FBG-PREP takes the protection of your personal data seriously. This policy describes what data is collected, why, and how to exercise your rights.
Data controller
FBG-PREP, 1 Rue des Vergers, 34130 Mudaison, France. Contact: info@fbg-prep.com.
Data collected
- Via the contact form: name, email, company, estimated volume, message.
- Via the booking: name, email, company, phone, seller type, volume, message.
- Via the client portal: identification data, shipment history, billing.
- Technical logs: IP address, user-agent, timestamps (kept for 12 months maximum).
Purposes
- Reply to your requests (contact, booking).
- Provide and invoice the FBG-PREP service.
- Improve the site and detect fraud or abuse attempts.
- Comply with legal obligations (accounting, tax).
Legal basis
Processing is based on the performance of the contract (provision of the service), consent (forms), legitimate interest (security, anti-fraud) and compliance with legal obligations.
Retention period
- Unconverted contact/booking leads: 24 months.
- Active client data: duration of the relationship + 5 years (statute of limitations).
- Accounting documents: 10 years (legal obligation).
Recipients
Your data is accessible only to the FBG-PREP team and our technical subcontractors: Vercel (hosting), Resend (emails), Google (calendar). No data is resold or shared for third-party marketing purposes.
Your rights
In accordance with the GDPR, you have the right to access, rectify, erase, restrict, port and object. To exercise them: info@fbg-prep.com.
You may also lodge a complaint with the CNIL (cnil.fr).
Transfers outside the EU
Some subcontractors (Vercel, Resend, Google) may store data in the United States. These transfers are governed by the standard contractual clauses of the European Commission.
Analytics and session recording
To understand how visitors use fbg-prep.com and improve the experience, we record internally:
- Pages visited, clicks and the navigation journey.
- The content of form fields (contact, booking, chatbot) in order to identify friction and abandonment.
- The device, the browser, the approximate country (never the IP address in cleartext).
Passwords and credit card numbers are automatically masked and are never visible in our recordings. No third-party cookie or advertising tracker is set. The data is kept for 30 days then deleted automatically.
You may at any time request the deletion of a session concerning you by writing to info@fbg-prep.com indicating the approximate date and time of your visit. You may also enable the "Do Not Track" function of your browser to fully block this recording.
Shopify integration
Merchants selling on Shopify can connect their store to FBG PREP so that their orders reach us without re-keying. In this context, the merchant remains the data controller for their buyers' data and FBG PREP acts as a processor, on their instructions alone.
What the store sends us, and nothing else:
- The merchant's catalogue: titles, SKUs, EANs, variants and images of the products they entrust to us.
- For each order routed to us: its number, the items and the quantities.
- The buyer's delivery address: name, company, street, postcode, city, region, country, phone and e-mail — what allows us to print the label and hand the parcel to the right recipient.
We receive no payment method, no purchase history and no customer account. We open no account in the buyer's name, we do not profile them, we do not market to them and we pass their data to no one. The only recipients are the carrier handling the delivery and, where applicable, the customs authorities.
The delivery address lives on the shipment, which is an accounting record subject to statutory retention periods. On a buyer's erasure request — relayed by Shopify or by the merchant — we anonymise the shipment: name, company, street, postcode, city, region, phone and e-mail are permanently erased. What remains is the shipment itself, its quantities and the country code, which identifies no one and stays necessary for customs and accounting obligations.
The three compliance webhooks Shopify requires — buyer data request, buyer redaction and shop redaction — are in place and handled automatically. When the merchant uninstalls the app, our access to their store stops immediately and the access token is erased.
For any question about this integration or to exercise your rights: info@fbg-prep.com.
