Privacy policy
Last updated : 4 October 2026
Who is responsible?
The data controller is Thibaud Jacobs EI (the WAAS brand), 28 Rue de Lorraine, 57070 Metz, France, France. For any question about your data: hello@waas.club.
What data, and why?
- Your order: name, email, phone, address, pickup point, items ordered. To prepare, ship and follow up your order and answer your questions (performance of the contract).
- Payment: handled directly by Stripe. We never see or store your card details.
- Accounting: invoices and order data, to meet our legal obligations.
- Newsletter: your email, only if you sign up (footer form or the box at checkout), to tell you about new drops and WAAS news (consent, one-click unsubscribe).
- Audience measurement and advertising: Google Analytics and Meta cookies, only if you accept them (consent).
- Security: technical connection data, to protect the site and prevent fraud (legitimate interest).
How long?
- Order data and invoices: 10 years (accounting obligation).
- Customer data used to contact you again: 3 years after your last purchase.
- Newsletter: until you unsubscribe.
- Your cookie choice: 6 months, then we ask again. Analytics and advertising cookies last 13 months at most.
Who can see it?
Only us, and the providers who help us run the shop. We never sell your data.
| Provider | Role | Location |
|---|---|---|
| Stripe | Payment | EU / USA |
| Resend | Order emails | USA |
| Boxtal, Mondial Relay, Colissimo | Pickup points and delivery | France / EU |
| Cloudflare | Website hosting | EU / USA |
| Google Workspace | Our mailbox (hello@waas.club) | EU / USA |
| Brevo | Drop alerts newsletter (if you sign up) | France / EU |
| Google Analytics | Audience measurement (with your consent) | EU / USA |
| Meta (Facebook, Instagram) | Advertising (with your consent) | EU / USA |
Some providers may process data outside the European Union (notably in the USA). These transfers are covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
Cookies
The site uses strictly necessary storage (your bag, your language and your cookie choice, saved in your browser). Audience measurement (Google Analytics) and advertising (Meta) cookies are only set with your consent, asked on your first visit. Refusing is as easy as accepting, and you can change your mind at any time:
Your rights
You can access, correct or delete your data, restrict or object to its processing, get a copy (portability), withdraw your consent at any time and leave instructions for after your death. Email hello@waas.club: we answer within a month. If you think your rights are not respected, you can complain to the CNIL, the French data protection authority (cnil.fr).
