Privacy policy

Data controller

The controller is Alexandre Buathier, sole trader, trading as “BEWED”, operating the “Averazon” website, 59 rue de Ponthieu, Office 326, 75008 Paris, France (SIRET 804 119 675 00028). For data questions: “Contact us” page, or exercise rights from your account (below).

What data do we collect?

Depending on how you use the service, we may process:

• Account data: public nickname, email address, password (never stored in plain text), records of acceptance of terms of use, terms of sale and privacy policy where applicable.
• Order and delivery data: addresses, cart contents, order references, status history, invoicing when an invoice is issued.
• Drop participation: commitments on Team Drops, favourites, Magic Points and rank progression according to on-site rules.
• Referral: sponsor id in the URL (ref parameter), timestamps needed to credit a bonus on the referee’s first paid purchase as communicated.
• Technical data: security logs, language preference, strictly necessary cookies (see Cookies page).

Why we use this data

We use your data to create and manage your account, fulfil orders (commitments, payments, shipments, invoices), send service emails (account security, order tracking) and, where you consent or it is otherwise lawful, optional drop or shipping messages. Preferences editable in account settings apply to optional emails described there. We also protect security and fight fraud.

Legal bases

Processing relies in particular on contract performance (account and orders), legal obligation (invoicing, accounting evidence), consent where required (e.g. some non-essential cookies), and legitimate interest (security, limited internal technical analytics).

How long we keep data

We keep data as long as needed for the purposes described: account data while the account is active, then after deletion or prolonged inactivity for applicable limitation or claims periods; order, billing and payment data for ten (10) years where accounting or tax law requires it, otherwise for as long as needed to handle disputes; security and access logs for up to twelve (12) months unless a longer period is required or a security incident must be handled.

Who can access the data?

Data is available to authorised Averazon staff and, where relevant, the providers listed below, strictly for their tasks and under GDPR-compliant processor agreements where required.

Sub-processors and technical providers

Site and processing hosting: infrastructure operated by the publisher (see legal notice). Transactional email: SMTP relay or provider used to deliver messages (account, order, security). Online payments: payment provider integrated in checkout (card handling and refunds). Other tools (anti-fraud, logs) may be added; this policy will be updated accordingly.

Transfers outside the European Union

Some providers (especially payments or email) may process data from countries outside the European Economic Area. Where that happens, we rely on safeguards recognised by the GDPR (EU Commission standard contractual clauses and supplementary measures where needed) or on an adequacy decision.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, objection and portability where applicable, as well as the right to give instructions on what happens to your data after your death (in France). You may withdraw consent where processing is based on consent.

Sign in and open account settings: the “Personal data” section lets you download a JSON copy of your data and request account deletion within the limits shown (for example if non-cancelled orders require retention). You can also write to us via the Contact us page.

Cookies

We use cookies and similar technologies described on the Cookies page (session, security, language, referral).

Complaints

If you believe your rights are not respected, you may lodge a complaint with your local data protection authority (e.g. the CNIL in France).

Language and interpretation

This policy is drafted in French; a translation may be offered for convenience. If there is any divergence from a translation, the French text prevails for interpretation, without prejudice to mandatory GDPR provisions and applicable national law.