Privacy Policy

This English translation is provided for convenience only. In case of discrepancy, the French version prevails.

Data Controller

Data collected on nerokit.com is processed by BOISSEAU, whose full contact details appear in the legal notice. For any questions about your data, write to contact@nerokit.com.

Data Collected and Purposes

Data	Purpose	Legal Basis	Retention
Name, address, email, phone number	Order processing and tracking	Contract performance	3 years after the last purchase
Order history	Customer support, warranties	Contract performance	Duration of legal warranties
Billing data	Accounting obligations	Legal obligation	10 years
Email and basket contents entered at checkout, without a completed order	Abandoned basket reminder	Legitimate interest	Until the order is placed or you ask for deletion
Selected vehicle	Display of compatible parts	Legitimate interest	1 year
Browsing data	Audience measurement	Consent	14 months
Advertising identifiers	Advertising and remarketing	Consent	90 days

Banking data never passes through our servers: it is entered directly with our payment provider.

Recipients

Your data is neither sold nor shared. It is transmitted only to the service providers required to operate the site and fulfill your order:

• o2switch (France): website and database hosting.
• Stripe, PayPal and Klarna: payment processing and fraud prevention. hCaptcha (Intuition Machines): protection against automated fraud at checkout.
• Google Ireland Limited: audience measurement (Google Analytics), advertising (Google Ads), and product listing distribution (Merchant Center), only after your consent. If you have accepted advertising cookies, the email address, phone number and address of your order are sent to Google in an irreversibly encrypted form (hashing), solely to measure the effectiveness of our ads.
• The suppliers and carriers that ship the parts from their warehouses, located outside France, for shipping data only.

Transfers Outside the European Union

Google, Stripe, PayPal and hCaptcha may process certain data in the United States. These transfers rely on the EU-U.S. Data Privacy Framework, to which these companies adhere, and on the standard contractual clauses of the European Commission.

Shipping data (name, delivery address, phone number if provided) is passed to the suppliers that ship your order, some of which may be based outside the European Union. These transfers are necessary for the performance of the contract (article 49(1)(b) GDPR).

Cookies

A cookie is a small file placed on your device when you visit a site. On nerokit.com, they fall into three categories.

Strictly Necessary Cookies

Placed without your consent, as the site cannot function without them.

Name	Purpose	Duration
woocommerce_cart_hash, woocommerce_items_in_cart	Cart contents	Session
wp_woocommerce_session_*	Links the cart to your session	2 days
nk_vehicule	Remembers the selected vehicle to display only compatible parts	1 year
nk_consentement	Stores your cookie preferences	6 months
sbjs_*	Visit source, associated with the order	Session
__stripe_mid, __stripe_sid, m	Payment security and fraud prevention, placed at the time of payment	30 minutes to 1 year
hmt_id	hCaptcha, protection against automated fraud during checkout	30 days

Analytics Cookies

Placed only after your consent. They tell us which pages are visited and where visitors drop off, so we can improve the site.

Name	Provider	Duration
_ga, _ga_*	Google Analytics	13 months

Advertising Cookies

Placed only after your consent. They measure the effectiveness of our ads and allow us to show you relevant advertising.

Name	Provider	Duration
_gcl_au	Google Ads	90 days

Your Choices

On your first visit, a banner lets you accept all, decline all, or choose category by category. Declining has no impact on your browsing or your order. You can change your preferences at any time using the Manage cookies link at the bottom of every page. Until you give your consent, no analytics or advertising cookies are placed.

Your Rights

You have the right to access, rectify, erase, restrict, object to, and port your data. To exercise these rights, write to contact@nerokit.com from the email address used when placing your order. We respond within one month.

If you are not satisfied with our response, you may contact the Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, 75007 Paris, or file a complaint at cnil.fr.

Security

The site is served over HTTPS, passwords are stored in encrypted form, and administrative access is restricted. Payment data is never stored on our servers.