Privacy policy

This page describes what personal data Primal Elite processes, why, for how long, and the rights you hold over it.

Controller

The data controller is Primal Elite, sole trader. For any request relating to your data, write to loic@primalelite.net.

What we collect

• Account. Email address, encrypted password for classic accounts, and the Telegram identifier and handle when the account is activated through our channel.
• Orders. Delivery address, order contents, amounts (authorised ceiling, weighed final total) and order history.
• Payments. The reference and payer details our bank transmits to us to match a SEPA transfer, or the transaction reference from the payment provider for cryptocurrency. No card data ever passes through the site.
• Order coordination. The Telegram conversation identifiers and the messages exchanged about your order.
• Invoices. The identity and address frozen on each issued invoice.
• Technical logs. Server logs including IP addresses, kept for security.

Why we process it

Order handling, delivery and follow-up rest on the performance of the contract. Invoicing and accounting records rest on our legal obligations. Server security and fraud prevention rest on our legitimate interest. We run no advertising profiling, we send no marketing emails and we never sell data.

Cookies

The site only sets technical cookies, which require no consent banner. They keep your session open, protect forms against forgery and remember your basket. There are no advertising or audience-measurement cookies.

Who receives data

Data is shared only with the providers the service requires. The host of the site (Linode, an Akamai company), our bank for matching transfers, the carrier for delivering your address, Telegram for account activation and order coordination, and the payment provider for cryptocurrency settlements. Some of these providers, Telegram among them, process data outside the European Union under their own safeguards.

How long we keep it

Account data is kept until you ask for its deletion. Order records and invoices are kept ten years under French accounting and tax obligations. Technical logs are kept for a limited time.

Your rights

You hold rights of access, rectification, erasure, restriction, objection and portability over your data. Write to the contact above and we answer within one month. You may also lodge a complaint with the CNIL (cnil.fr).

Security

Exchanges with the site are encrypted in transit in production, access to the data is restricted to the controller, and passwords are stored encrypted.

Working document — to be validated with a legal adviser before publication.