Legal
Privacy policy
Last updated: October 2026
This policy explains what personal data we collect when you visit endoandiron.com or buy a guide, why we collect it, and what rights you have. The short version: we collect as little as possible, we never sell it, and this site uses no advertising or tracking cookies.
Who is responsible
The data controller is [FULL NAME], trading as Endo & Iron, [BUSINESS ADDRESS], France. Contact: contact@endoandiron.com.
What we collect, and why
When you browse the site
Our hosting provider processes technical data, such as your IP address and the pages requested, to deliver the site and protect it against attacks. We don’t use advertising or tracking cookies, and we don’t run third-party trackers.
When you buy a guide
Your purchase is handled by our payment provider, [PAYMENT PROVIDER]. It collects your name, email address, billing country and payment details to process the order and deliver the guide. We receive what we need to manage your order (name, email address, country, product and amount). We never receive your card details.
When you write to us
We keep your email address and your message in order to reply.
Legal bases
- Performing the contract: processing and delivering your order.
- Our legal obligations: keeping accounting and tax records.
- Our legitimate interest: keeping the site secure and answering your messages.
How long we keep it
- Order and accounting records: 10 years, as required by French accounting law.
- Emails: up to 3 years after our last exchange.
- Hosting logs: the short period set by the hosting provider for security.
Who receives it
Only our service providers, and only for the purposes above: our hosting provider (Cloudflare) and our payment provider ([PAYMENT PROVIDER]). Some of them are based in the United States; these transfers are covered by the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. We never sell or rent your data.
Your rights
You can access, correct or delete your data, object to or restrict its processing, and ask for a copy in a portable format. To use any of these rights, email contact@endoandiron.com. If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority (www.cnil.fr), or to the authority of your country. If you live in California, you can also ask what personal information we hold about you and ask us to delete it; we do not sell or share personal information.
Cookies
This site does not use cookies for advertising or audience measurement. If that changes, we will update this policy and ask for your consent where required.
Changes
We may update this policy. The date at the top always shows the current version.