Privacy Policy

Last updated: [30/12/2025]

This Privacy Policy explains how Tecowheel SAS (“we”, “us”, “our”) processes your personal data when you visit https://vsett-shop.com/, place an order, create an account, or contact us. We are established in Paris, France and mainly serve customers in the EU.

1) Data Controller

Tecowheel SAS
Address: 200 rue de la Croix Nivert, 75015 Paris, FRANCE.
SIREN: 882722150 | EU VAT number : FR17882722150
Email: hello@vsett-shop.com

2) Data we collect

Depending on your interaction with the Website, we may collect:

  • Orders & delivery: name, email, phone number, billing/shipping addresses, products purchased, invoices, and delivery information.

If you provide a VAT number, we also process your VAT number and related data needed for VAT compliance (e.g., country and, where required, IP address as evidence).

  • Customer account: identifiers and information linked to your orders (e.g., name, email, addresses, order history).

  • Reviews, comments & media: content you submit (rating, text, name/pseudonym where applicable) and any images you upload. Please avoid uploading images containing embedded location data (EXIF GPS), as it may be extracted.

  • Support & communications: messages you send via contact forms, email, support tickets, or WhatsApp, and any information you choose to provide (including order references). We do not initiate WhatsApp conversations and we do not send marketing via WhatsApp.

  • Technical & security data: IP address, browser/device information (e.g., user agent), and logs used for security, fraud prevention, and troubleshooting.

  • Payments: payments are processed by payment service providers; we do not store full payment card details on our servers.

Mandatory vs optional data

When you place an order, certain information is required to perform the contract and comply with legal obligations (e.g., name, email, billing address, shipping address, and items ordered). If you do not provide this information, we will not be able to process your order, issue an invoice, or deliver products.

Other information is optional (e.g., a VAT number where applicable, reviews/comments, images you upload, and non-required details you choose to include in support messages). Not providing optional information will not prevent you from purchasing, but may limit certain features (e.g., VAT invoicing rules, publishing a review, or our ability to assist you efficiently).

3) Customer accounts

When you place an order, we process your personal data to perform the contract (order processing, payment, delivery, invoicing, customer support and after-sales service).

Optional customer account (checkbox at checkout)

During checkout, you may choose to tick the box “Create an account?”.

  • If you tick the box: we create an account at your request so you can access the Customer Space and retrieve your orders and invoices.
  • If you do not tick the box (guest checkout): no customer account is created and you will not have access to the Customer Space. You will still receive order-related emails at the email address provided during checkout (e.g., order confirmation, shipping updates). Your invoice will be sent by email when the order is completed (typically attached to the “Order completed” email).

Account deletion and legal retention

If you created an account, you can request deletion at any time. Deleting your account removes your login credentials and disables access to the Customer Space (including invoices and order history in that space).

However, whether you order as a guest or with an account, we are legally required to retain records relating to your transactions (including invoices and accounting/tax records) for 10 years under French law.

4) Why we use your data (purposes & legal bases)

We process your personal data for:

  • Order processing and delivery (including after-sales support) — performance of a contract.
  • Guest checkout communications (sending order-related emails such as order confirmation, shipping updates, and the “order completed” email with your invoice) — performance of a contract.
  • Account creation and management (optional, if you tick “Create an account?” at checkout), including linking your orders to your account and enabling access to the Customer Space — performance of a contract / steps taken at your request.
  • Legal and accounting compliance (invoicing, tax/accounting records) — legal obligation.
  • Tax compliance (VAT): determine the correct VAT treatment (including exemptions/reverse charge where applicable), validate VAT numbers, and keep evidence required by tax rules — legal obligation.
  • Website operation and security (fraud prevention, abuse prevention, troubleshooting) — legitimate interests.
  • Automated checks (anti-fraud): payment providers may use automated fraud prevention measures that can result in a payment being declined. We may also use anti-spam measures for reviews/messages. We do not make decisions with legal or similarly significant effects about you solely by automated means without human involvement. — legitimate interests (and, where applicable, performance of a contract for payment security).
  • Customer support (responding to requests) — performance of a contract and/or legitimate interests.
  • Marketing emails — see Section 6.

5) Cookies and similar technologies

We use a “Privacy by Design” approach. We aim to minimize cookies and prioritize strictly necessary cookies. Some pages include third-party features (such as embedded videos) that may set additional cookies or similar technologies.

Strictly necessary cookies (essential):

  • WooCommerce: cart and session management (some cookies are session-based; others may persist for a limited period depending on your browser settings and our site configuration).

  • Security & authentication: fraud/abuse prevention and login/session protection.

Checkout cookies (essential to complete payments securely):

  • Payment providers: payment gateways such as Stripe, PayPal, Klarna, and Apple Pay may set security cookies to prevent fraud and secure the payment transaction.

Embedded videos (YouTube): Some pages embed videos hosted by YouTube (Privacy Enhanced Mode). When these videos load, YouTube may receive technical data (such as IP address and device information) and may set cookies or similar technologies according to its policies.

6) Marketing emails (email only)

We send two types of emails:

A. Service emails (not marketing)

Emails necessary to manage your order/account/support (order confirmations, shipping updates, returns/warranty communications, security messages).

B. Marketing emails (max ~1/month)

We may send marketing emails only as follows:

  • Existing customers (similar products/services): if you purchase from us, we may email you about similar products (sales, discounts, new releases) or services from our company (based on the “soft opt-in” rule). Information regarding this use and your right to object is provided clearly at checkout, and you can unsubscribe at any time via the link in each email.

  • Prospects (no purchase): if you contact us without purchasing, we will send marketing emails only if you opt in via an optional checkbox.

7) Who we share data with

We never sell your personal data. We share data only with service providers necessary to operate our business, such as:

  • hosting and infrastructure providers (website delivery and security),

  • payment service providers such as Stripe, Klarna, Paypal, Alma (payments and fraud prevention),

  • shipping/logistics providers (delivery),

  • email service providers (service emails and marketing emails where applicable, including unsubscribe handling),

  • support/ticketing tools (customer support),

  • security/anti-abuse providers (spam/fraud prevention). Reviews/comments may be checked by an automated spam detection service. This may involve processing the content of your message/review and technical data such as IP address and browser information,

  • professional advisors / authorities where required (legal claims, audits, regulators/courts).

  • where necessary, VAT numbers may be checked with official validation services such as the EU VIES VAT number validation service.

8) International transfers

When we use providers outside the EU/EEA, we rely on appropriate safeguards (e.g., Standard Contractual Clauses and/or adequacy mechanisms such as the EU-U.S. Data Privacy Framework where applicable) and we limit transfers to what is necessary for the service.

9) How long we keep your data

  • Invoices and accounting records: 10 years as required by law.

  • VAT evidence: retained as required by applicable tax regulations (and generally aligned with our invoice/accounting retention periods).

  • Account data: kept as long as your account remains active. We consider an account inactive after 3 years without a login or purchase. 30 days before deleting an inactive account, we will notify you via email, giving you the opportunity to keep it open. Invoices will remain archived for 10 years regardless of account status.

  • Support tickets and communications: retained for the time needed for after-sales support (including warranty and any extended warranty) and for the management of disputes, then deleted or anonymized unless we must keep them longer for legal or security reasons.

  • Marketing: until you unsubscribe. We keep a suppression record to ensure we don’t email you again.

  • Security logs: retained for a limited period to ensure the security of the Website, prevent fraud/abuse, and investigate incidents (typically 6 months); certain logs may be kept longer when necessary for incident handling or legal claims.

  • Reviews/comments and uploaded media: kept until you request deletion (unless we must keep them for legal or dispute reasons).

10) Your rights

Subject to the conditions and limits set by the GDPR, you may request access, rectification, erasure, restriction, objection (including to marketing), and data portability in certain cases. Where our processing is based on your consent, you may withdraw your consent at any time (this does not affect the lawfulness of processing carried out before withdrawal).

In accordance with French law, you also have the right to define instructions regarding the storage, erasure, and communication of your personal data after your death.

To exercise your rights, please contact us at: hello@vsett-shop.com.

To protect your privacy, we may request information needed to verify your identity (and, if applicable, clarify your request). We will respond as soon as possible and in any event within one month, subject to extensions permitted by the GDPR for complex requests.

You may also unsubscribe from marketing emails at any time using the link included in our emails.

If you believe your rights are not respected, you have the right to lodge a complaint with the CNIL (France).

11) Security

We apply appropriate technical and organizational measures to protect personal data (access controls, monitoring, backups, and encryption in transit where applicable).

12) Changes

We may update this Privacy Policy from time to time. The latest version is published on this page with the updated date.