Privacy Policy

This Privacy Policy is addressed to anyone, whether a visitor or a Customer, who accesses the website www.geturbrick.com. It explains to you, transparently, how GETURBRUCK collects and processes your personal data, and the rights available to you to remain in control of it.

Personal data is any information that identifies you, directly (name, first name, photo) or indirectly (email address, login identifier).

The term processing refers to any operation performed on this data: collection, recording, storage, consultation, modification, disclosure, erasure, etc.

We process your data in strict compliance with the French Data Protection Act of January 6, 1978, as amended, and the General Data Protection Regulation (GDPR), based on two principles:

• You remain in control of your data
• Your data is processed transparently, confidentially and securely

The data controller is GETURBRUCK, a French SAS (simplified joint-stock company) with capital of 1,000 €, registered with the RCS de Nanterre under number 953 293 651, whose registered office is located in Colombes (92). It is represented by Merwan Laakad, in his capacity as Chairman.

For any question relating to your data:

• By email: contact@geturbrick.com
• Via our contact form
• By mail, to the registered office indicated in our legal notice

Your data is collected directly from you, when you register on the Site, place an Order, or in your exchanges with our services (email, contact form). Browsing data may also be used, with your consent, to tailor our content and offers to your interests.

Your data is collected by GETURBRUCK for the following purposes:

• Order management, tracking of contracts, orders, deliveries and invoices. Legal basis: performance of the contract.
• Responding to your requests, handling questions about our products or delivery conditions. Legal basis: your consent.
• Newsletter and commercial offers, sending the newsletter and personalized offers, if you have consented to it. Legal basis: your consent.
• Exercise of your rights, handling Data Protection Act requests. Legal basis: legal obligation.
• Improvement of the Site, proper functioning, audience measurement, feature optimization. Legal basis: legitimate interest; your consent where required (cookies).

Whether the requested data is mandatory or optional is specified at the time of collection.

• Order management: last name, first name, email, phone number, delivery and billing address, payment data (processed by our secure providers).
• Responding to your requests: last name, first name, email.
• Newsletter: email, first name (optional).
• Site improvement (via cookies): pages visited, items added to cart, time spent browsing.

Within the limits of their respective duties, the following may access your data:

• GETURBRUCK's authorized personnel (administration, marketing, logistics)
• Our technical processors: Shopify (e-commerce platform and hosting), CookieYes (cookie consent management), Klaviyo (emails, alerts and browsing tracking), Google Tag Manager and Google Analytics (audience measurement), Meta (advertising campaign measurement), Cloudflare Turnstile (protecting the contact form against automated submissions), and our own application infrastructure (tracking of product views and linking to your account)
• Carriers (DPD, FedEx)
• Secure payment providers
• Competent authorities, upon judicial request

Your data is never sold or rented to third parties.

Your data is kept for the period strictly necessary for the purposes pursued:

• Order management: duration of the relationship + 3 years; accounting documents: 10 years
• Information requests: 3 years from the last contact
• Newsletter: 3 years from the last contact or unsubscription
• Exercise of rights: 1 year (access / rectification), 3 years (objection)
• Cookies: 13 months maximum

Pursuant to the GDPR and the French Data Protection Act, you have the following rights:

• Access, obtain a copy of your data
• Rectification, correct inaccurate or incomplete data
• Erasure, request the deletion of your data
• Withdrawal of consent at any time
• Restriction of processing
• Objection to processing
• Portability, retrieve your data in a structured format
• Setting directives for your data after your death

These rights are exercised by simple request:

• By email: contact@geturbrick.com
• By mail, to the registered office indicated in our legal notice

You may also file a complaint with the CNIL (French data protection authority) (cnil.fr).

The Site places cookies, small files saved on your device, and collects connection data (date, time, IP address, page viewed). You may accept, refuse or fine-tune these placements at any time via our consent banner, managed by CookieYes. Only strictly necessary cookies are placed before you make your choice.

Here is what we place, by purpose:

Information collected via cookies subject to consent is kept for a maximum of 13 months, then deleted or anonymized. The detailed, up-to-date list of cookies actually placed can be viewed in the consent banner, "Preferences" section.

To learn more, visit the CNIL website.

We process your data primarily within the European Union. Given the nature of our business (Shopify platform hosted in Canada / United States), transfers outside the EU may nonetheless take place.

These transfers are governed by appropriate safeguards: standard contractual clauses approved by the European Commission and, where applicable, Data Privacy Framework (DPF) certification. These safeguards are provided upon request to contact@geturbrick.com.

GETURBRUCK and its processors implement the technical and organizational measures necessary for the security of processing and the confidentiality of your data, in accordance with the GDPR and the French Data Protection Act:

• Encryption of exchanges (HTTPS)
• Authentication via confidential login credentials and passwords
• Logging of connections
• Access to data restricted to what is strictly necessary
• Hosting on a secure platform (Shopify)