1. Data controller
CAPAM, 146 rue Victor Hugo, 54800 Jarny, France — info@maxknives.fr — 07 63 79 78 06.
CAPAM processes your personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), as amended.
2. Data we actually process
| Category | Data | Origin |
|---|---|---|
| Identification | Title, surname, first name, date of birth | You |
| Contact | Delivery and billing postal address, email address, telephone number | You |
| Account | Username, encrypted password | You |
| Orders | Products ordered, amounts, invoices, order history, correspondence with customer service | Your activity |
| Payment | Payment method used, transaction status, provider reference | Payment provider |
| Browsing | IP address, pages viewed, searches, cookies | Automatic |
| Verification | Where applicable, confirmation that age verification has been carried out and its date | You |
We do not retain any payment card numbers. Card payments are processed directly by our approved payment provider; we never have access to card details. We do not collect income, bank account details (RIB) or financial situation.
Where proof of identity is requested to verify age or prevent fraud, it is viewed and then deleted, and is never retained beyond the verification.
3. Purposes, legal bases and retention periods
| Purpose | Legal basis | Retention |
|---|---|---|
| Process and deliver orders | Performance of the contract | 3 years after the last order |
| Issue and retain invoices | Legal obligation | 10 years |
| Manage your customer account | Performance of the contract | Until deletion, then 3 years of inactivity |
| After-sales service and warranties | Performance of the contract | 5 years |
| Verify age for the products concerned | Legal obligation | For the lifetime of the customer account — the proof of identity itself is not retained |
| Prevent payment fraud | Legitimate interest | 13 months |
| Send the newsletter | Consent | Until withdrawal, then 3 years |
| Remind you of an unfinished basket, recommend products and ask for your review after a purchase | Legitimate interest for our customers (similar products, Article L34-5 of the French Postal and Electronic Communications Code); consent in all other cases. You may object at any time using the unsubscribe link in every message | 3 years after the last order or the last contact |
| Measure website audience | Consent | 13 months |
| Track browsing on the site to personalise our emails | Consent | 13 months |
4. Recipients
Your data is accessible to CAPAM's authorised staff, and is disclosed only to the service providers acting on our behalf, each for its own purpose:
- Hosting: OVH SAS, Roubaix, France.
- Payment: Monetico, a service of Crédit Mutuel–CIC.
- Carriers: La Poste — Colissimo, and Chronopost SAS, depending on the delivery method chosen. Only the data necessary for delivery is disclosed to them.
- Emails and reminders: Brevo (Sendinblue SAS, Paris, France), which sends our service emails, our newsletter and our reminders, and for that purpose hosts your email address, your name, your order history and, if you have accepted it, your browsing on the site.
- Audience measurement: Google Analytics (Google Ireland Limited, Dublin, Ireland), only if you have accepted the corresponding cookies.
- Accounting and legal advisers, where applicable, within the scope of their respective duties.
Each provider acts on our instructions and solely for the purpose that concerns it. No data is sold or rented. Data entrusted to Google may be processed outside the European Union; such transfers are subject to the safeguards provided for by the GDPR (standard contractual clauses and, where applicable, an adequacy decision).
5. Cookies
The site uses cookies strictly necessary for its operation (basket, session, language choice, storage of your cookie preferences), which do not require your consent, as well as two services subject to your prior consent:
- Google Analytics — audience measurement: pages viewed, source of visits, device used. Cookies
_gaand_ga_*. - Brevo — browsing tracking to personalise our emails and reminders. Cookie
sib_cuid.
A banner allows you to accept or decline these services, together or separately, declining being just as simple as accepting. No cookie from these services is placed before you have made your choice. You can change your choice at any time using the "Manage my cookies" link in the footer. The cookie that remembers your choice and the Google Analytics cookies are kept for twelve months, the Brevo cookie for six months; no cookie subject to consent lasts longer than thirteen months.
6. Your rights
You have a right of access, rectification, erasure, restriction of processing, objection and data portability, as well as the right to set out instructions regarding the fate of your data after your death. Where processing is based on your consent, you may withdraw it at any time.
To exercise these rights: info@maxknives.fr, or by post to our registered office. We respond within one month, which may be extended by two months for complex requests.
You may also lodge a complaint with the CNIL (the French data protection authority), 3 place de Fontenoy, 75334 Paris Cedex 07 — www.cnil.fr.
7. Security
The site is served entirely over HTTPS. Passwords are stored in encrypted form. Administration access is granted on a named basis and restricted to authorised staff. Regular backups are carried out.
Last updated: 11 September 2026.