Privacy Policy

Last updated: 01/06/2025

At RUSSHH (“we,” “us,” or “our company”), we care deeply about protecting your privacy and personal data. We process your information in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act No. 78-17 of 6 January 1978, as amended.

This Privacy Policy explains:

• what personal data we collect,

• how and why we use it,

• your rights,

• and how we protect your information.

1. Who is the data controller?

The data controller is:

RUSSHH
[ Company ]
Registered office address : France
Email: support@russhh.com

2. What data do we collect?

We only collect data strictly necessary to manage our e-commerce activity:

✅ Identification data

• First name, last name (or username)

• Email address

• Shipping and billing address

• Phone number

✅ Transaction data

• Order details

• Payment information (processed securely by our payment provider – we do not store your card details)

✅ Technical data and cookies

• IP address

• Device and browser type

• Navigation data on the website

• Cookies (to improve your experience, measure audience, and ensure site security)

✅ Customer service data (if applicable)

• Communication history with our support team

3. Why do we use your data?

We process your personal data for the following purposes:

• To manage orders and our contractual relationship (fulfilling your purchase)

• To inform you about your order status

• To respond to your inquiries

• To improve our website and services

• To comply with legal and regulatory obligations (invoicing, accounting)

• To prevent fraud and secure transactions

• To send marketing communications, subject to your consent or as permitted by applicable law

4. What is the legal basis for processing?

Under the GDPR, the processing is based on:

• Contract performance (when you place an order)

• Compliance with legal obligations

• Your consent (for newsletters, certain cookies, or marketing)

• Our legitimate interests (improving services, preventing fraud)

5. How long do we keep your data?

We keep your data only for as long as necessary:

• Customer data: for the duration of the contractual relationship, then archived for 5 years (legal limitation period)

• Accounting data: 10 years (legal requirement)

• Marketing data: until you withdraw consent or 3 years after your last interaction

• Cookies: up to 13 months

6. Who are the recipients of your data?

Your data is only shared with the following recipients, strictly within the scope of their duties:

• Our logistics and delivery partners

• Our secure payment providers

• Our web host and technical subcontractors

• Our marketing partners (if you have consented)

• Competent authorities when required by law or legal procedures

We never sell your data to third parties.

7. Where is your data stored?

Your data is hosted within the European Union.

If certain partners are located outside the EU, we ensure that they provide an adequate level of protection, for example by using:

• the European Commission’s adequacy decisions,

• or standard contractual clauses.

8. What are your rights?

Under the GDPR, you have the following rights:

• Right of access: to obtain confirmation and a copy of your data.

• Right of rectification: to correct inaccurate or incomplete data.

• Right of erasure: to request deletion of your data in certain cases.

• Right of restriction: to temporarily suspend processing.

• Right to object: to object to processing, including direct marketing.

• Right to data portability: to receive your data in a structured, machine-readable format.

• Right to define instructions regarding your data after your death.

To exercise these rights, please contact us at:

RUSSHH – Data Protection Team
Email: support@russhh.com

We will reply within a maximum of 1 month.

9. Cookies

Our website uses cookies. You can configure your preferences through the consent banner when you first visit or via the “Cookie Settings” link at the bottom of the page.

For more information, please refer to our Cookie Policy.

10. Complaints

If you believe your rights are not respected, you can file a complaint with the CNIL (French Data Protection Authority):

CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
www.cnil.fr

11. Changes to this policy

We reserve the right to update this Privacy Policy at any time. Any modifications will be posted on this page with the date of revision.

Thank you for trusting RUSSHH.