Last updated: October 23, 2026
This policy explains how personal information is used when you visit lavtools.com, place an order or contact Lavtools.
1. Who is responsible for your information?
The data controller is BALION MARCIN, sole proprietor (EI), trading as Lavtools, 9 RUE CANY, 31300 TOULOUSE, France. SIREN: 990 171 829. For a privacy question or rights request, email support@lavtools.com or write to that address. You can also call +33 6 50 58 27 98. Support hours are Monday–Friday, 9:00 a.m.–6:00 p.m. Eastern Time; international calling charges may apply.
2. Information used by the store
- Order and contact details: name, billing and delivery addresses, email address, telephone number where provided, products purchased, order totals, delivery information and refund or exchange records.
- Payment records: the transaction reference, payment status and limited payment details made available by the payment provider. Use the provider’s secure checkout fields for card details; do not send them to us by email.
- Account details: information you supply if you choose to create a customer account, and the related order history.
- Customer-service messages: the information you include when asking about a product, order, return, complaint or privacy request.
- Technical information: IP address, browser/device information, request times and technical logs needed to operate and protect the website, together with store cookies described below.
We receive information from you when you use the store or communicate with us, and from payment and delivery providers when they update a transaction or shipment. Fields required to place an order are identified at checkout. Without the information needed for payment and delivery, we cannot complete the purchase. Optional information is not required.
3. Why the information is used
| Purpose | Legal basis under the GDPR |
|---|---|
| Answer product questions and prepare, fulfill, deliver or refund an order | Steps requested before a contract and performance of the contract |
| Provide requested account functions and order support | Performance of the contract; legitimate interests in providing customer service |
| Keep accounting, tax and transaction records and respond to lawful requests | Legal obligation |
| Secure the site, prevent misuse and investigate payment or delivery problems | Legitimate interests in protecting the store, customers and transactions |
| Handle complaints and establish, exercise or defend legal claims | Legal obligations where applicable; legitimate interests in resolving disputes |
Where we rely on a legitimate interest, we consider its impact on your rights and use information proportionately. We do not sell or rent customer personal information.
4. Who receives information?
Access is limited to the operator and service providers that need information for the relevant task: website hosting and maintenance, checkout and payment processing, order delivery, customer communications, and accounting or legal support. The site uses WordPress and WooCommerce and is hosted by Hostinger. We may disclose necessary records to public authorities where legally required, or to professional advisers to resolve a dispute.
Payment providers and delivery services may also process information under their own legal responsibilities and notices. Only the information needed for their service is shared.
5. International processing
The operator is in France and the store serves the United States, so order fulfillment and support involve processing personal information across those countries. Technology, payment and delivery providers may use infrastructure in other countries. Where a transfer outside the European Economic Area is subject to GDPR restrictions, the transfer must use a permitted basis, such as an applicable adequacy decision or appropriate contractual safeguards. Contact us for information about the safeguards relevant to your data and how to obtain a copy.
6. How long information is kept
- Order and service information: for the time needed to fulfill the order and handle delivery, returns, support and applicable legal rights.
- Accounting documents and supporting transaction records: archived for 10 years from the end of the relevant financial year to meet French accounting obligations.
- Other contractual correspondence and dispute records: retained in a restricted archive for the applicable limitation or recordkeeping period, generally up to 5 years after the relevant contract or matter ends, unless a longer legal requirement applies.
- Customer accounts: while the account is used, followed by deletion or deactivation after an appropriate period of inactivity; order records subject to mandatory retention are separated from ordinary account use.
- Technical logs: for the period necessary to investigate security or operational incidents, then deleted or anonymized, unless needed for a specific legal claim or obligation.
We limit access to archived records and do not retain all browsing or account information simply because an invoice must be kept. Information subject to an active dispute may be retained until the matter and related legal deadlines have ended.
7. Store cookies
The store uses cookies and similar storage needed to remember your cart, maintain a shopping session, support login when requested and protect the website. Necessary store cookies support the service you request. You can restrict or delete cookies through your browser settings; blocking essential cookies may prevent the cart, account or checkout from working properly.
8. Your rights
Depending on the applicable law and the circumstances, you may ask to access, correct, delete or receive a portable copy of your personal information, restrict its use or object to processing based on legitimate interests. Where processing depends on consent, you may withdraw it without affecting earlier lawful processing. These rights can be limited by obligations to retain records or protect other people’s rights.
Email support@lavtools.com to make a request. We may ask for proportionate information to verify your identity. We normally respond to GDPR requests within one month; if a lawful extension is necessary, we will tell you why and when to expect a response. You may complain to the French supervisory authority, the CNIL, or another competent supervisory authority.
9. Security and changes
We use appropriate technical and organizational measures to protect information and limit access to those who need it. No internet service can eliminate every security risk. Contact us promptly if you believe your account or order information has been misused.
When this policy changes, the updated version and date are posted here. Material changes affecting an existing use of your information will be communicated as required by law.