Privacy
What northbon.com collects, why, with whom, for how long, and how to take back control.
The French version of this page prevails.
01Data controller
The data collected on northbon.com is processed by Northbon, a société par actions simplifiée whose registered office is at 173 rue de Courcelles, 75017 Paris.
For any question concerning your data: contact@northbon.com.
02Data collected
- Order
- Surname, first name, delivery and billing address, e-mail address, telephone number, content and amount of the order, IP address at the time of payment.
- Customer area
- E-mail address and single-use sign-in link sent to that address. No password is asked for or kept.
- Contact and chat
- Your name, the e-mail address to reply to and the message you write.
- Creator application
- First name, surname, e-mail address, a link to your posts and your message.
- Newsletter
- E-mail address only, with your consent.
- Browsing
- IP address and the city, region and country deduced from it, device type, system and browser, referring site and the partner link or campaign you arrived through, pages viewed with the time spent and scrolling, buttons clicked, text copied from our pages (number of characters and, on our public pages, a short excerpt of that text), gestures to save an image (right-click, long press, drag) and printing of a page, items added, basket amount and payment method chosen, the delivery country and method chosen, promo codes typed or received through a link, and problems met on the site (page error, item out of stock, field flagged as incorrect and the kind of error, promo code refused, payment refused or interrupted and the reason given by Mollie, payment window closed, return without paying), never your contact details, your address or your card details, linked by a temporary session identifier. This journey may be matched with the order placed from the same IP address, to understand a payment that did not go through.
The IP address is also used to limit the number of messages and sign-in links per device, to protect the site from automated sending.
No bank card data is collected by northbon.com: the payment takes place at Mollie.
03Purposes and legal bases
- Processing, dispatching and tracking an order
- Performance of the contract
- Handling a return, a withdrawal, a guarantee
- Performance of the contract
- Issuing and keeping invoices
- Legal obligation
- Replying to a message or to the chat
- Legitimate interest
- Reviewing an application to the creator programme
- Legitimate interest
- Site security and fraud prevention
- Legitimate interest
- Measuring traffic and journeys on our own servers (pages viewed, buttons clicked, problems met, IP address)
- Legitimate interest
- Protecting the site's content against unauthorised reuse (copied text, saved images, printed pages)
- Legitimate interest
- Newsletter
- Consent
- Audience measurement and campaign measurement by third-party tools
- Consent
The internal traffic measurement does not depend on the cookie banner: it sets no cookie, only a random session identifier kept in the tab's memory and erased when the tab is closed; the data stays with our hosting providers and serves neither advertising nor profiling. You may object to it at any time by writing to contact@northbon.com.
04Recipients and processors
Your data is neither sold nor transferred. It is passed only to the providers that keep the shop running:
- Mollie B.V., Netherlands
- Payment, security and fraud prevention.
- Sendcloud, Netherlands
- Shipping labels and tracking, with the partner carriers.
- Resend
- Sending the confirmation, tracking and service e-mails.
- Supabase
- Database of the orders, the messages, the customer accounts and the traffic log (pages viewed, buttons clicked, problems met, IP address).
- Vercel Inc.
- Hosting of the site and technical logs.
- Google Analytics 4
- Audience measurement. Loaded only with your consent.
- Microsoft Clarity
- Understanding how the site is used. Loaded only with your consent.
- Meta pixel
- Measurement and targeting of advertising campaigns on Facebook and Instagram, by Meta Platforms Ireland. Loaded only with your consent; the contact details entered in a form on the site (e-mail, phone, name, address) are then sent to it in hashed, unreadable form, to link a purchase to an advertisement.
The last three are triggered only after your agreement, and stop if you withdraw it.
05Transfers outside the European Union
Some providers process data outside the European Union, in particular in the United States. These transfers are framed by the standard contractual clauses of the European Commission, or by an adequacy decision where one exists.
06Retention
- Orders and invoices
- 10 years, accounting and tax obligations.
- Customer account
- For as long as the account exists, then 3 years after the last contact.
- Contact messages and creator applications
- 3 years from the last exchange.
- Prospects and newsletter
- 3 years from the last exchange.
- Sign-in links
- 15 minutes, single use. The link itself is not kept, only a hash of it, deleted as soon as the link is used or a new one is requested.
- Browsing data
- 25 months at most.
08Your rights
In accordance with the General Data Protection Regulation, you have a right of access, rectification, erasure, restriction, portability and objection concerning your data, as well as the right to withdraw your consent at any time.
To exercise them, write to contact@northbon.com from the address linked to your order. A reply within one month at the latest.
You may also lodge a complaint with the Commission nationale de l'informatique et des libertés (the French data protection authority), 3 place de Fontenoy, 75007 Paris, cnil.fr.