1. Introduction & Overview

JODY BOIS is fully dedicated to safeguarding the personal privacy of our customers and visitors. We adhere strictly to the General Data Protection Regulation (GDPR – EU 2016/679) and national privacy statutes across all operations.

2. Data Controller Identity

3. Personal Data Collected & Collection Points

We process customer identity details (name), contact coordinates (email, phone number for freight notification), billing and delivery addresses, and transactional order histories. Financial payment details (card numbers) are processed through secure external gateways and never stored on our web infrastructure.

4. Legal Bases & Processing Purposes

Data is handled pursuant to Art. 6(1)(b) GDPR (execution of a sales contract for firewood and pellet pallet deliveries), Art. 6(1)(c) GDPR (statutory tax and bookkeeping compliance), and Art. 6(1)(f) GDPR (fraud prevention and platform security).

5. Data Sharing with Freight Carriers & Processors

Delivery coordinates and contact phone numbers are shared solely with freight carriers operating our tail-lift trucks to coordinate scheduled pallet drop-offs. Hosting is maintained by o2switch SAS in secure Tier-3 data centers in France.

6. Data Retention Schedule

Commercial invoices and statutory records are archived for 10 years pursuant to statutory commercial law. User profile data is retained for the duration of the account relationship and archived for 3 years post inactivity.

7. Data Subject Rights (Access, Deletion, Portability)

Under Articles 15 to 22 of the GDPR, you retain full rights to request access, rectification, erasure (“right to be forgotten”), restriction of processing, and data portability. Inquiries may be addressed to dpo@jodybois.com or infos@jodybois.com.

8. Security & SSL/TLS Encryption

All web transmissions are encrypted with 256-bit SSL/TLS cryptographic certificates. Server infrastructure is fortified with automated firewalls, continuous patch management, and strict access controls.

9. Cookie & Tracking Management

Only essential technical session cookies (cart retention, authentication, language state) are deployed by default without intrusive tracking.

10. Right to Lodge a Regulatory Complaint

You have the right to lodge a formal complaint with the competent supervisory data protection authority (such as CNIL in France, the ICO in the UK, or your relevant European national regulator).