Version dated 12 September 2026
Privacy policy
1. Data controller
F4HIK-LAB, French SASU with share capital of €100, 47 rue Vivienne, 75002 Paris, France — SIREN 109 535 203 — SIRET 109 535 203 00011 — Paris Trade and Companies Register 109 535 203 — EU VAT FR79 109 535 203. Privacy contact: contact@f4hik-lab.fr.
2. Data processed
The shop processes data supplied when creating or managing an account, placing an order or requesting support: identity, email, telephone number, addresses, rotor model, voltage, notes, order contents, amounts, payment and order history, and support messages.
Passwords are stored as irreversible cryptographic hashes and cannot be read by F4HIK-LAB. Payment is available by bank transfer or PayPal. Card details entered with PayPal are neither received nor stored by F4HIK-LAB.
3. Purposes and legal bases
- Account, cart, ordering, payment, shipping, tracking and after-sales service: performance of the contract and pre-contractual steps.
- Accounting, warranties and tax obligations: legal obligation.
- Security, abuse prevention and transaction evidence: F4HIK-LAB’s legitimate interests.
- Responding to enquiries: pre-contractual steps or legitimate interests depending on the request.
- Occasional sending of an offer about an incomplete cart: prior consent, which can be withdrawn at any time from the account or through the unsubscribe link in every message.
4. Recipients
Data is accessible only to F4HIK-LAB and, where necessary, its technical, hosting, email and delivery providers. It is not sold or shared with partners for advertising.
When customers choose PayPal, information required for payment is sent to PayPal, which processes it under its own privacy policy. F4HIK-LAB only receives the references and status needed to track the transaction. PayPal may process certain data outside the European Economic Area under the safeguards described in its policy.
WhatsApp links lead to an external service. The shop does not send data to WhatsApp before the user chooses to open the link.
5. Retention periods
- Orders and accounting records: ten years from the end of the relevant financial year.
- Account with no order: deletion or anonymisation after three years of inactivity, following prior notice where possible.
- Account linked to an order: during the customer relationship, followed by retention only of data required by law.
- Contact and support requests: three years after the last exchange, unless evidence or a dispute requires longer retention.
- Technical security data: no more than twelve months, unless an incident requires longer retention.
- Incomplete cart of a signed-in customer: thirty days after its last change. The cart is marked as converted when an order is created.
6. Cookies and audience measurement
The shop uses a session cookie strictly necessary for login, security and the cart. No advertising cookies are used. The site counter stores an anonymous identifier and country code; IP addresses are not retained in the statistics.
7. Your rights
Depending on the processing, individuals may request access, rectification, erasure, restriction or portability of their data and object to processing based on legitimate interests. Requests should be sent to contact@f4hik-lab.fr, identifying the relevant account. Proof of identity may be requested only where there is reasonable doubt.
A complaint may be lodged with the French data protection authority, the CNIL, at www.cnil.fr. No profiling or fully automated decision producing legal effects is carried out.
8. Security and updates
F4HIK-LAB applies appropriate technical and organisational measures to protect accounts and orders. Suspected unauthorised access should be reported promptly to contact@f4hik-lab.fr.
This policy may be updated to reflect changes in the service or regulations. The version date appears at the top of the page.