Privacy policy
Updated on 05/10/2026
This English translation is provided for convenience; in case of discrepancy, only the French version is authoritative.
1. Who is responsible for your data
The coeurdefoyer.fr shop (Cœur de Foyer brand) is published by THERMASSE, a SARL (limited liability company) with share capital of €15,000, 44, rue du Sergent Stéphane Mazeau, 21320 Pouilly-en-Auxois, RCS Dijon 528 048 069. THERMASSE is the controller of your personal data.
For any question about your data: info@coeurdefoyer.fr, 09 78 81 72 73, or by post to the address above.
2. What we collect, why, and for how long
| Why | Data | Legal basis | Retention period |
|---|---|---|---|
| Creating and managing your customer account | Title, first name, last name, email address, password (stored encrypted), date of birth if you provide it; for a professional: company, SIRET number | Contract | As long as the account is used; deleted 3 years after your last order or login |
| Processing your orders: delivery, invoicing, after-sales service | Identity, delivery and billing addresses, telephone, order contents, correspondence | Contract; legal obligation for invoices | Invoices and accounting records: 10 years; other order data: 5 years after the order |
| Card payment | Entered directly on our bank's secure page (Up2pay, Crédit Agricole): we neither see nor store your card number | Contract | According to the bank's obligations |
| Responding to your requests (contact form, email, telephone, quote) | Identity, contact details, content of the request | Pre-contractual measures or legitimate interest | 3 years after the last contact |
| Newsletter | Email address | Consent | Until you unsubscribe (link in each newsletter) |
| Back-in-stock alert | Email address, product | Consent | Until the alert is sent |
| Collecting your review after delivery (Société des Avis Garantis) | Name, email address, order number, products purchased | Legitimate interest | According to the policy of Société des Avis Garantis; you may refuse these requests |
| Audience measurement and advertising (Google Analytics, Google Ads) | Cookies and browsing data | Consent | See our "Cookies" page |
Orders placed on ManoMano: ManoMano sends us the data needed to deliver and invoice your order; its processing by ManoMano is governed by ManoMano's own privacy policy.
3. Who receives your data
Your data are neither sold nor rented. They are only passed on to those who need them:
- THERMASSE staff responsible for orders, order preparation and accounting;
- our hosting provider o2switch (Clermont-Ferrand, France), for the website and our management software;
- the carrier chosen for your delivery (La Poste Colissimo, DPD France, Geodis or, for pallets, a chartered carrier): name, address, telephone and email address, to deliver to you and notify you;
- our bank (Up2pay, Crédit Agricole), for card payments;
- Société des Avis Garantis, to ask for your review after delivery;
- Google, for audience measurement and advertising if you accept them, and for signing in with a Google account;
- the authorities, upon legal requisition.
4. Data processed outside the European Union
Google LLC may process data in the United States. Google LLC adheres to the EU–US Data Privacy Framework.
5. Signing in with a Google account
You can sign in to the shop, or create your customer account, with your Google account, using the "Sign in with Google" window offered on our pages.
- Data received: if you choose to sign in, Google sends us your first name, last name and email address. We save them in your customer account. We never receive your Google password.
- Purpose: to identify you, and to open or create your customer account, at your request (legal basis: contract).
- This does not subscribe you to our newsletter.
- Retention period: that of your customer account.
- Display of the window: as long as you are not signed in to the shop, your browser loads a program provided by Google (accounts.google.com) as soon as our pages open. Google then receives technical connection data (IP address, address of the website visited, browser information), even if you do not use the window. These data are processed by Google in accordance with its privacy policy: https://policies.google.com/privacy.
- You can close the window: Google will then offer it less often. Creating an account using the shop's form always remains possible.
- To choose a password specific to the shop: use the "Forgotten password" link on the login page.
6. Cookies
Audience measurement and advertising cookies are only placed with your consent, given or refused in the banner displayed on your first visit. Your choice is kept for 6 months; you can change it at any time using the icon at the bottom left of each page. Details: see the "Cookies" page.
7. Your rights
You may request access to your data, their rectification, erasure, restriction of processing or portability, object to their processing (in particular to marketing communications and review requests), withdraw any consent given at any time, and set out instructions regarding what happens to your data after your death.
Write to us at info@coeurdefoyer.fr or by post to the address above; we reply within one month. You can also change your information and subscriptions from your customer account.
If you consider that your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr).
8. Security
The website is served over an encrypted connection (HTTPS). Passwords are stored encrypted. Access to the data is restricted to authorised persons, with personal usernames and passwords.
9. Changes
This policy may change; the date of the last update is shown at the top of the page.