Privacy Policy
This Privacy Policy explains which personal data TWELVE CORP ("E1even THC") collects when you visit or order from this webshop, why we collect it, how long we keep it, and which rights you have under the EU General Data Protection Regulation (GDPR).
Data Controller
TWELVE CORP
Bureau 326, 59 Rue de Ponthieu, 75008 Paris, France
VAT/Tax ID no.: FR09978517472
Email: Vibestationeu@gmail.com
Phone: +33 6 03 90 79 89
Information We Collect From You
Order and contact details you provide at checkout: first and last name, email address, phone number, shipping address (street, city, postal code, country) and billing address if different.
Order information: the products ordered, quantities, order total, discount code used, currency, order number and order history.
Payment information: your card is processed directly by our payment provider. We receive only the payment status, payment method type (for example VISA or Mastercard) and the last digits of the card. We never see or store your full card number, expiry date or security code.
Messages you send us: the content of emails or contact-form messages, including the name and email address you use to write to us.
Age verification: your date of birth is entered in your browser only to confirm that you are 18 or older. We do not transmit or store it; only a local "verified" marker is saved in your browser.
Technical data: IP address, browser type and version, device type, language, pages visited and timestamps, collected by our hosting provider in server logs for security and troubleshooting.
Cookies and local storage: strictly necessary items such as your shopping cart, age-verification marker and session information. We do not use advertising cookies.
Why We Use Your Data and On What Legal Basis
To perform our contract with you: processing and delivering your order, handling payments, returns, refunds and warranty claims.
To comply with legal obligations: keeping accounting and tax records, and ensuring products are not sold to minors.
For our legitimate interests: preventing fraud and abuse, securing the website and improving our service.
With your consent: sending you marketing emails, where you have asked to receive them. You can withdraw consent at any time.
Who We Share Your Data With
Shipping carriers (DHL, UPS, Colissimo) receive your name, address, phone number and email so they can deliver your parcel and send tracking updates.
Our payment provider receives the data needed to process and secure your payment.
Our hosting, email and IT service providers process data on our behalf under written data-processing agreements.
Public authorities, where we are legally required to disclose information.
We do not sell your personal data, and we do not share it for advertising purposes.
International Transfers
Your data is primarily processed within the EU/EEA. Where a provider processes data outside the EU/EEA, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses.
How Long We Keep Your Data
Order, invoice and accounting records: retained for the statutory period required by French law (generally 10 years).
Customer service correspondence: up to 3 years after the last contact.
Marketing consent records and newsletter data: until you unsubscribe, and up to 3 years afterwards as proof of consent.
Server logs: typically up to 12 months.
Age verification: your date of birth is not retained; the local browser marker remains until you clear your browser storage.
Your Rights
You have the right to access your data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability, and to withdraw consent at any time.
To exercise any of these rights, email Vibestationeu@gmail.com. We respond within one month. We may ask you to confirm your identity before acting on a request.
If you believe we have not handled your data correctly, you may lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or with the supervisory authority in your country of residence.
Security
Our site is served over encrypted HTTPS connections, and access to order data is limited to staff who need it to fulfil your order. Payment data is handled entirely by our PCI-compliant payment provider.
Children
Our webshop is intended for adults aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. The current version is always published on this page.