Privacy Policy

Privacy Policy

HEAVYTEX — Last updated: September 2026

This Privacy Policy describes how HEAVYTEX collects, uses, stores and protects the personal data of users and customers of the heavytex.com website.

HEAVYTEX processes personal data in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”), the amended French Data Protection Act (Loi Informatique et Libertés), and other applicable provisions relating to the protection of personal data.

1. Data Controller

The data controller responsible for the personal data collected on the website is:

HEAVYTEX
Société par actions simplifiée (SAS)
14 avenue Georges Clemenceau
94300 Vincennes – France
Email: info@heavytex.com
SIRET: 105 298 327 00013

2. Personal Data Collected

Depending on how the website and its services are used, HEAVYTEX may collect the following categories of personal data:

  • first and last name;
  • email address;
  • telephone number;
  • billing and delivery address;
  • information relating to the customer account;
  • information relating to orders, payments, deliveries, returns and complaints;
  • professional information concerning Business Customers, including company name, SIRET number, intra-Community VAT number, job title or website;
  • history of communications with HEAVYTEX;
  • information required for fraud prevention and transaction security;
  • IP address;
  • data relating to the browser, device used and browsing activity on the website;
  • data collected through cookies or other trackers under the conditions specified in the Cookie Policy.

HEAVYTEX ensures that it only collects data that is necessary for the purposes for which it is processed.

3. Payment Data

Payments made on heavytex.com are processed by the payment service providers available on the website.

The banking information required to process payment is transmitted directly to the relevant payment service provider in accordance with the technical arrangements implemented by that provider.

HEAVYTEX does not intend to store complete bank card details.

Information required to track transactions, such as payment status or transaction reference, may be retained for the purposes of order management, accounting, fraud prevention and the handling of any disputes.

4. Purposes of Processing

HEAVYTEX processes personal data in particular in order to:

  • create and manage customer accounts;
  • enable identification and login to customer accounts;
  • process and fulfil orders;
  • manage payments;
  • prepare and arrange deliveries;
  • manage returns, complaints and after-sales service requests;
  • manage Business Customer accounts and requests;
  • respond to information requests sent to HEAVYTEX;
  • manage customer relationships;
  • issue and retain invoices and accounting documents;
  • prevent and detect fraud and security incidents;
  • ensure the security of the website and information systems;
  • improve the operation of the website and the user experience;
  • compile website usage statistics where permitted;
  • send marketing communications where legally permitted;
  • comply with the legal, tax, accounting and regulatory obligations applicable to HEAVYTEX.

5. Legal Bases for Processing

Depending on their purpose, the processing activities carried out by HEAVYTEX are based on one or more of the following legal bases:

Performance of a contract or pre-contractual measures, in particular for the creation and management of accounts, and the processing of orders, payments, deliveries, returns and requests relating to an order.

Compliance with a legal obligation, in particular with regard to invoicing, tax and accounting obligations or the retention of certain documents.

HEAVYTEX's legitimate interests, in particular for securing the website and transactions, preventing fraud, defending its rights or improving its services, provided that the rights and freedoms of the individuals concerned do not override those interests.

The consent of the data subject, where required, in particular for certain marketing activities or the use of certain cookies and trackers.

6. Marketing Communications

6.1 Consumer Customers

HEAVYTEX may send marketing communications by email or SMS to Consumer Customers where they have given their prior consent, except where applicable regulations allow marketing without obtaining new consent, including, under certain conditions, communications to existing customers concerning similar products or services.

Consent to receive marketing communications is separate from acceptance of the Terms and Conditions of Sale and must result from a positive action by the person concerned.

6.2 Business Customers

Marketing communications relating to the recipient's professional activity may be sent to Business Customers under the conditions permitted by applicable regulations.

In all cases, each recipient may easily and free of charge object to receiving further marketing communications, in particular by using the unsubscribe link included in the relevant messages.

7. Recipients of Personal Data

Personal data is accessible, to the extent necessary for the performance of their duties, to authorised persons within HEAVYTEX.

It may also be transmitted to service providers required for the operation of the website and the provision of services, including:

  • website hosting providers;
  • technical and IT service providers;
  • payment service providers;
  • service providers responsible for preparing or managing orders;
  • carriers;
  • customer relationship management tools;
  • messaging service providers;
  • security and fraud prevention service providers;
  • audience measurement service providers;
  • marketing or advertising service providers where their involvement is legally permitted.

Personal data may also be disclosed to administrative or judicial authorities or other authorised bodies where HEAVYTEX is legally required to do so.

HEAVYTEX does not sell the personal data of its users and customers.

8. Data Retention Periods

Personal data is retained only for as long as necessary for the purposes for which it was collected and, where necessary, is subsequently archived for the periods required or permitted by applicable regulations.

For information purposes:

  • data required to manage an order is retained for the duration of the contractual relationship and then archived for the periods necessary to comply with legal obligations and defend HEAVYTEX's rights;
  • invoices and accounting records are retained for the applicable statutory period, generally 10 years;
  • data used for marketing purposes is retained for the periods permitted by applicable regulations and recommendations;
  • customer account data may be deleted or archived after a prolonged period of inactivity, subject to any data that must be retained in order to comply with a legal obligation or to establish, exercise or defend legal claims;
  • technical logs and security data are retained for a period proportionate to security and incident prevention requirements;
  • data collected through cookies and trackers is retained for the periods specified in the Cookie Policy.

9. Security and Confidentiality

HEAVYTEX implements appropriate technical and organisational measures designed to protect personal data against, in particular:

  • accidental or unlawful destruction;
  • loss;
  • alteration;
  • unauthorised disclosure;
  • unauthorised access;
  • any other form of unlawful processing.

Access to personal data is limited to persons and service providers who need access to it in connection with their duties or assignments.

However, no information system or transmission of data over the Internet can provide absolute security.

10. Data Subject Rights

In accordance with applicable regulations and subject to the conditions provided for by the GDPR, each data subject has, in particular, the following rights:

  • the right to access their personal data;
  • the right to rectify inaccurate or incomplete data;
  • the right to erasure in the cases provided for by applicable regulations;
  • the right to restriction of processing;
  • the right to object to certain processing activities;
  • the right to data portability for certain data;
  • the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before such withdrawal;
  • the right, under the conditions provided for by French law, to define instructions regarding the handling of certain personal data after death.

Certain requests may be made directly from the customer account where the corresponding features are available on heavytex.com.

Any other request may be sent to: info@heavytex.com

In order to protect personal data, HEAVYTEX may request information to verify the identity of the person making the request where there is reasonable doubt as to their identity.

HEAVYTEX responds to requests within the time limits provided for by applicable regulations.

11. Complaints to the CNIL

Any data subject has the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French data protection authority, if they consider that the processing of their personal data does not comply with applicable regulations.

Website: www.cnil.fr

12. Transfers of Personal Data Outside the European Economic Area

Certain service providers used by HEAVYTEX may process personal data from a country located outside the European Economic Area.

Where such a transfer takes place, HEAVYTEX ensures that it is based on a mechanism recognised under the GDPR, including:

  • an adequacy decision adopted by the European Commission;
  • appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission;
  • any other legally permitted mechanism.

Additional information may be requested at info@heavytex.com.

13. Cookies and Other Trackers

The heavytex.com website may use cookies or other trackers that are necessary for its operation, as well as, subject to the user's choices and applicable regulations, trackers used in particular to measure audience or improve the services provided.

The conditions governing the use of these trackers, their purposes, retention periods and the options available to users to consent to or refuse them are described in a separate Cookie Policy available on the website.

Where user consent is required, the relevant trackers are only placed or accessed after such consent has been obtained.

14. Third-Party Websites and Services

The website may contain links to websites, social networks or services operated by third parties.

HEAVYTEX is not responsible for the processing of personal data carried out directly by these third parties in connection with their own services.

Users are encouraged to review the privacy policies of such third parties before providing them with personal data.

15. Changes to This Privacy Policy

HEAVYTEX may amend this Privacy Policy, in particular to reflect changes to the website, the processing activities carried out or applicable regulations.

The applicable version is the version published on heavytex.com on the date it is consulted.

Last updated: September 2026.

Product added to wishlist