The privacy and security of your personal information are of the utmost importance to us. This policy describes the data we collect, the purposes for which we use it and the rights you have under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
Article 1: Data controller
- The data controller is Repair Mac Parts, whose contact details are set out in Article 1 of the terms and conditions of sale.
- For any questions about your personal data or to exercise your rights, please contact us via the website’s help centre.
Article 2: Data collected
2.1 Data you provide to us
- Account data: surname, first name, email address, password (stored in encrypted form) and, where applicable, the profile information provided by Google when you sign in with Google Sign-In (name, email address, profile picture).
- Order data: billing address, delivery address, telephone number, order history, amounts and payment methods used.
- Business data, where applicable: company name, EU VAT number, SIRET number.
- Trade-in data: description of the equipment, serial number and proof of identity under the conditions set out in Article 7 of the trade-in terms and conditions.
- Correspondence data: content of messages exchanged with our customer service team.
2.2 Data collected automatically
- Connection and browsing data: IP address, browser type, operating system, pages viewed, date and time of visit, referring website.
- Technical security data: connection logs, authentication attempts, bot detection signals.
No data falling within the special categories referred to in Article 9 of the GDPR is collected. Our services are not intended for children under the age of 15 and we do not knowingly collect their data.
Article 3: Purposes, legal bases and retention periods
The sole purpose of the data collected is to ensure the smooth running of the business relationship between Repair Mac Parts and its customers.
It is used to maintain and improve the website, to analyse visits and user behaviour, and to process enquiries and orders.
Repair Mac Parts undertakes not to sell or disclose any personal data to third parties other than those designated as necessary for the proper operation and improvement of the services offered.
Article 4: Signing in with Google Sign-In
- When you sign in with Google Sign-In, we only access the information required to authenticate you and provide our services: name, email address and profile picture.
- We undertake to clearly represent our identity and the purpose of our data collection, to explain transparently the types of data collected and the reasons for collecting them, and to use this data solely for the purposes expressly described in this policy.
- This data is not transferred to third parties, used for advertising purposes or used to train artificial intelligence models.
- You can revoke the access granted at any time from the security settings of your Google account.
Article 5: Recipients and processors
- Your data is not sold, rented or transferred to third parties for commercial purposes.
- It is accessible to Repair Mac Parts only to the extent necessary for each purpose, and is shared with the following service providers, acting as processors or as independent controllers: our hosting provider (Aut O’Mattic A8C Ireland Ltd.), our payment providers, our carriers, our email and newsletter provider, and our bot protection provider.
- Each processor is bound by a contract compliant with Article 28 of the GDPR and acts only on the instructions of Repair Mac Parts.
- Your data may also be disclosed to the competent administrative or judicial authorities where required by law, in particular in connection with the statutory register referred to in Article 7 of the trade-in terms and conditions.
Article 6: Transfers outside the European Union
- The website is hosted within the European Union.
- Some of our service providers may access data from a country outside the European Union, in particular for technical support purposes.
- These transfers are subject to the safeguards provided for in Chapter V of the GDPR: an adequacy decision by the European Commission, or standard contractual clauses together with supplementary technical measures.
Article 7: Cookies and trackers
- Cookies that are strictly necessary for the website to function are set without prior consent, in accordance with Article 82 of the French Data Protection Act.
- Analytics cookies and, where applicable, third-party trackers are only set after you have given your consent via the banner displayed on your first visit.
- You can change or withdraw your choice at any time. Refusing is as easy as accepting and does not prevent you from browsing the website.
Cookies and similar technologies
Only essential cookies are used without your consent. The others are used only if you accept them, for the category you choose. Your choice is kept 6 months, then we ask you again. You can change it at any time: Manage cookies
If your browser sends the Global Privacy Control signal, advertising cookies stay off. Refusing cookies does not prevent you from using the site.
Essential
Needed for the site to work: cart, account, payment, security and the memory of your choices. Always on.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
WordPress.com CDN |
Automattic | Shows content hosted by this service, without cookies. | No cookie |
__cf_bm |
Cloudflare | Protects the site against bots and attacks. | 1 day |
__cflb |
Cloudflare | Protects the site against bots and attacks. | Session |
_cfuvid |
Cloudflare | Protects the site against bots and attacks. | Session |
cf_clearance |
Cloudflare | Protects the site against bots and attacks. | 1 year |
_GRECAPTCHA |
Protects the site against bots and attacks. | 6 months | |
__stripe_mid |
Stripe | Processes the payment securely and prevents fraud. | 1 year |
__stripe_sid |
Stripe | Processes the payment securely and prevents fraud. | Session |
Preferences
Remember your choices and show content from other services (videos, maps, chat).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
Trustindex |
Trustindex | Shows the reviews of our customers. | No cookie |
Audience measurement
Count visits and pages viewed to improve the site.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
Jetpack Stats |
Automattic | Measures the audience: pages viewed, visit sources and sales, to improve the site. | No cookie |
Advertising
Measure the results of our ads and show you our ads on other sites.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
sbjs_* |
WooCommerce | Remembers where your visit came from (search, ad, e-mail) to attribute the order to it. | Session |
Article 8: Trade-in data
- For trade-ins, the collection of your identity document details is a legal requirement. Article 321-7 of the French Criminal Code requires any business whose activity includes selling second-hand goods, or goods acquired from persons other than those who manufacture or deal in them, to keep a daily register enabling the item and the person who sold it to be identified.
- This information is not used for any other purpose and is disclosed only to the authorities entitled to request inspection of the register.
- Storage media found in traded-in equipment are systematically and securely wiped. Repair Mac Parts does not access the data they contain and does not view, copy or extract any of it.
Article 9: Fraud prevention and automated processing
- To protect the website and its users against automated account creation and misuse, certain technical signals are analysed automatically, which may lead to an account being restricted or suspended.
- This analysis is based on objective technical criteria and not on any assessment of you as a person.
- In accordance with Article 22 of the GDPR, you may at any time request that the decision be reviewed by a human, express your point of view and contest the decision by contacting us via the website’s help centre.
Article 10: Data security
- We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction: encrypted communications (HTTPS), password encryption, access restrictions, regular backups and security updates.
- As no method of transmission over the Internet or electronic storage is completely secure, we cannot guarantee absolute security.
Article 11: Your rights
You have the following rights over your personal data:
- The right of access and the right to obtain a copy of the data concerning you.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure, subject to the statutory retention obligations that apply to us.
- The right to restriction of processing and the right to object, in particular to direct marketing.
- The right to portability of the data you have provided to us.
- The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
- The right to set instructions regarding what happens to your data after your death.
You can exercise these rights via the website’s help centre. We will respond within one month, which may be extended by two months for complex requests. Proof of identity may be requested where there is reasonable doubt as to the identity of the person making the request.
Article 12: Changes to this policy
- We reserve the right to amend this policy at any time, in particular to reflect legal or technical developments or changes to our services.
- Any changes will be indicated by updating the date shown below. In the event of a substantial change, you will be notified by appropriate means.
- We encourage you to check this page regularly to stay informed about our privacy practices.
Last updated: 04/08/2026