Last updated: 5 June 2026.
Data Controller
The controller of personal data collected on this website is Le Bar À Loot / LOOT Records Shop, located at 18 rue des Haies, 75020 Paris, France.
Contact for any question relating to personal data: lebaraloot@gmail.com.
Data Collected
Depending on your use of the website, we may process the following categories of data:
- identity and contact data: surname, first name, email address, telephone number, billing and shipping addresses;
- order data: purchased products, amount, shipping method, order status, customer history;
- payment data: information necessary for payment, processed by our secure payment providers;
- customer account data: login details, preferences, saved addresses;
- browsing data and cookies: technical logs, consent preferences, analytics or marketing data where you accept it;
- contact data: messages sent by email or via a contact form.
Purposes and Legal Bases
Data is used for the following purposes:
- processing orders, payments, shipping, returns and customer service requests: performance of a contract;
- managing invoicing, accounting and legal obligations: legal obligation;
- securing the website, preventing fraud and maintaining technical operation: legitimate interest;
- responding to requests sent by email or form: legitimate interest or pre-contractual measures;
- sending commercial communications or newsletters when you consent or when the law allows it: consent or legitimate interest depending on the case;
- placing or reading non-essential cookies, including analytics or marketing cookies: consent.
Recipients of Data
Where necessary, data may be transmitted to the following recipients:
- website hosting and maintenance providers;
- payment providers, including bank card and PayPal depending on the chosen method;
- carriers and logistics providers responsible for delivery;
- e-commerce, newsletter, anti-spam, security, analytics or marketing tools used by the website;
- advisers, administrations or authorities where required by law.
Transfers Outside the European Union
Some providers may be located outside the European Union or process data from third countries. Where necessary, such transfers are governed by safeguards provided for by the GDPR, including standard contractual clauses or equivalent mechanisms.
Retention Periods
Data is kept for limited periods adapted to the purposes pursued:
- order and invoicing data: for the time necessary to perform the order, then for the legal accounting retention period;
- customer account: until account deletion or prolonged inactivity, subject to legal obligations;
- contact requests: for the time necessary to process the request, then limited archiving;
- commercial prospecting: until withdrawal of consent or objection;
- cookies subject to consent: maximum duration of 180 days for the choice stored on this website, unless changed later.
Cookies
The website uses cookies necessary for its operation, including for the cart, customer account, security and remembering your preferences. These cookies do not require your consent when they are strictly necessary.
With your consent, the website may also use analytics or marketing cookies. You can accept, reject or customise these cookies through the consent banner, then change your choice at any time using the Cookies button displayed on the website.
Your Rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights:
- right of access to your data;
- right to rectification;
- right to erasure;
- right to object;
- right to restriction of processing;
- right to portability where applicable;
- right to withdraw your consent at any time for processing based on consent;
- right to define instructions regarding the fate of your data after your death.
To exercise your rights, write to lebaraloot@gmail.com. Proof of identity may be requested if necessary.
Complaint to the CNIL
If you believe that your rights are not respected, you may lodge a complaint with the CNIL: www.cnil.fr.
Security
We implement reasonable measures to protect personal data against loss, unauthorised access, disclosure or alteration. However, no system can guarantee absolute security.
Policy Updates
This policy may be amended to reflect changes to the website, services used or regulations. The update date appears at the top of the page.