Privacy policy

This privacy statement was updated on 1 December 2025 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via https://pinoy-grocery.com. We recommend that you read this statement carefully. When we process your personal data, we comply with the requirements of privacy legislation. This means, among other things, that :

  • we clearly indicate the purposes for which we process personal data. We do this in this privacy statement;
  • we aim to limit our collection of personal data to that which is necessary for legitimate purposes;
  • we first ask for your explicit consent to process your personal data in cases where your consent is required;
  • we take appropriate security measures to protect your personal data, and we require the same of parties processing personal data on our behalf;
  • we respect your right to consult, correct or delete your personal data if you so request.

 

If you have any questions or would like to know exactly what data we hold, please contact us.

By using our site, you accept this confidentiality policy.

1. Purpose, data and retention period

We may collect or receive personal information for a number of reasons related to our business activities, including the following:

2. Data controller

Delmi Mart / Pinoy Grocery


Address: 2 bis square René Bertaudeau 49300 Cholet

E-mail : delmi@pinoy-grocery.com

We are responsible for processing the data collected on our site.

3. Personal data collected

Delmi Mart collects the following data when using the site and the online shop:

3.1 Order details (WooCommerce)

  • First name, surname

  • Delivery and billing address

  • E-mail address

  • Phone number

  • Order history

  • Products purchased

  • Order amount

  • Delivery method chosen

  • Payment method chosen

  • IP address

  • Browser technical data

This data is essential for preparing, dispatching and managing your orders.

3.2 Payment details

Payment by Stripe

When you choose Stripe, certain data is transmitted to Stripe :

  • Credit card information

  • Transaction amount

  • Anti-fraud information (IP address, browser)

Delmi Mart never stores your bank details.
Stripe acts as secure subcontractor, PCI-DSS compliant.

Stripe policy : https://stripe.com/privacy

 

Payment by PayPal

When you pay via PayPal, it collects :

  • PayPal account information

  • Transaction amount

  • Safety & anti-fraud data

Delmi Mart never receives your bank details.

PayPal policy : https://www.paypal.com/fr/webapps/mpp/ua/privacy-full

 

Payment by bank transfer

Data collected :

  • Full name

  • Order reference

  • Information from the transfer (name of the paying account holder)

No bank details are kept by Delmi Mart.

 

Cash payment (point-of-sale collection)

When paying in cash :

  • Surname, first name, order

  • Transaction amount

No bank details are collected.

3.3 Data sent to the carrier (DPD)

For the delivery of products, certain data are transmitted to DPD France :

  • Full name

  • Postal address

  • Telephone

  • E-mail address

  • Order number

  • Information required for delivery

This data is used exclusively for the transport and tracking of the parcel.

DPD policy : https://www.dpd.com/fr/fr/protection-des-donnees/

3.4 Analysis tools - Google Analytics

  • The site uses Google Analytics to analyse the audience and improve the user experience.

    Google may collect :

    • IP address (anonymised)

    • Navigation information

    • Visited pages

    • Time spent on the site

    • Browser and device technical data

     

    Google Policy : https://policies.google.com/privacy

4. Purposes of processing

We use your data for :

  1. Managing your order

  2. Preparing and dispatching your parcel via DPD

  3. Secure payment (Stripe / PayPal / bank transfer / cash)

  4. Managing customer service

  5. Managing the commercial relationship (history, refunds, returns)

  6. Improving the site and the user experience (Google Analytics)

  7. Securing transactions (anti-fraud, server security)

5. Legal basis for processing

Treatment is based on :

  • Performance of a contract (ordering, delivery)

  • Legitimate interest (site security, fraud prevention)

  • Consent (Google Analytics, cookies, newsletter)

  • Legal obligations (billing)

6. Data retention period

We disclose personal information if we are required to do so by law or court order, in response to a law enforcement agency, to the extent permitted by other provisions of law, to provide information, or for the purpose of investigating a matter relating to public safety.

If our website or organisation is taken over, sold or involved in a merger or acquisition, your data may be disclosed to our advisers and any potential buyer and will be passed on to the new owners.

We have concluded a data processing agreement with Google.

Google cannot use the data for any other Google service.

The inclusion of complete IP addresses is blocked by us.

  • Controls 5 years (legal obligation)

  • Bills 10 years (accounting obligation)

  • Customer data (account): as long as the account is active

  • Delivery details 3 years

  • Analytics cookies 13 months

  • Stripe / PayPal data duration defined by these service providers

  • Data collected for support 12 months

Customers may request that their data be deleted (see “Your rights” section).

7. Cookies

The site uses cookies to :

  • How the site works (WooCommerce)

  • Basket and sessions

  • Secure payment

  • Traffic analysis (Google Analytics)

 

An information banner allows you to accept or refuse non-essential cookies.

For more information on cookies, please refer to our Cookie policy.

8. Data security

We are committed to the security of personal data. We take appropriate security measures to limit misuse and unauthorised access to personal data. This ensures that only the necessary people have access to your data, that access to data is protected and that our security measures are regularly reviewed.

Delmi Mart is setting up :

  • HTTPS / SSL

  • Server firewall

  • Stripe & PayPal fraud protection

  • WooCommerce security

  • Limited access to administration

  • Encrypted backups

  • Infomaniak hosting RGPD compliant

9. Data sharing

We do not share any data with third parties, except in the following cases:

  • DPD carrier (delivery)

  • Stripe / PayPal (payment)

  • Host Infomaniak (hosting)

  • Google Analytics (anonymised statistics)

  • Legal obligations (public authorities)

No unnecessary data is transferred.

10. Your rights (RGPD)

You have the following rights:

  • Right of access

  • Right of rectification

  • Right of deletion

  • Right to object

  • Right to portability

  • Right to restrict processing

  • Right to withdraw your consent

  • Right to lodge a complaint with the CNIL

 

To exercise your rights:

E-mail : delmi@pinoy-grocery.com

11. Customer account

You can create an account on the site in order to :

  • Managing your personal information

  • View your order history

  • Tracking your deliveries

You can delete your account at any time.

12. Transfer outside the EU

As part of the use of certain services essential to the processing of orders (in particular Stripe and PayPal), certain personal data may be transferred outside the European Union, in particular to the United States.

These transfers are strictly regulated and are based on :

  • The European Commission's Standard Contractual Clauses (SCC), which guarantee a level of protection that complies with the RGPD ;

  • Stripe and PayPal comply with international security standards, in particular PCI-DSS for secure management of payment data ;

  • The additional guarantees put in place by these service providers (encryption, security audits, certifications, internal data protection policies).

 

Delmi Mart only entrusts personal data to service providers that offer an adequate level of protection and comply with European regulations.

13. Changes to this privacy statement

We reserve the right to amend this privacy statement. We recommend that you consult this confidentiality statement regularly to take note of any changes. We will also keep you actively informed wherever possible.

14. Accessing and modifying your data

If you have any questions or would like to know what personal data we hold about you, please contact us. You can contact us using the details below. You have the following rights:

  • You have the right to know why your personal data is needed, what will happen to it and how long it will be kept.
  • Right of access: you have the right to access your personal data known to us.
  • Right of rectification: you have the right at any time to add to, correct, delete or block your personal data.
  • If you give us your consent to process your data, you have the right to revoke that consent and have your personal data deleted.
  • Right to transfer your data: you have the right to request all your personal data from the data controller and to transfer it in its entirety to another data controller.
  • Right to object: you may object to the processing of your data. We will comply, unless there are grounds for doing so.

Make sure you always indicate clearly who you are, so that we can be sure that we are not modifying or deleting the data of the wrong person.

15. Making a complaint

If you are not satisfied with the way we handle (a complaint about) the processing of your personal data, you have the right to lodge a complaint with the data protection authority.

16. Contact details

Delmi Mart

2 bis square René Bertaudeau
49300 Cholet
E-mail : delmi@pinoy-grocery.com
Telephone number : +33 (0)6 73 52 30 46

Website : https://pinoy-grocery.com