Politique de confidentialité
Introduction
As part of its business activities, Heode, whose registered office is at 10 Chemin du Gué, 42700 Firminy, collects and processes information through its website, some of which is classified as ‘personal data’.
Heode places great importance on respecting privacy and uses this data responsibly and confidentially, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended French Data Protection Act No. 78-17 of 6 January 1978.
This document explains how we collect and use your personal data.
Data controller
The data controller is Bruno Masse, the company's legal representative.
Heode is a single-shareholder simplified joint-stock company, registered with the Saint-Etienne Trade and Companies Register under number 852 865 575, with share capital of €10,000.
Personal data collected
On https://heode.fr, we may collect two types of data.
1. Data you provide directly to us
- via a contact form;
- when you sign up for the newsletter;
- by contacting us directly by email;
- when you create your account;
- when you confirm an order (surname, first name, postal address, telephone number, email address).
2. Data collected automatically
With your consent, we collect information about how you browse the site: pages viewed, visit duration, IP address, browser type and version, device, clicks and scrolling. This information is collected using cookies and trackers.
This automatically collected data is collected only after you have given your consent.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your enquiries via the contact form | Legitimate interest / pre-contractual measures |
| Account creation, order processing and tracking, delivery, payment, invoicing | Performance of the contract |
| Sending the newsletter and special offers | Consent |
| Audience measurement and site improvement (Google Analytics, Microsoft Clarity) | Consent |
| Measuring the effectiveness of our advertising and retargeting (Google Ads, Facebook pixel) | Consent |
| Collecting customer reviews (Avis Vérifiés) | Legitimate interest |
| Accounting and legal obligations | Legal obligation |
The information requested when you create an account and place an order is required to process your order.
Your data is used by Heode and its data processors solely for these purposes. It is never sold.
Recipients and data processors
We use the following service providers to deliver our services.
- Brevo: sending marketing and transactional emails. https://www.brevo.com/fr/
- Payplug: secure online payments. You enter your bank details directly with Payplug. Heode cannot access or store them. https://www.payplug.com/
- Avis Vérifiés (Skeepers): collecting and publishing customer reviews after purchase. Your name, email address and order details are shared with Avis Vérifiés so it can invite you to leave a review. https://www.avis-verifies.com/
- Doofinder: improving the site's search function. https://www.doofinder.com/fr/
- Google Analytics: analysis of website traffic, with IP addresses anonymised. https://analytics.google.com/
- Google Ads: measuring advertising conversions and displaying adverts. https://ads.google.com/
- Microsoft Clarity: analysis of browsing behaviour (heatmaps, session recordings) to improve the site's usability. Sensitive input fields are masked. https://clarity.microsoft.com/
- Meta (Facebook / Instagram): signing in to your customer account via Facebook, and the Facebook pixel to measure the effectiveness of our advertising and show you relevant adverts. https://www.facebook.com/
- 772424: website hosting.
Transfers outside the European Union
Some service providers (Google, Meta, Microsoft) are based in the United States. Data transfers are subject to appropriate safeguards: a European Commission adequacy decision (Data Privacy Framework) or standard contractual clauses.
Cookies and trackers
A cookie is a file placed on your device that records information about how you browse. Except for strictly necessary cookies, cookies are placed only after you have given your consent.
| Cookie | Provider | Purpose |
|---|---|---|
| _ga, _gid | Google Analytics | Audience measurement |
| _gcl_au, Google Ads cookies | Google Ads | Measuring advertising conversions |
| _fbp | Meta (Facebook pixel) | Advertising measurement and targeting |
| _clck, _clsk, CLID, ANONID, MUID | Microsoft Clarity | Analysis of browsing behaviour |
| cookies-notice-accepted | Heode | Remembering your cookie preferences |
You can accept, reject or change your choice at any time using the cookie management banner or your browser settings. Rejecting cookies does not prevent access to the website.
Retention period
- Contact form: up to 3 years from the last exchange.
- Customer account: for the duration of the customer relationship, then 3 years.
- Orders and invoices: 10 years (accounting obligation).
- Newsletter: until you unsubscribe, which you can do at any time.
- Cookies and trackers: 13 months maximum (cookie acceptance: 6 months to 1 year).
- Audience measurement data: 25 months maximum.
- Customer reviews: 3 years
Your rights
Under the GDPR, you have the following rights regarding your data:
- access, rectification and erasure;
- restriction of processing;
- objection to processing, particularly for direct marketing purposes;
- data portability;
- withdrawal of your consent at any time;
- setting out instructions for what happens to your data after your death.
To exercise these rights, write to us:
- by email: [email protected]
- by post: Heode, 10 Chemin du Gué, 42700 Firminy, France
We may ask you to provide proof of identity. If you believe your rights have not been respected, you can lodge a complaint with the CNIL: www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
Last updated: October 2026.