Legal Notice & Privacy Policy

Privacy Policy

Last updated: 9 July 2026

01 [ Data collected ]

Data provided voluntarily:

Newsletter: email address, collected via the sign-up form. Stored in our database and not shared with third parties without consent.
Reservations and orders: surname, first name, email address, billing address, delivery address, telephone number, details of the items or vehicles reserved or ordered, amount, status of the reservation or order, transaction history.
Payment: bank card data is collected and processed directly by our payment provider Stripe, for payments both online and at stands, and is never stored by J2R. We keep only the transaction confirmation and the payment method used.
Contact: any information voluntarily sent by email to [email protected].

Data collected automatically:

Browsing data: IP address, browser, operating system, pages viewed, visit duration via Google Analytics.
Cookies: see the Cookies section below.

02 [ Purposes and legal basis ]

Sending the newsletter and drop alerts: consent (Art. 6.1.a GDPR).
Managing reservations (deposit, priority rank, refunds): performance of the contract (Art. 6.1.b GDPR).
Managing orders (production, shipping, delivery, returns, guarantees): performance of the contract (Art. 6.1.b GDPR).
Accounting and tax obligations: legal obligation (Art. 6.1.c GDPR).
Prevention of payment fraud: legitimate interest (Art. 6.1.f GDPR).
Website traffic analysis: legitimate interest (Art. 6.1.f GDPR).
Technical operation of the website: legitimate interest (Art. 6.1.f GDPR).
Responding to contact requests: legitimate interest (Art. 6.1.f GDPR).

03 [ Third-party services ]

Stripe: processing of all payments, online and at stands. Data: identity, contact details, transaction data, card data (processed by Stripe only).
Carrier (order delivery provider): identity, delivery address, telephone, email.
Google Analytics 4: audience measurement. Data: anonymised IP, browsing, cookies.
Google Fonts: Host Grotesk font. Data: IP address.
Spotify: embedded player. Data: Spotify cookies.
OVH: hosting. Data: server logs.
jsDelivr, unpkg: JS libraries. Data: IP address.

These services may transfer data outside the EU. Google LLC and Stripe adhere to the EU-U.S. Data Privacy Framework. For any information on the safeguards governing these transfers: [email protected].

04 [ Cookies ]

Essential cookies: wordpress_* (WordPress session, session duration), wp-settings-* (interface preferences, 1 year).
Analytics cookies: _ga (Google Analytics identifier, 2 years), ga* (GA4 session state, 2 years).
Third-party cookies: sp_* (embedded Spotify player, variable duration).

You can manage your cookies through your browser settings.

05 [ Retention Periods ]

Newsletter email: kept until unsubscription or deletion on request.
Reservation and order data: for the duration of the contractual relationship, then ten (10) years for accounting records in accordance with Article L. 123-22 of the French Commercial Code.
Customer data for prospecting purposes: three (3) years from the end of the commercial relationship, in accordance with CNIL recommendations.
Analytics data: 26 months, based on GA4 default retention.
Server logs: retained for a maximum of 12 months.
Contact data by email: retained for 3 years from the last contact, in line with CNIL recommendations.

06 [ Your rights ]

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

Access: obtain confirmation of processing and receive a copy of the data.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion of the data.
Restriction: limit processing in certain cases.
Portability: receive the data in a structured and machine readable format.
Withdrawal of consent: withdraw consent at any time.
Objection: to object to processing based on our legitimate interest, on grounds relating to your particular situation.

To exercise your rights: [email protected]A response is provided within one month, which may be extended to three months in the case of a complex or numerous request. A complaint may be lodged with the CNIL (www.cnil.fr).