Privacy Policy
Our commitment
STORIA CAFE is committed to protecting the privacy of users of its website. This privacy policy explains how we collect, use, and protect your personal data.
This policy complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data Controller
STORIA CAFE
Centre Commercial Saint Paul, 105 Avenue du Lauragais, 34080 Montpellier, France
Email: [email protected]
Phone: 09 77 25 01 62
2. Personal data collected
We collect the following data as part of our business:
When creating an account:
- First and last name
- Email address
- Password (encrypted)
- Phone number (optional)
Upon ordering:
- Delivery and billing address
- Order History
- Payment data (processed by our secure provider)
During navigation:
- IP Address
- Browser type and operating system
- Pages visited and visit duration
- Cookies (see dedicated section)
3. Purposes of processing
Your data is collected for the following purposes:
- Order management: processing, shipping, invoicing and tracking
- Customer account management: authentication and history
- Customer service: response to your inquiries and complaints
- Marketing: newsletter and promotional offers (with your consent)
- Site improvement: traffic and navigation analysis
- Legal obligations: invoice retention, fraud prevention
4. Legal basis for processing
- Contract execution: processing your orders
- Consent: newsletter and non-essential cookies
- Legitimate interest: improvement of our services, fraud prevention
- Legal requirement: retention of accounting documents
5. Data Recipients
Your data may be shared with:
- Our internal teams (customer service, logistics, accounting)
- Our carriers (for delivery)
- Our secure payment providers
- Our hosting provider (OVH)
- The competent authorities (upon legal request)
We never sell your personal data to third parties.
6. Shelf life
- Customer data: 3 years after the last order or last contact
- Accounting records: 10 years (legal requirement)
- Cookies: 13 months maximum
- Connection logs: 1 year
7. Your Rights
In accordance with the GDPR, you have the following rights:
Access right
Get a copy of your data
Right to rectification
Correct your inaccurate data
Right to erasure
Delete your data
Right of objection
Object to the processing
Right to portability
Retrieve your data
Right to restriction
Limit the processing
To exercise these rights, contact us at: [email protected]
You can also file a complaint with the CNIL: www.cnil.fr
8. Cookies
We use different types of cookies:
Essential cookies (required)
Required for website operation: session, shopping cart, authentication.
Analytical cookies
To measure traffic and improve the website.
Marketing cookies
To personalize ads (with your consent).
You can configure your cookie preferences through your browser or our consent banner.
9. Data Security
We implement technical and organizational measures to protect your data:
- SSL/TLS encryption of communications
- Secure password storage (hashing)
- Restricted access to personal data
- Regular backups
- Regular updates to our coffee machine systems
10. Policy Modifications
We reserve the right to modify this privacy policy. In the event of a substantial change, we will inform you by email or via a notification on the website.
Last updated: 15/06/2026