Privacy policy
This privacy statement was updated on 1 December 2025 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.
In this privacy statement, we explain what we do with the data we obtain about you via https://pinoy-grocery.com. We recommend that you read this statement carefully. When we process your personal data, we comply with the requirements of privacy legislation. This means, among other things, that :
- we clearly indicate the purposes for which we process personal data. We do this in this privacy statement;
- we aim to limit our collection of personal data to that which is necessary for legitimate purposes;
- we first ask for your explicit consent to process your personal data in cases where your consent is required;
- we take appropriate security measures to protect your personal data, and we require the same of parties processing personal data on our behalf;
- we respect your right to consult, correct or delete your personal data if you so request.
If you have any questions or would like to know exactly what data we hold, please contact us.
By using our site, you accept this confidentiality policy.
1. Purpose, data and retention period
We may collect or receive personal information for a number of reasons related to our business activities, including the following:
2. Data controller
Delmi Mart / Pinoy Grocery
Address: 2 bis square René Bertaudeau 49300 Cholet
E-mail : delmi@pinoy-grocery.com
We are responsible for processing the data collected on our site.
3. Personal data collected
Delmi Mart collects the following data when using the site and the online shop:
3.1 Order details (WooCommerce)
First name, surname
Delivery and billing address
E-mail address
Phone number
Order history
Products purchased
Order amount
Delivery method chosen
Payment method chosen
IP address
Browser technical data
This data is essential for preparing, dispatching and managing your orders.
3.2 Payment details
Payment by Stripe
When you choose Stripe, certain data is transmitted to Stripe :
Credit card information
Transaction amount
Anti-fraud information (IP address, browser)
Delmi Mart never stores your bank details.
Stripe acts as secure subcontractor, PCI-DSS compliant.
Stripe policy : https://stripe.com/privacy
Payment by PayPal
When you pay via PayPal, it collects :
PayPal account information
Transaction amount
Safety & anti-fraud data
Delmi Mart never receives your bank details.
PayPal policy : https://www.paypal.com/fr/webapps/mpp/ua/privacy-full
Payment by bank transfer
Data collected :
Full name
Order reference
Information from the transfer (name of the paying account holder)
No bank details are kept by Delmi Mart.
Cash payment (point-of-sale collection)
When paying in cash :
Surname, first name, order
Transaction amount
No bank details are collected.
3.3 Data sent to the carrier (DPD)
For the delivery of products, certain data are transmitted to DPD France :
Full name
Postal address
Telephone
E-mail address
Order number
Information required for delivery
This data is used exclusively for the transport and tracking of the parcel.
DPD policy : https://www.dpd.com/fr/fr/protection-des-donnees/
3.4 Analysis tools - Google Analytics
The site uses Google Analytics to analyse the audience and improve the user experience.
Google may collect :
IP address (anonymised)
Navigation information
Visited pages
Time spent on the site
Browser and device technical data
Google Policy : https://policies.google.com/privacy
4. Purposes of processing
We use your data for :
Managing your order
Preparing and dispatching your parcel via DPD
Secure payment (Stripe / PayPal / bank transfer / cash)
Managing customer service
Managing the commercial relationship (history, refunds, returns)
Improving the site and the user experience (Google Analytics)
Securing transactions (anti-fraud, server security)
5. Legal basis for processing
Treatment is based on :
Performance of a contract (ordering, delivery)
Legitimate interest (site security, fraud prevention)
Consent (Google Analytics, cookies, newsletter)
Legal obligations (billing)
6. Data retention period
We disclose personal information if we are required to do so by law or court order, in response to a law enforcement agency, to the extent permitted by other provisions of law, to provide information, or for the purpose of investigating a matter relating to public safety.
If our website or organisation is taken over, sold or involved in a merger or acquisition, your data may be disclosed to our advisers and any potential buyer and will be passed on to the new owners.
We have concluded a data processing agreement with Google.
Google cannot use the data for any other Google service.
The inclusion of complete IP addresses is blocked by us.
Controls 5 years (legal obligation)
Bills 10 years (accounting obligation)
Customer data (account): as long as the account is active
Delivery details 3 years
Analytics cookies 13 months
Stripe / PayPal data duration defined by these service providers
Data collected for support 12 months
Customers may request that their data be deleted (see “Your rights” section).
7. Cookies
The site uses cookies to :
How the site works (WooCommerce)
Basket and sessions
Secure payment
Traffic analysis (Google Analytics)
An information banner allows you to accept or refuse non-essential cookies.
For more information on cookies, please refer to our Cookie policy.
8. Data security
We are committed to the security of personal data. We take appropriate security measures to limit misuse and unauthorised access to personal data. This ensures that only the necessary people have access to your data, that access to data is protected and that our security measures are regularly reviewed.
Delmi Mart is setting up :
HTTPS / SSL
Server firewall
Stripe & PayPal fraud protection
WooCommerce security
Limited access to administration
Encrypted backups
Infomaniak hosting RGPD compliant
9. Data sharing
We do not share any data with third parties, except in the following cases:
DPD carrier (delivery)
Stripe / PayPal (payment)
Host Infomaniak (hosting)
Google Analytics (anonymised statistics)
Legal obligations (public authorities)
No unnecessary data is transferred.
10. Your rights (RGPD)
You have the following rights:
Right of access
Right of rectification
Right of deletion
Right to object
Right to portability
Right to restrict processing
Right to withdraw your consent
Right to lodge a complaint with the CNIL
To exercise your rights:
E-mail : delmi@pinoy-grocery.com
11. Customer account
You can create an account on the site in order to :
Managing your personal information
View your order history
Tracking your deliveries
You can delete your account at any time.
12. Transfer outside the EU
As part of the use of certain services essential to the processing of orders (in particular Stripe and PayPal), certain personal data may be transferred outside the European Union, in particular to the United States.
These transfers are strictly regulated and are based on :
The European Commission's Standard Contractual Clauses (SCC), which guarantee a level of protection that complies with the RGPD ;
Stripe and PayPal comply with international security standards, in particular PCI-DSS for secure management of payment data ;
The additional guarantees put in place by these service providers (encryption, security audits, certifications, internal data protection policies).
Delmi Mart only entrusts personal data to service providers that offer an adequate level of protection and comply with European regulations.
13. Changes to this privacy statement
We reserve the right to amend this privacy statement. We recommend that you consult this confidentiality statement regularly to take note of any changes. We will also keep you actively informed wherever possible.
14. Accessing and modifying your data
If you have any questions or would like to know what personal data we hold about you, please contact us. You can contact us using the details below. You have the following rights:
- You have the right to know why your personal data is needed, what will happen to it and how long it will be kept.
- Right of access: you have the right to access your personal data known to us.
- Right of rectification: you have the right at any time to add to, correct, delete or block your personal data.
- If you give us your consent to process your data, you have the right to revoke that consent and have your personal data deleted.
- Right to transfer your data: you have the right to request all your personal data from the data controller and to transfer it in its entirety to another data controller.
- Right to object: you may object to the processing of your data. We will comply, unless there are grounds for doing so.
Make sure you always indicate clearly who you are, so that we can be sure that we are not modifying or deleting the data of the wrong person.
15. Making a complaint
If you are not satisfied with the way we handle (a complaint about) the processing of your personal data, you have the right to lodge a complaint with the data protection authority.
16. Contact details
Delmi Mart
2 bis square René Bertaudeau
49300 Cholet
E-mail : delmi@pinoy-grocery.com
Telephone number : +33 (0)6 73 52 30 46
Website : https://pinoy-grocery.com