Privacy Policy

Last updated: April 2026

Grimpe Aux Rideaux ("GAR", "we", "our", "us") respects your privacy and is committed to protecting your personal data in accordance with the EU General Data Protection Regulation 2016/679 ("GDPR") and the French "Loi Informatique et Libertés".

1. Data Controller

Grimpe Aux Rideaux SASU — 1 impasse des Narcisses, 49600 Beaupréau-en-Mauges, France. Contact: contact@grimpeauxrideaux.com.

2. Personal Data We Collect

Identity data: first name, last name, company, job title.
Contact data: email address, phone number, postal address.
Project data: specifications, drawings, measurements, technical requirements and related correspondence you share with us.
Technical data: IP address, browser type, device information, pages visited (via cookies).
Commercial data: quotes, orders, invoices, payment information.

3. Legal Basis and Purposes

We process your personal data on the following legal bases (GDPR Art. 6):

Contract performance — to prepare quotes, execute orders, deliver products and manage projects.
Legitimate interest — to respond to your enquiries, improve our services, and communicate about similar products and services.
Legal obligation — to comply with accounting, tax and commercial law obligations.
Consent — for newsletters, marketing communications, and non-essential cookies. You may withdraw consent at any time.

4. Retention Periods

Customer and project records: 10 years after the end of the commercial relationship (French commercial law).
Prospect data: 3 years after the last interaction.
Invoicing and accounting: 10 years (French tax law).
Website analytics cookies: 13 months maximum.

5. Recipients and Transfers

Your personal data is accessed only by authorised GAR staff and by vetted processors bound by data-processing agreements: hosting (Odoo SA, EU), email delivery, accounting software, payment providers, delivery partners and, where relevant, partner workshops. We do not sell your data. Any transfer outside the EEA is carried out under appropriate safeguards (Standard Contractual Clauses).

6. Your Rights

Under GDPR, you have the right to: access, rectify, erase, restrict or object to the processing of your personal data; data portability; withdraw consent at any time; and lodge a complaint with a supervisory authority. In France, the competent authority is the CNIL (www.cnil.fr).

To exercise your rights, contact us at contact@grimpeauxrideaux.com. We respond within one month.

7. Cookies

Our website uses essential cookies (required for site operation) and, subject to your consent, analytics cookies. You can manage cookie preferences via the cookie banner or your browser settings.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction, including encrypted connections (HTTPS), access controls and secure backups.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be signalled on this page with a new "Last updated" date.

10. Contact

Questions about this policy or your personal data: contact@grimpeauxrideaux.com — Grimpe Aux Rideaux SASU, 1 impasse des Narcisses, 49600 Beaupréau-en-Mauges, France.