Personal data protection
This page explains what data we collect, why, who it is shared with and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR).
1. Who is responsible for your data?
WOODELY SAS, 10 domaine de la Balme - Chemin Angénieux, 42340 Veauche, France – contact@woodely.com.
2. What data do we collect?
- Identity and contact: first and last name, email, phone, delivery and billing addresses.
- Orders: products purchased, amounts, history, exchanges with customer service.
- Trade accounts: company name, SIRET, VAT number.
- Browsing: pages viewed, device, IP address (see the Cookies page).
- Payment: your card details are entered directly with Stripe or Alma. Woodely never has access to them.
3. Why do we use it?
- To process, deliver and invoice your orders and manage your account (performance of the contract).
- To answer your questions and handle returns (performance of the contract).
- To send you our newsletter and offers, if you have agreed (consent).
- To measure site traffic and our advertising, if you have agreed (consent).
- To protect the site against bots and fraud (legitimate interest).
- To meet our accounting and tax obligations (legal obligation).
Marketing emails and pending baskets. If you have subscribed to our newsletter, or if you have already placed an order with Woodely, we may send you emails with offers on products similar to those you have purchased, as well as a reminder when you leave a basket pending on our website. You can object to this at any time, free of charge, using the unsubscribe link included in every email or by writing to us.
4. Who is it shared with?
Your data is never sold. It is only shared with the service providers we need, for what concerns them:
- Website hosting: o2switch (France).
- Payment: Stripe and Alma.
- Delivery: Colissimo (La Poste), Mondial Relay, MBE, and the brands that ship some pieces directly (name, address, phone).
- Emails and newsletter: Brevo.
- Audience measurement and advertising: Google (Google Analytics) and Meta (Facebook, Instagram).
- Bot protection: Cloudflare (Turnstile).
5. Transfers outside the European Union
Some providers (Google, Meta, Stripe, Cloudflare) may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.
6. How long do we keep it?
- Account and orders: for the duration of our relationship, then 3 years after your last purchase or contact.
- Invoices: 10 years (accounting obligation).
- Newsletter: until you unsubscribe, in one click from any email.
- Cookies: see the Cookies page.
7. Your rights
You can at any time access, correct or delete your data, restrict or object to its use, request its portability or withdraw your consent.
Some of this information can be changed directly in your “My account” area. For anything else, email us at contact@woodely.com: we will reply within one month.
If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
8. Security
The site is secured (HTTPS) and hosted in France. Payments are handled by Stripe and Alma, without Woodely having access to your card details.
To protect our forms against bots and spam, we use Cloudflare Turnstile. This service invisibly analyses some technical data from your browser (IP address, browser type, connection characteristics) to check that you are not a bot.
