Version in force as of 25 July 2026. Version 1.0.
This policy describes how JET Company, operator of the website terrassexpert.com, collects and processes the personal data of its customers, prospects and visitors, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (hereinafter the "GDPR") and the amended French Data Protection Act No. 78-17 of 6 January 1978 ("Informatique et Libertés").
1. Data controller
The data controller is:
- JET Company, French single-shareholder simplified joint-stock company (SASU)
- Registered office: 3 rue de la Boudrelle, 59181 Steenwerck, France
- RCS Dunkerque 999 513 054 — SIRET 999 513 054 00018
- Represented by Mr Joachim TERRIER, President
- Contact: contact@terrassexpert.com
Given the nature and volume of its processing operations, JET Company is not required to appoint a data protection officer within the meaning of Article 37 of the GDPR. Any question relating to data protection may be sent to the contact address above.
2. Data collected
2.1 Data you provide to us
- Identification data: title, surname, first name, email address, password (stored in irreversibly encrypted form), date of birth where applicable.
- Contact and delivery data: billing and delivery postal address, telephone number, information on access to the delivery location (floor, door code, heavy goods vehicle access constraints, instructions for the driver).
- Professional data (professional customers): company name, SIRET number, intra-Community VAT number, job title.
- Order and billing data: products ordered, amounts, delivery method, purchase history, invoices, credit notes.
- Payment data: full bank details are never collected or stored by JET Company. They are entered directly in the secure environment of our payment service providers. We only keep the type of payment method, the last four digits of the card number where applicable, and the status and reference of the transaction.
- Data relating to exchanges: content of messages sent via the contact form, by email or by telephone, attachments (site photographs, annotated delivery notes), after-sales service requests.
- Reviews and published content: where applicable, product reviews, ratings and photographs of completed projects.
2.2 Data collected automatically
- IP address, session identifier, connection data and technical logs.
- Device type, operating system, browser, screen resolution, language.
- Browsing data: pages viewed, products viewed, additions to cart, checkout journey, traffic source, length of visits.
- Tracker identifiers (cookies and similar technologies), under the conditions described in Article 8 and in the Cookie Policy.
2.3 Data from third parties: information provided by our carriers (shipping status, proof of delivery, reservations made), by our payment service providers (authorisation result, anti-fraud indicators) and, where applicable, by the marketplaces or price comparison sites through which an order may be placed.
3. Purposes, legal bases and retention periods
| Purpose | Legal basis | Retention period |
|---|---|---|
| Management of the customer account and personal area | Performance of the contract (Art. 6.1.b) | Lifetime of the account, then 3 years from the last activity (login, order or exchange) |
| Order processing, preparation, shipping and delivery | Performance of the contract (Art. 6.1.b) | Duration of the contractual relationship, then intermediate archiving |
| Invoicing, accounting and tax obligations | Legal obligation (Art. 6.1.c) | 10 years from the end of the financial year (Art. L. 123-22 of the French Commercial Code) |
| Retention of distance contracts of €120 or more | Legal obligation (Art. 6.1.c) | 10 years from delivery (Art. L. 213-1 of the French Consumer Code) |
| After-sales service, warranties, complaints and transport disputes | Performance of the contract and legitimate interest (Art. 6.1.b and 6.1.f) | Duration of the handling of the request, then until the expiry of the applicable limitation periods (5 years) |
| Management of contact and quotation requests | Pre-contractual measures and legitimate interest (Art. 6.1.b and 6.1.f) | 3 years from the last contact |
| Sending of the newsletter and commercial communications | Consent (Art. 6.1.a) or legitimate interest for customers regarding similar products (Art. 6.1.f and Art. L. 34-5 of the French Postal and Electronic Communications Code) | 3 years from the last contact initiated by the person, or until consent is withdrawn |
| Abandoned cart reminders | Consent (Art. 6.1.a) | Up to 30 days after the cart is abandoned |
| Audience measurement and traffic statistics | Consent (Art. 6.1.a) | Trackers: 13 months maximum. Data derived from trackers: 25 months maximum |
| Targeted advertising and campaign measurement | Consent (Art. 6.1.a) | Trackers: 13 months maximum |
| Publication and moderation of customer reviews | Consent (Art. 6.1.a) | 3 years from publication |
| Website security, fraud prevention and detection | Legitimate interest (Art. 6.1.f) | Connection logs: 12 months. Proven fraud files: 5 years |
| Proof of the collection and withdrawal of consent to trackers | Legal obligation (Art. 6.1.c) | 6 months for the choice expressed, in accordance with the recommendations of the CNIL (French data protection authority); proof kept for the duration of the processing concerned |
At the end of the active use periods, data are either deleted, irreversibly anonymised, or placed in restricted-access intermediate archiving where a legal obligation or the defence of legal claims so justifies.
4. Mandatory or optional nature of the data
The fields marked as mandatory in the website's forms correspond to the data strictly necessary for providing the requested service. If they are not completed, the order, delivery or processing of the request cannot be ensured. The other fields are optional and left to your discretion.
A telephone number is required for any order involving delivery on a pallet: palletised freight carriers make delivery conditional on a prior telephone appointment.
5. Data recipients
Your data are accessible to authorised persons within JET Company, as well as to the following categories of recipients, each having access only to the data strictly necessary for its task:
| Recipient | Role | Data concerned |
|---|---|---|
| o2switch (France) | Hosting of the website and databases | All website data |
| Payment service providers (including PayPal Europe S.Ã r.l. et Cie, S.C.A., Luxembourg) | Processing and securing of payments, fraud prevention | Identification, amount, transaction data |
| Carriers and logistics providers (DPD France, Colissimo / La Poste, XPO Logistics, Kuehne+Nagel, SPES Logistique) | Transport, appointment scheduling and delivery | Name, delivery address, telephone, access instructions, package contents |
| Google Ireland Limited | Audience measurement (Google Analytics 4), tag management (Google Tag Manager) and, where applicable, advertising (Google Ads) | Browsing data and tracker identifiers, subject to your consent |
| Addingwell (France) | Hosting of the server-side tag container, on the subdomain sst.terrassexpert.com | Browsing data passing through to authorised measurement tools |
| Usercentrics A/S — Cookiebot (Denmark) | Collection, management and proof of consent to trackers | Consent identifier, choices expressed, truncated IP address |
| Brevo (Sendinblue SAS, France) | Sending of transactional emails and, where applicable, commercial communications | Name, email address, telephone, open and click statistics |
| Meta Platforms Ireland Limited | Measurement and delivery of advertising campaigns, subject to their activation | Tracker identifiers and conversion events, subject to your consent |
| Chartered accountant, legal advisers, insurers | Accounting obligations, management of disputes and claims | Billing data and case documents |
| Administrative and judicial authorities | Response to legal requisitions | Strictly required data |
Service providers acting as processors within the meaning of Article 28 of the GDPR are bound by a contract governing the security, confidentiality and purpose of the processing. Your data are not sold, rented or transferred to third parties for their own marketing purposes.
6. Transfers outside the European Union
Our processing is mainly carried out within the European Union. However, some service providers, in particular Google and Meta, may transfer data to the United States in connection with the hosting or processing of their services.
These transfers are governed by the appropriate safeguards provided for in Chapter V of the GDPR, namely the European Commission's adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework (EU-U.S. Data Privacy Framework) where the provider is certified under it, and, additionally or alternatively, the standard contractual clauses adopted by the European Commission, together with supplementary technical measures.
The use of a server-side tag container hosted in France (Addingwell) makes it possible to filter and reduce the data sent to measurement and advertising tools, and to limit the extent of these transfers accordingly.
A copy of the applicable safeguards may be obtained on written request to contact@terrassexpert.com.
7. Security
JET Company implements appropriate technical and organisational measures to preserve the confidentiality, integrity and availability of data, in particular:
- encryption of exchanges using the TLS protocol (HTTPS) across the entire website;
- storage of passwords as irreversible cryptographic hashes;
- full outsourcing of payment data processing to PCI-DSS certified providers;
- management of authorisations and administrator access, strong authentication;
- regular backups, access logging, keeping application components and security patches up to date.
In the event of a data breach likely to result in a high risk to your rights and freedoms, you will be informed as soon as possible, in accordance with Article 34 of the GDPR, and the CNIL will be notified within 72 hours in accordance with Article 33.
8. Cookies and trackers
The website uses cookies and similar technologies. Trackers that are not strictly necessary for the operation of the website are only placed after your consent has been obtained, expressed via the banner displayed on your first visit. You can modify or withdraw your choices at any time via the preference management module accessible from the website.
Details of the trackers used, their purposes and their lifespan are given in the Cookie Policy.
9. Direct marketing
If you have consented to it, or if you are already a customer and the communication concerns products similar to those you have purchased, you may receive commercial communications by email or text message. Each communication includes a working, free unsubscribe link. You may also object at any time by writing to contact@terrassexpert.com.
If you have a French telephone number, you may also register free of charge on the French telephone marketing opt-out list Bloctel.
10. Automated decision-making and profiling
No decision producing legal effects concerning you or similarly significantly affecting you is taken solely on the basis of automated processing within the meaning of Article 22 of the GDPR. Audience measurement and advertising tools may carry out limited profiling for statistical and advertising purposes, under the conditions subject to your consent described in Article 8.
The anti-fraud systems used by our payment service providers may lead to the automatic refusal of a transaction. In this case, you can contact us to obtain a human review of the situation.
11. Minors
The website is not intended for minors. Creating an account and placing orders are reserved for persons of legal age with full legal capacity. We do not knowingly collect data relating to minors. If you find that such collection has taken place, please let us know so that we can delete the data.
12. Your rights
In accordance with Articles 15 to 22 of the GDPR and the French Data Protection Act, you have the following rights:
- Right of access: to obtain confirmation that data concerning you are being processed and to receive a copy of them.
- Right to rectification: to have inaccurate or incomplete data corrected.
- Right to erasure: to obtain the deletion of your data, subject to our legal retention obligations (in particular accounting and tax obligations).
- Right to restriction: to request the temporary freezing of the use of your data.
- Right to object: to object, on grounds relating to your particular situation, to processing based on our legitimate interest, and to object at any time and without giving reasons to direct marketing.
- Right to data portability: to receive the data you have provided to us in a structured, machine-readable format, or to request that they be transmitted to another controller.
- Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
- Right to set instructions regarding the fate of your data after your death, in accordance with Article 85 of the French Data Protection Act.
How to exercise your rights. These rights may be exercised by email to contact@terrassexpert.com or by post to JET Company, 3 rue de la Boudrelle, 59181 Steenwerck, France. In order to process your request, we may ask you for proof of identity if there is reasonable doubt about your identity. A reply will be sent to you within one month of receipt of the request, which may be extended by two months in the event of complexity or a high number of requests, in which case you will be informed.
Complaint. If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority (Commission nationale de l'informatique et des libertés) or with the supervisory authority of your EU Member State of residence:
CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr
13. Changes to this policy
This policy may be amended to take account of changes in our processing operations, our tools or the regulations. The applicable version is the one published on the website on the date of your consultation. In the event of a substantial change affecting your rights, you will be informed by any appropriate means.