CROCO PRINT attaches great importance to the protection of your personal data. This policy explains what data we collect on crocoprint.fr, why, how long we keep it and what your rights are.
Data controller
- CROCO PRINT, SAS with a share capital of 500 €
- Registered office: 11 rue Sainte-Eugénie, 30000 Nîmes
- SIREN: 990 746 018
- Contact: contact@crocoprint.fr — 07 43 30 53 53
Data collected and purposes
Orders
When you order, we collect your surname, first name, e-mail address, billing and delivery postal address, and telephone number. This data is necessary to perform the sales contract: order processing, production, shipping, invoicing and after-sales service.
Legal basis: performance of the contract (article 6.1.b of the GDPR), and legal obligation for the accounting retention of invoices.
Files and artwork you send us
Our online designers let you upload artwork, logos and print files. These files are stored on our server to produce your order, and may contain personal data if you choose to include a photograph or personal text.
These files are stored under a random, unguessable name and are not publicly listed. They are accessible only to our production team, for the purpose of producing your order.
Legal basis: performance of the contract.
Customer account
If you create an account, we keep your login details and your order history so that you can view them and to make later orders easier. Legal basis: performance of the contract.
Product reviews
If you leave a review, your name, e-mail address, IP address and the content of your review are recorded, and the content is published on the product page. Legal basis: legitimate interest in informing other customers.
Contact form
The information sent via the contact form is used only to handle your request. Legal basis: legitimate interest in responding to enquiries.
Navigation
Technical data (IP address, browser type, pages visited) may be recorded to ensure the security and proper operation of the site. Legal basis: legitimate interest.
Recipients of your data
Your data is neither sold nor passed on to third parties for commercial purposes. It is shared only with the providers needed to fulfil your order:
- Payment providers (Stripe, PayPal) — bank details are entered directly with them and never pass through our servers.
- Carriers — name, delivery address and telephone, to deliver the parcel.
- Site host — for the technical storage of data.
Retention periods
- Order data and invoices: 10 years (legal accounting retention obligation).
- Files and artwork sent: kept while the order is processed, then archived for 12 months to allow an identical reprint, then deleted.
- Customer account: until deleted at your request, or after 3 years without activity.
- Contact requests: 3 years from the last exchange.
To check. The archiving period for artwork (12 months) is a suggested value: adjust it to your actual reprint practice, then delete this box.
Your rights
In accordance with the GDPR and the French Data Protection Act, you have the right of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to set guidelines on what happens to it after your death.
To exercise these rights, write to us at contact@crocoprint.fr. Proof of identity may be requested if there is any doubt about your identity. We reply within one month.
You can also lodge a complaint with the CNIL: www.cnil.fr — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
Cookies
The site sets strictly necessary cookies for its operation (session, basket content, security), which do not require your consent. Other cookies, in particular those linked to payment methods or audience measurement, are only set after your agreement via the consent banner, which you can change at any time.
Security
The site is accessible over HTTPS, passwords are stored in encrypted form, and the files you send us carry a random, unguessable name to prevent any access by simply trying addresses. Access to orders is restricted to authorised persons.
Transfers outside the European Union
Our payment providers may process some data outside the European Union, within the safeguards provided by the GDPR (standard contractual clauses or adequacy decision).
Changes to this policy
This policy may be updated to reflect changes to the site or to regulations. The date of the last update is shown below.
Last updated: 11 August 2026.