Privacy policy
Last updated: 23 September 2026
Who we are
The controller of your personal data is Rochebrune Investments, SASU operating the Alta brand, 45 avenue du 8 mai 1945, 69160 Tassin-la-Demi-Lune, France — SIREN 100 443 480.
For any question about your data: contact@altaateliers.com.
What data we collect
- Order data: first and last name, delivery and billing addresses, email, phone number if provided, products purchased, amount.
- Payment data: processed directly by our payment provider. We never have access to your card number.
- Account data: if you create an account, your login details and order history.
- Communications with us: the content of your messages, and the information you send us for a custom-made creation (location, GPX route, text).
- Browsing data: pages viewed, device, browser, IP address, collected via cookies (see below).
- Newsletter: your email address, if you subscribe.
Why we use it
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, handling returns and customer service | Performance of the contract |
| Producing a custom-made creation | Performance of the contract |
| Keeping invoices and accounting records | Legal obligation |
| Preventing fraud and securing the website | Legitimate interest |
| Measuring audience and improving the website | Consent (cookies) |
| Sending you our newsletter | Consent |
Who receives your data
Your data is never sold. It is shared only with the service providers our business requires:
- Shopify, which hosts the store and processes orders;
- our payment provider, for payment;
- carriers, for delivery;
- Google (Google Analytics, Google Merchant Center), for audience measurement and showing our products on Google, subject to your consent to cookies.
Some of these providers may process data outside the European Union, particularly in the United States. These transfers are covered by the safeguards provided by the GDPR (adequacy decision or European Commission standard contractual clauses).
How long we keep it
- Order and customer service data: 5 years after the last order (commercial limitation period);
- Invoices and accounting records: 10 years (legal obligation);
- Customer account: until deleted, or after 3 years of inactivity;
- Newsletter: until you unsubscribe, or after 3 years without interaction;
- Audience measurement cookies: 13 months maximum.
Cookies
The website uses cookies that are essential to its operation (cart, checkout, security), which do not require your consent. Audience measurement and advertising cookies are only set with your consent, collected via the banner displayed on your first visit. You can change your choice at any time from this banner or your browser settings.
Your rights
Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time, and to give instructions on what happens to your data after your death.
To exercise these rights, email contact@altaateliers.com or write to Alta, 45 avenue du 8 mai 1945, 69160 Tassin-la-Demi-Lune, France. We reply within one month.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.
Changes
We may update this policy. The date of the last update is shown at the top of this page.