Privacy — Tout est Tendance store
Updated: 30 October 2026.
1. Controller and scope
Caleb SENAT, French sole trader (EI), trading as Tout est Tendance, SIREN 509 745 634, is the controller for the processing described here. Contact: info@toutesttendance.com, +33 7 81 80 22 92, or 9 rue du Lieutenant Ohresser, 94130 Nogent-sur-Marne, France.
This notice covers professional accounts, module purchases, invoices, downloads and support at toutesttendance.com/boutique/. Custom project enquiries follow the separate quote form privacy notice. Information about a sole trader or company representative may be personal data.
2. Data and purposes
- Accounts and purchases: first and last name, email, authentication information, company, SIREN or SIRET, billing address, cart and products. We use this information to create the account, prepare and perform the purchase, deliver files and provide services. The basis is the contract or requested pre-contractual steps where you are a contracting party; for company representatives, our legitimate interest in managing the business relationship.
- Business verification: business number, public name and active status, professional declaration, verification result and date. This supports restricting purchases to business purposes. The bases are pre-contractual steps and our legitimate interest in checking information and protecting transactions.
- Order evidence: account, cart and order references, retained billing details, declaration, accepted terms and their version, content and dates. We use these to perform and evidence the contract, meet applicable obligations and defend the parties’ rights.
- Payments and invoices: amounts, currencies, transaction and refund references and statuses, accounting documents. This is necessary for the contract and accounting obligations. The store does not receive your PayPal password or full card details; payment fields are managed by the payment provider.
- Support and security: messages, necessary diagnostic attachments, technical connection information and events needed to operate and protect the service. The bases are the relevant services or obligations and legitimate interests in security, handling complaints and defending rights.
Required fields are identified in the forms. Without the information needed for the account, billing and business verification, the purchase process cannot be completed. Title is optional and date of birth is not requested. Do not add unnecessary information to addresses or support messages, or provide passwords or full card numbers.
Newsletter subscriptions and partner offers are not offered at launch. Account creation and acceptance of the terms do not constitute marketing consent.
3. Public business search and verification
The optional search button sends the SIREN or SIRET entered to the store server. It queries the public French Business Search API using that number, including all 14 digits for a SIRET search. It receives the public business name and may suggest a public address: the establishment address for a SIRET, or the clearly labelled head office address for a SIREN. The store returns only the name, requested number and useful address fields to the form. Your entered personal name, email, entered or edited address and password are not sent to this API. You choose which details to use and can edit them; manual entry remains available. The business address is optional at this stage. If provided, it is saved in your PrestaShop address book when the account is created and can be confirmed or changed during checkout.
Purchase verification is separate: it queries the API using the canonical nine-digit SIREN, without sending the address, full SIRET, email or declaration. A positive result can be used for a new payment start for at most 24 hours. This validity period is not a promise of deletion after 24 hours.
These automated checks facilitate direct purchasing. Missing results or an unavailable service do not prove that a business does not exist; some businesses are not included in public data. A search does not establish your authority to act for the business. Contact us if you encounter a difficulty or inaccurate information; a person will review the situation.
4. Recipients, hosting and transfers
The seller and authorised persons access information needed for their tasks. Hostinger provides hosting, backups and business email. Account plan details identify France for the server and Lithuania for backups. The Hostinger Email service used describes mailbox and backup storage in France and Germany. These locations do not guarantee that all routing or support access remains within the EEA.
Hostinger may use subprocessors and processing outside the EEA under its data processing addendum, which describes safeguards including standard contractual clauses for covered transfers. Its privacy policy also describes its own processing.
Payment uses PrestaShop Checkout Built With PayPal. Payment services receive necessary cart, identity, billing, amount, transaction and technical security information. PayPal also pursues its own payment, security and fraud prevention purposes and legal obligations; it does not act solely on the seller’s instructions. Its privacy policy identifies controllers according to your situation, recipients, retention, rights and international transfers, including binding corporate rules and other safeguards depending on the transfer. Information about PrestaShop’s own services is available in its privacy policy.
Authorities and authorised advisers or professionals may receive legally necessary information. Contact us for further information about recipients, applicable transfer safeguards and how to obtain a copy.
5. Retention and manual review
The seller follows the retention periods below through a manual monthly review.
- Accounts without purchases: two years after the holder’s last positive activity, followed by review for closure and deletion of information no longer needed, subject to an obligation or case justifying a limited archive.
- Accounts with purchases: the minimum information needed is retained while access to the purchased file must be provided. Expiry of support does not end that right. Other profile information is reviewed and reduced when no longer necessary. If you request account closure, we arrange a proportionate way to preserve this access.
- Orders and contractual evidence: during performance, followed by retention limited to applicable obligations and claims, generally within the five-year limitation period from the end of the relevant services. Evidence needed for an invoice follows its accounting period; a dispute or specific obligation may justify longer, targeted retention.
- Invoices and accounting records: ten years from the end of the relevant accounting year.
- Support: while handling the request, then two years after closure for routine follow-up. Unnecessary diagnostic copies are deleted within 30 days after resolution. Only exchanges needed as evidence or for a dispute follow the relevant case.
- Abandoned carts, expired checks and technical data: monthly review to remove information no longer needed for operation, transaction reconciliation, security or an ongoing case. Unreconciled transactions are checked before evidence is removed. Backups have their own rotation and are not permanent business archives.
Necessary archives have restricted access. Erasure requests take account of legal obligations and acquired rights; they do not entail deleting required invoices or rewriting order evidence.
6. Cookies and payment functions
PrestaShop uses a technical cookie for requested functions, including session, language, cart and security. Its configured lifetime is 480 hours, or 20 days from issue or renewal; session elements may end sooner. The business checkout component adds a random security identifier to this cookie to bind actions to the correct journey.
The Google Analytics, Facebook and Marketing with Google modules are disabled at launch. Payment functions may use Checkout and PayPal cookies, identifiers and technical information to present and secure the transaction; see the linked provider notices above. Only uses strictly necessary for a requested service may be exempt from consent. Any optional use requiring consent must have a separate, withdrawable choice. Accepting the terms of sale does not authorise optional tracking.
You can manage cookies through your browser. Blocking necessary elements may prevent login, cart or payment functions.
7. Your rights and contact
Subject to legal conditions, you have rights of access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests for reasons relating to your situation and withdraw consent where optional processing relies on it.
Email info@toutesttendance.com or write to the postal address above. Identity evidence is requested only where there is reasonable doubt. We respond within legal time limits, normally one month, and explain any justified extension permitted by law. You may complain to the CNIL.