PRIVACY POLICY (GDPR)
Gut-Scrapers – Personal Data Protection
Last updated: January 2026
1. DATA CONTROLLER
Fred Fages
Sole proprietor
SIRET: 413 779 661 00037
Address: 1C Rue Charrier, 30000 Nîmes, France
Email: guts.management@gmail.com
2. DATA COLLECTED
As part of using the gutscrapers.com website and placing orders, we collect the following personal data:
2.1 Identification data
- First and last name
- Email address
- Complete postal address
- Phone number (optional)
2.2 Order data
- Purchase history
- Transaction amounts
- Order date and time
2.3 Payment data
Banking data (card number, CVV, expiration date) are collected and processed directly by our payment provider Stripe and never pass through our servers.
Stripe is PCI-DSS Level 1 certified, the highest level of payment security certification.
2.4 Browsing data
- IP address
- Browser type
- Pages visited
- Connection date and time
- Cookies (see dedicated section)
3. PURPOSES OF PROCESSING
Your personal data is collected for the following purposes:
3.1 Order management
- Processing and tracking your orders
- Invoicing
- Delivery management
- After-sales service
- Returns and refunds management
Legal basis: Performance of the sales contract
3.2 Communication
- Sending order confirmations
- Shipping notifications
- Responses to your inquiries
Legal basis: Contract performance
3.3 Compliance with legal obligations
- Invoice retention
- Fraud prevention
Legal basis: Legal obligation
3.4 Service improvement (optional)
- Visit statistics
- User experience improvement
Legal basis: Legitimate interest
4. DATA RECIPIENTS
Your personal data is intended for:
4.1 Internally
- The data controller (Fred Fages) only
4.2 External service providers
We use service providers for:
- Stripe: Secure payment processing
- O2Switch: Website hosting (France)
- Postal services: Order shipping (La Poste, Colissimo)
These providers act as data processors and are subject to confidentiality obligations.
No data is sold or rented to third parties for commercial purposes.
5. TRANSFER OUTSIDE THE EU
Data is hosted in France (O2Switch, Clermont-Ferrand) and is not transferred outside the European Union.
Stripe (payment provider) may process certain data in the United States in compliance with GDPR and the European Commission’s standard contractual clauses.
6. RETENTION PERIOD
Data is retained for the following periods:
| Data type | Retention period |
|---|---|
| Customer account data | During business relationship + 3 years |
| Order data | 10 years (accounting and tax obligation) |
| Cookies | 13 months maximum |
| Connection logs | 12 months |
Upon expiration of these periods, data is deleted or anonymized.
7. DATA SECURITY
We implement all appropriate technical and organizational measures to protect your personal data against:
- Loss
- Misuse
- Unauthorized access
- Disclosure
- Alteration or destruction
Security measures:
- SSL/TLS certificate (HTTPS connection)
- Secure hosting in France
- Regular backups
- Restricted data access
- Payment via PCI-DSS certified platform (Stripe)
8. YOUR RIGHTS
In accordance with GDPR (EU Regulation 2016/679), you have the following rights:
8.1 Right of access (Art. 15 GDPR)
You can obtain confirmation that data concerning you is being processed and request a copy of this data.
8.2 Right to rectification (Art. 16 GDPR)
You can request correction of inaccurate or incomplete data.
8.3 Right to erasure / “Right to be forgotten” (Art. 17 GDPR)
You can request deletion of your data, unless a legal obligation prevents it (e.g., invoice retention for 10 years).
8.4 Right to restriction of processing (Art. 18 GDPR)
You can request the freezing of your data processing in certain situations.
8.5 Right to data portability (Art. 20 GDPR)
You can receive your data in a structured, machine-readable format.
8.6 Right to object (Art. 21 GDPR)
You can object to the processing of your data for reasons relating to your particular situation.
8.7 Right to withdraw consent
For processing based on consent (newsletters, non-essential cookies), you can withdraw your consent at any time.
8.8 Right to define post-mortem directives
You can define directives regarding the fate of your data after your death.
How to exercise your rights?
To exercise any of these rights, contact us:
- By email: guts.management@gmail.com
- By mail: Fred Fages, 1C Rue Charrier, 30000 Nîmes, France
We will respond within a maximum of 1 month from receipt of your request.
A copy of an ID document may be requested to verify your identity.
9. RIGHT TO COMPLAINT
If you believe that the processing of your personal data constitutes a GDPR violation, you have the right to lodge a complaint with the competent supervisory authority:
CNIL (National Commission for Data Protection and Liberties)
3 Place de Fontenoy – TSA 80715
75334 PARIS CEDEX 07
Phone: 01 53 73 22 22
Website: https://www.cnil.fr
10. COOKIES
The gutscrapers.com website uses cookies to improve your browsing experience.
10.1 What is a cookie?
A cookie is a small text file placed on your device (computer, smartphone, tablet) when visiting a website.
10.2 Types of cookies used
Strictly necessary cookies (no consent required):
- Session cookies for shopping cart
- Authentication cookies
- Security cookies
Functional and performance cookies (consent required):
- Preference memorization
- Visit statistics (anonymized)
Third-party cookies:
- Stripe (payment processing)
10.3 Cookie management
You can at any time:
- Accept or refuse cookies via the consent banner
- Configure your browser to refuse cookies
- Delete already stored cookies
Warning: Refusing certain cookies may limit access to certain site features (especially shopping cart and payment).
10.4 Browser configuration
To manage cookies, consult your browser’s help:
- Chrome: https://support.google.com/chrome/answer/95647
- Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
- Safari: https://support.apple.com/en-us/HT201265
- Edge: https://support.microsoft.com/en-us/microsoft-edge
11. MINORS
This site is not intended for persons under 15 years of age. We do not knowingly collect personal data from minors without parental consent.
12. MODIFICATIONS
This privacy policy may be updated. The last update date is indicated at the top of this page.
In case of substantial modification, we will inform you by email or via a message on the site.
13. CONTACT
For any questions regarding this privacy policy or the processing of your personal data:
Email: guts.management@gmail.com
Mail: Fred Fages, 1C Rue Charrier, 30000 Nîmes, France
By using this site, you acknowledge having read and understood this Privacy Policy.
