Privacy policy

Last updated: 16 October 2026

Bzeparis (referred to in this policy as “we,” “us,” or “our”) operates . This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and, where applicable, the California Consumer Privacy Act (CCPA).

What we collect. We collect the following categories of personal data:

Identity and contact data: name, delivery address, billing address, email address, phone number.

Order data: products purchased, order value, order date, delivery preferences.

Payment data: the payment method used and a transaction reference. We do not store full card numbers.

Technical data: IP address, browser type, device type, and pages visited on our site. This is collected through cookies and similar technologies.

Communication data: messages you send us by email or through our contact form.

Why we collect it. We process your data for the following purposes:

To fulfil your order, including processing payment, arranging delivery, and handling returns.

To communicate with you about your order, including order confirmation, dispatch notifications, and refund confirmations.

To respond to your enquiries and provide customer support.

To comply with legal obligations, including tax and accounting requirements. Invoices are kept for 10 years as required by French law.

To improve our website and services, based on aggregated and anonymised usage data.

Legal bases. We rely on the performance of a contract for order-related processing, legal obligation for tax and accounting records, and legitimate interest for fraud prevention and website security. Where we rely on consent — for example, for non-essential cookies or marketing emails — you can withdraw that consent at any time.

Data retention. Order and transaction data are kept for the duration required by French law, currently 10 years for invoices. Warranty-related data is kept for the duration of the applicable legal warranty period. Account data is deleted after 3 years of inactivity. Technical data collected through cookies is retained according to the cookie's lifespan, which is set out in our cookie settings.

Sharing your data. We share data with service providers who help us operate the store: payment processors, carriers (Colissimo, Chronopost, Colis Privé), and our hosting provider. These providers process data on our instructions and under contracts that meet GDPR requirements. We do not sell your personal data.

Your rights. Under GDPR, you have the right to access your data, correct inaccurate data, request deletion, restrict processing, object to processing, and receive your data in a portable format. Under CCPA, California residents have the right to know what personal information is collected, request deletion, and opt out of the sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA. To exercise any of these rights, email info@bzeparis.com. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority (CNIL).

Data protection contact. Data protection enquiries are handled by our founder, who can be reached at info@bzeparis.com. We have not appointed a formal Data Protection Officer, as we do not meet the criteria requiring one under Article 37 GDPR.

Cookies. We use essential cookies to operate the cart and checkout, and analytics cookies to understand how visitors use our site. Non-essential cookies are not placed on your device until you give your consent through our cookie banner. You can withdraw your consent at any time through the banner or your browser settings. Blocking essential cookies may prevent the site from working correctly.

Data security. We use technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and secure payment processing through PCI-DSS compliant providers.

Changes to this policy. If we make material changes to how we handle your data, we will update this page and, where appropriate, notify you by email.