1. Data controller
The data controller is PULSO DIGITAL, a French limited liability company (SARL) with a share capital of 1 000 €, registered under number 106 504 657 (RCS Angers), whose registered office is located at 841 route du Bellay, 49650 Allonnes, France. For any question about your personal data, write to contact@pulsotech.store.
2. Data collected
- Order data: name, email address, delivery address, phone (optional) and details of the items ordered.
- Account data (optional): email address and hashed password.
- Browsing data: pages viewed, traffic source and estimated country, through internal analytics without IP address or advertising identifier (the country is inferred from the browser time zone, a non-identifying signal).
- Partner data (if you join the referral program): name or nickname, email address, payout address and chosen network, click history for your links and attributed orders, and commission amounts due and paid.
- Newsletter data (if you subscribe): email address, language, signup page and proof of your consent (date, anonymous hash of the IP address and browser agent). No other tracking is attached to this subscription.
3. Purposes and legal bases
- Performance of the contract: order processing, delivery and customer service.
- Legal obligations: retention of accounting and tax records.
- Legitimate interest: internal analytics and fraud prevention.
- Consent: measurement by third-party advertising partners.
- Performance of the partner program terms: tracking referrals, calculating and paying commissions.
- Legitimate interest: preventing referral fraud (artificial clicks) and securing payouts.
- Consent: sending the newsletter — you can withdraw it at any time using the unsubscribe link included in every email.
4. Analytics and cookies
Internal analytics uses an anonymous session identifier stored in your browser (localStorage), without IP address or third-party cookies. The country is never derived from your IP address: it is estimated from the browser time zone.
Advertising cookies (Facebook, TikTok, Google) are set only after your explicit consent, which you can withdraw at any time via the “Manage cookies” link in the footer.
The partner program uses one additional technical cookie: a click identifier (the “pt_ref” cookie, invisible to page JavaScript, lasting thirty (30) days) which attributes a visit and the resulting order to a partner, together with that partner's code. This cookie contains no personal data, is used neither for advertising nor for profiling, and is not shared with advertising partners. It applies only to visits coming from a referral link.
You can delete or block this cookie in your browser settings: the visit remains possible, but the referral is not counted for the partner.
5. Retention period
Order data is kept for as long as needed to manage the commercial relationship and comply with legal obligations (generally ten years for accounting records).
Analytics data is kept for a maximum of ninety (90) days.
Partner program data (including commission payouts) is kept for the duration of the relationship and then archived in accordance with applicable accounting requirements. Click identifiers are kept with the partner's history: they contain no data identifying the visitor.
Newsletter data is kept until you unsubscribe. A subscription that is never confirmed is deleted after thirty (30) days; an unsubscribed address is kept as a suppression list, so that we do not contact you again.
6. Data sharing
Your data may be shared with our providers: the hosting and email delivery service (Zeabur Inc., 131 Continental Drive, Suite 305, Newark, DE 19713, États-Unis) and the carrier responsible for delivery. Payment is made on a hosted payment page that we operate: the store never records any card or payment data. Your data is never sold to third parties.
Some of these providers are established outside the European Union: hosting and email delivery rely on Zeabur Inc. (United States), which involves a transfer of your data to the United States. The safeguards framing this transfer under Chapter V of the GDPR can be provided on request, by writing to contact@pulsotech.store.
If you take part in the partner program, commission payouts are sent to the address you provided, on the network you chose. Those transfers take place on a public, decentralised infrastructure: the destination address and the amount transferred are inherently publicly visible. No other data about you is recorded there. Detailed conditions are set out in the partner program terms.
7. Your rights
To exercise these rights, write to contact@pulsotech.store stating your request. A response will be provided within the legal timeframes.
If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
- Right of access, rectification and erasure.
- Right to restriction of processing and right to object.
- Right to data portability.
- Right to withdraw your consent at any time.
- Right to lodge a complaint with the competent supervisory authority.
8. Security
Appropriate technical and organisational measures protect your data: password hashing, two-factor authentication for administrator access, restricted database access and secure hosting.
9. Updates to this policy
This policy may be updated; the last updated date appears at the top of this document.