Privacy Policy

Last updated: 18 July 2026

This Privacy Policy explains how Les Arts de la Grimpe Distribution SARL, trading under the Digital Climbing brand ("Digital Climbing", "we", "us" or "our"), collects, uses, shares and protects your personal data when you visit or use https://shop.digital-climbing.com/ (the "Website"), create an account, place an order, contact us or subscribe to our communications.

1. Data controller

The data controller is:

2. Personal data we collect

Depending on how you use the Website, we may collect the following categories of personal data:

• Identity and contact data: title, first name, last name, company name, billing and delivery addresses, email address and telephone number.
• Professional and tax data: customer type, company details and VAT identification number where relevant.
• Account data: account identifier, encrypted password and account preferences.
• Order and transaction data: products ordered, quantities, prices, discounts, order history, delivery information, invoices, returns, refunds and payment status. Payment card details are processed by the relevant payment service provider and are not stored in full by us.
• Communications: messages sent through our contact forms or by email, customer-service requests, complaints and any information you choose to provide.
• Marketing data: newsletter subscription status, consent records and communication preferences.
• Technical and usage data: IP address, device and browser type, operating system, connection logs, pages and products viewed, actions performed on the Website, referring URL and cookie identifiers.
• Reviews and other content: product reviews or other content you choose to submit.

Mandatory fields are identified as such when your data is collected. If you do not provide the required information, we may be unable to create your account, process your order, deliver your products or respond to your request.

3. Why we use your data and our legal bases

4. Cookies and similar technologies

We use cookies and similar technologies to operate the Website, keep your shopping basket active, secure your session, remember your preferences, measure Website performance and, subject to your choices, provide third-party content or personalised features.

Cookies that are strictly necessary for the operation and security of the Website do not require consent. Non-essential cookies and trackers are only placed or accessed after you have given consent where the law requires it. You can accept, refuse or change your choices at any time through the cookie settings available on the Website. You can also configure your browser to block or delete cookies, although doing so may affect certain Website functions.

Third-party services that may be enabled on the Website, such as YouTube, Vimeo, Google services or reCAPTCHA, may receive technical data including your IP address and may place their own cookies. Where consent is required, these services should only be activated after you have accepted the relevant cookie category.

5. Who receives your data

Your personal data is accessible only to persons who need it for the purposes described above. Recipients may include:

• authorised Digital Climbing staff;
• our hosting, website maintenance, IT, cybersecurity and email service providers;
• payment service providers, banks and fraud-prevention providers;
• carriers, logistics providers and customs intermediaries responsible for delivering your order;
• accounting, auditing, insurance and professional advisers;
• marketing, audience-measurement and content providers, subject to your consent where required;
• public authorities, courts, regulators or law-enforcement bodies where disclosure is required by law or necessary to protect our rights.

Our service providers process personal data only under our instructions and for the services entrusted to them, unless they act as independent data controllers under applicable law. We do not sell your personal data.

6. International data transfers

Some service providers or recipients may be located outside the European Economic Area (EEA), particularly when an order is delivered internationally or when we use global technology providers. Where personal data is transferred outside the EEA to a country that has not been recognised as providing an adequate level of protection, we use an appropriate safeguard, such as the European Commission's Standard Contractual Clauses, together with supplementary measures where necessary. You may contact us for further information about the safeguards relevant to your data.

7. How long we retain your data

We keep personal data only for as long as necessary for the relevant purpose and to comply with our legal obligations. In particular:

• Customer account data: for the duration of the account relationship, then normally for three years from your last activity, unless a longer period is required for another lawful purpose.
• Orders, invoices and accounting records: for ten years from the end of the relevant financial year, in accordance with French legal requirements.
• Prospect and newsletter data: until you withdraw your consent or unsubscribe, or after three years without active engagement, subject to our suppression-list obligations.
• Customer-service communications and complaints: for the time needed to deal with the request, then for the applicable limitation period if necessary.
• Evidence of consent or objection: for as long as necessary to demonstrate compliance and respect your preferences.
• Technical and security logs: for a period proportionate to the security purpose, unless a longer period is required to investigate an incident or comply with the law.
• Cookies: for the period stated in the cookie settings, subject to the maximum periods permitted by applicable law.

After these periods, data is deleted or irreversibly anonymised, unless it must be retained for legal proceedings or another legal obligation.

8. Your data-protection rights

Subject to the conditions laid down by the General Data Protection Regulation (GDPR) and applicable French law, you may have the right to:

• access your personal data and receive a copy;
• correct inaccurate or incomplete data;
• request the deletion of your data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object at any time to the use of your data for direct marketing;
• receive data you provided in a structured, commonly used and machine-readable format and, where applicable, transmit it to another controller;
• withdraw consent at any time, without affecting processing carried out before withdrawal;
• define instructions concerning the retention, deletion and communication of your personal data after your death, in accordance with French law;
• not be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you, except where permitted by law.

To exercise your rights, contact us at contact@digital-climbing.com or write to the postal address shown in Section 1. Please specify the right you wish to exercise and provide enough information for us to identify the relevant data. We may request proof of identity only where reasonably necessary to verify your request.

We will respond without undue delay and normally within one month. This period may be extended by two months for complex or numerous requests, in which case we will inform you.

9. Complaints

If you believe that your personal data has not been handled properly, please contact us first so that we can address your concern. You also have the right to lodge a complaint with the French supervisory authority:

10. Data security

We apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, secure connections, account-security measures, backups and the selection of service providers offering appropriate safeguards. No online service can, however, guarantee absolute security.

11. Children's privacy

The Website is intended for customers who are able to enter into a contract. We do not knowingly collect personal data directly from children for marketing purposes. If you believe that a child has provided us with personal data without appropriate authorisation, please contact us.

12. External links and third-party content

The Website may contain links to external websites or embedded third-party content. Those third parties are responsible for their own privacy practices. We encourage you to read their privacy policies before providing personal data or using their services.

13. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to the Website, our processing activities or applicable law. The current version and its update date will always be published on this page. Where a change materially affects how we process your data, we will provide additional notice where appropriate.

14. Contact

For any question about this Privacy Policy or the way we handle personal data, contact:

Digital Climbing – Privacy
Email: contact@digital-climbing.com
Postal address: Les Arts de la Grimpe Distribution SARL, 12 rue du Sauveur, 39130 Clairvaux-les-Lacs, France