Privacy policy
What data this site collects, why, and how to exercise your rights.
Data controller
The data controller is Munoz Catherine, trading as Poissonnerie Cathy, whose registered office is at La Sabatière, 83136 Néoules. For any question about your data, write to contact@poissonneriecathy.fr.
Data collected
The site only collects what an order and an account require:
- Customer account: email address, password (never stored in clear text, only in encrypted form), first name, last name and phone number if you provide them.
- Guest order: name, email address and phone number entered when reserving.
- Orders: products reserved, quantities, requested preparations, pickup market and date, estimated then final amounts.
- Current cart, including before any account is created.
- No banking data: online payment is not enabled, payment is made at pickup on the market.
Purposes and legal bases
Each piece of data serves a specific purpose:
- Preparing and handing over your order, and sending you its confirmation: performance of the contract.
- Managing your account and order history: performance of the contract.
- Replying when you write to us: legitimate interest.
- Keeping sales records: legal accounting obligation.
Cookies
The site uses no analytics or advertising cookies. That is why you are not shown a consent banner: only strictly necessary cookies are set.
- A cart cookie, which keeps your selection even before an account is created.
- A session cookie, set only when you log in.
- A language preference, between French and English.
- A display preference, between the light and dark themes.
Your rights
You have the following rights over your data at any time:
- Access the data concerning you and obtain a copy of it.
- Have inaccurate information corrected.
- Request deletion of your account and of data not subject to a retention obligation.
- Object to a processing operation or request its restriction.
- Receive your data in a reusable format.
Recipients
Your data is neither sold, rented, nor passed on for advertising purposes. It is hosted in France with OVH SAS and is accessible to the fishmonger's team. Order confirmation emails are delivered by Brevo, a sending provider established in the European Union.
Retention periods
Account data is kept as long as the account exists, then deleted on request. Orders and their records are kept for the period required by accounting obligations. Abandoned carts are purged automatically.
Security
The site is served over HTTPS only. Passwords are stored in encrypted form using a dedicated hashing function and cannot be read back, including by the site publisher.
Complaints
These rights are exercised by simply emailing the contact address above. If our answer does not satisfy you, you may refer the matter to the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, at cnil.fr.