Privacy policy
Data Controller
The personal data collected on the BIG CRUSH website (hereinafter the “Site”) is processed by BIG CRUSH, acting as the data controller within the meaning of Regulation (EU) 2016/679 (GDPR).
Contact: contact@big-crush.com
Data Collected
In the context of using the Site, BIG CRUSH may collect the following data:
-
Identity: first name, last name, postal address, email address, phone number
-
Order data: shipping and billing addresses, payment information (encrypted via payment providers), order history
-
Browsing data: IP address, device type, pages visited, browsing preferences, cookies
-
Communication data: newsletter subscription, exchanges by email or contact form
Purposes of Processing
The collected data is used for the following purposes:
-
Managing and fulfilling orders (payment, shipping, customer support)
-
Customer relationship management (after-sales service, returns, exchanges)
-
Sending commercial information and newsletters, subject to consent
-
Compliance with legal and accounting obligations
-
Improving user experience and the Site (statistics, personalization, audience measurement)
Data Recipients
Personal data may be shared with third-party providers, only for the purposes defined above:
-
Shopify (hosting and e-commerce platform)
-
Payment providers (PayPal, Shopify Payments)
-
Delivery service providers and logistics partners
-
Marketing and newsletter tools (e.g. Mailchimp)
-
Analytics and advertising tools (e.g. Google Analytics, Meta Pixel)
These providers act as processors in accordance with the GDPR.
Transfers Outside the European Union
Shopify and some of our providers may transfer data outside the EU (notably to Canada and the United States).
Such transfers are governed by standard contractual clauses approved by the European Commission to ensure an adequate level of protection.
Data Retention Periods
Data is retained only for the duration necessary for the following purposes:
-
Order-related data: for the duration of the contractual relationship, then archived for 10 years (legal obligation)
-
Prospect/customer data without order: 3 years from the last contact
-
Cookies and browsing data: up to 13 months
-
Newsletter subscriptions: until unsubscribed or 3 years without interaction
User Rights
In accordance with the GDPR, each user has the following rights regarding their data:
-
Right of access and rectification
-
Right to object and withdraw consent
-
Right to erasure (“right to be forgotten”)
-
Right to restrict processing
-
Right to data portability
-
Right to define instructions concerning the fate of their data after death
To exercise your rights, contact contact@big-crush.com (please attach a valid ID).
In case of difficulty, you may contact the CNIL (www.cnil.fr).
Data Security
BIG CRUSH and its service providers take all technical and organizational measures to protect data from loss, destruction, unauthorized access, or disclosure.
In the event of a data breach, BIG CRUSH will notify the CNIL and the affected individuals within the legal timeframe.
Cookies and Trackers
When browsing the Site, cookies may be placed on your device.
These cookies are used to:
-
Ensure the proper functioning of the Site (strictly necessary cookies)
-
Remember your preferences
-
Generate anonymous traffic statistics
-
Personalize the user experience and commercial offers
No non-essential cookies (e.g. marketing, audience measurement) are placed without your consent.
An information banner allows you to:
-
Accept all cookies
-
Refuse them
-
Customize your choices
You may withdraw or modify your consent at any time via the cookie manager available on the site or in your browser settings.
Policy Updates
BIG CRUSH reserves the right to amend this privacy policy at any time. The update date will appear at the bottom of the page.
Last updated: 09/08/2025