted on the Website.