Skip to content
Club du poisson

Privacy policy

Privacy Policy

This policy explains what personal data is collected when you use the delicery.com website, any of the online shops hosted on its subdomains or the Delicery mobile applications (together, the “Platform”). It also explains why this data is collected, who has access to it, how long it is kept and how to exercise your rights.

It applies to customers and visitors of the Platform, as well as to merchants who contact Delicery or apply from delicery.com.

  1. Who processes your data 1.1 Delicery

The Platform is published by DELICERY, a simplified joint-stock company (société par actions simplifiée) with share capital of €4,000, registered under number 987 951 597 RCS Bobigny, whose registered office is at 5, rue Pleyel, Bureau 3, 93200 Saint-Denis, France (“Delicery”, “we”). Contact for any question relating to your data: hello@delicery.com.

1.2 The Seller from whom you order

When you create an account or order from a merchant’s Shop (a “Seller”), your data is also transmitted to that Seller. Delicery and the Seller are then each a data controller for their own purposes:

Delicery processes your data to operate the Platform, collect payment, arrange delivery, provide customer service and, depending on your choices, send you its own communications. The Seller processes your data to prepare and fulfil your order, comply with its obligations as a merchant and, depending on your choices, send you its own communications.

Each is responsible for its own processing. The identity and contact details of each Seller appear on its Seller Profile, accessible in the footer of its Shop. To simplify your requests, you may send any request to Delicery, which will forward it to the relevant Seller if it concerns them.

  1. What data, for what purpose and on what basis Situation Data Purposes Legal basis Browsing the Platform IP address, device identifiers, pages viewed, connection data Operate and secure the Platform. Measure audience and improve user journeys, depending on your cookie choices Legitimate interest (operation, security). Consent (non-exempt audience measurement) Account creation and management Last name, first name, email, phone, delivery addresses and access instructions, encrypted password, preferences Create and manage your account, allow you to order from all Shops Performance of the contract Order, delivery and pickup Products ordered, amount, time slot, address, instructions, phone, order history Transmit the order to the Seller, arrange delivery, inform you of its tracking, issue the invoice Performance of the contract. Legal obligations (invoicing, accounting) Payment Transaction data. Card data is collected directly by Stripe Collect payment, refund, prevent fraud Performance of the contract. Legitimate interest (fraud prevention) Customer service and complaints Exchanges by email or messaging, photographs sent, order number Respond to your requests, handle complaints, refund Performance of the contract. Legitimate interest (quality of service) Delicery communications Email, phone, order history, preferences Inform you of news, new merchants and offers on the Platform Consent. Legitimate interest for services similar to those already ordered, unless you object Customer reviews Rating, comment, first name and initial, date Publish reviews, moderate them, allow the Seller to respond Legitimate interest (customer information) Seller communications Email, phone, order history with that Seller Inform you of the Seller’s products and offers Legitimate interest for products similar to those already purchased from that Seller, unless you object. Consent in other cases Merchant contact and application on delicery.com Last name, first name, business, trade, arrondissement, email, phone, message Respond to your request, review your application, contact you again Pre-contractual measures. Legitimate interest (business-to-business prospecting) Legal obligations and defence of rights Order data, invoicing and exchange data Comply with accounting and tax obligations, manage disputes Legal obligation. Legitimate interest

Mandatory fields are marked with an asterisk. Without them, we cannot process your request or your order.

  1. Your choices regarding marketing communications

You manage Delicery’s communications and those of each Seller separately. You may object to them at any time, free of charge:

by clicking the unsubscribe link in each email; by replying “STOP” to a text message; from your account preferences; by writing to hello@delicery.com.

Your objection to a Seller’s communications does not constitute an objection to those of Delicery, and vice versa. Messages relating to your orders (confirmation, tracking, invoice) continue to be sent, as they are necessary for their performance.

You may also register free of charge on the Bloctel telemarketing opt-out list (bloctel.gouv.fr).

  1. Who has access to your data 4.1 Recipients The Seller from whom you order, for the data needed for your order and, where applicable, for its communications. Delicery’s partner delivery companies, in particular Stuart, for your name, address, access instructions and phone number, for the sole purpose of delivery. Administrative or judicial authorities, where required by law. 4.2 Service providers acting on behalf of Delicery

Delicery uses service providers (processors) who process your data only on its instructions and are bound by confidentiality:

Provider Role Data location Vercel Inc. Hosting of the site and Shops United States and global network Stripe Payments Europe Ltd Secure payment and fraud prevention European Union and United States Resend, Inc. Sending of transactional emails United States Convex, Inc. Database and application services [● United States or European Union, to be confirmed] PostHog Inc. Audience measurement and observability, depending on your cookie choices [● European Union (Frankfurt) if the EU Cloud instance is used, to be confirmed] Intercom R&D Unlimited Company Messaging and customer service support Ireland and United States

Delicery does not sell your data and does not rent it to any third party.

  1. Transfers outside the European Union

Some providers are established in the United States. Where your data is transferred there, the transfer is covered by the provider’s certification under the EU-US Data Privacy Framework, where it exists. Failing that, it is covered by the European Commission’s standard contractual clauses. You may obtain a copy of these safeguards by writing to hello@delicery.com.

  1. Retention periods Data Period Customer account Until the account is deleted. An account inactive for 3 years is deleted, after prior notice Proof of contracts of €120 or more 10 years from delivery (Article L.213-1 of the Consumer Code) Opt-out list 3 years from your objection, to ensure it is respected Customer service and complaints For the duration of the handling of the request, then 3 years Customer reviews 24 months from their publication Merchant contacts and applications 3 years from the last exchange Cookies and trackers 13 months at most. The data collected is kept for 25 months at most Orders and invoices 10 years from the close of the financial year, for accounting obligations (Article L.123-22 of the Commercial Code) Marketing communications 3 years from your last order or last contact, or until you object

Bank card data is not kept by Delicery. It is kept by Stripe according to its own policy.

  1. Security

Delicery implements appropriate technical and organisational measures to protect your data: encryption of exchanges, access limited to authorised persons only, and selection of providers offering recognised security guarantees. In the event of a data breach presenting a high risk to you, you will be informed under the conditions provided by law.

  1. Your rights

You have the following rights over your data:

right of access and rectification; right to erasure; right to restriction of processing; right to portability, for data based on contract or consent; right to object, in particular to direct marketing, at any time and without giving a reason; right to withdraw your consent at any time; right to set directives regarding the fate of your data after your death.

To exercise them, write to hello@delicery.com or to DELICERY, 5, rue Pleyel, Bureau 3, 93200 Saint-Denis, France. Proof of identity may be requested in case of reasonable doubt. We respond within one month, extendable by two months if the request is complex.

You may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3, place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.

  1. Social media and advertising

Delicery is present on social media. No data concerning you is transmitted to a social network for advertising purposes without your consent, whether through trackers placed during your browsing or your email address transmitted in encrypted form. You manage these choices from the “Manage my cookies” link and your account preferences.

When you interact with Delicery on a social network, that network processes your data according to its own privacy policy.

  1. Minors

The Platform is intended for adults. Customer accounts are reserved for persons aged 18 or over.

  1. Changes to this policy

This policy may be updated to reflect changes in our services or in regulations. The version date at the top of the document indicates its last update. In the event of a significant change, you will be informed by email or by a message on the Platform.