Privacy policy

Legal notice
Energie Surf Sàrls", operating under the name "Cactus Moments", offers the sale of personalized products such as posters, mugs, bags and others. Energie Surf Sàrls is based in Luxembourg, with VAT number: LU33684569, the SIRET number: 98139567600019 and the SIREN number: 981395676.
We place great importance on protecting your data. This privacy policy governs how Energie Surf Sàrls, operator of the Cactus Moments platform, collects, uses, stores, and discloses user information on the website www.cactusmoments.com. We are committed to complying with data protection laws and regulations, including the General Data Protection Regulation (GDPR) and any other applicable national legislation.

1. Compliance with personal data protection legislation
We are committed to complying with data protection laws and regulations, including the General Data Protection Regulation (GDPR) and any other applicable national legislation.

2. Contact
For any questions regarding the terms and conditions, please contact us at the following email address: info@cactusmoments.com.

3. Purpose of personal data collection
The collection of personal data is required only for the purchase of online products or services.
4. Types de données collectées
In the case of a purchase, we collect information such as names, addresses, email addresses, phone numbers, and age. For the sole purpose of processing purchases, the payment provider will request information related to the Users' payment, such as the cardholder's name, card number, expiration date, and the credit card's security code. Please note that this data is not stored by Energie Surf Sàrls but by the payment provider (Stripe Payments Europe).<br/>We do not use cookies on our website.<br/>5. Use of personal data<br/>Personal data is used exclusively for providing services and the proper functioning of the website. It may be used to improve the site's quality, send commercial offers, and collect feedback.<br/>6. Order management for buyers<br/>Personal data is retained in accordance with applicable law, and any User may request the deletion of their data.<br/>We retain this personal and order data for a period of 6 months after your purchase date. This duration allows us to respond to potential after-sales service requests, manage refunds, and comply with our legal obligations regarding data retention.<br/>For payment processing, we use Stripe, a secure payment platform. When you make a payment on our site, your payment information is transmitted directly to Stripe, and we do not have access to your sensitive data such as credit or debit card numbers.<br/>7. Sharing of personal data<br/>We do not transfer personal data to third parties without express consent, except for the provision of services to sellers or subcontractors according to our instructions.<br/>Any User agrees that their personal data may be transmitted as part of the provision of services to sellers or the subcontractors listed below assisting Energie Surf Sàrls in providing services, including for payments and deliveries, as long as these subcontractors agree to process this information only according to Energie Surf Sàrls' instructions and comply with applicable data protection laws.<br/>List of subcontractors authorized to receive personal data related to the User:
• Stripe Payments Europe, Ltd (Prestataire du service de paiement électronique)
• Amazon Web Services et GitHub (Editeur de la plateforme)
• La Poste (Prestataire du service de livraison)
• Ovh et MongoDB (Prestataire d'hébergement des bases de données)
8. Protection of personal data
Energie Surf Sàrls implements appropriate security methods and devices to ensure protection against unauthorized access, alteration, disclosure, or destruction of personal identification data. These measures are taken within the scope of Energie Surf Sàrls' specific responsibilities in the context of the services provided.

9. Security and data transfer
Energie Surf Sàrls has implemented appropriate technical and organizational security measures to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, and other forms of illegal or unauthorized processing of personal data. It is the Users' responsibility to ensure that all personal data they transmit is done securely.
Regarding subcontractors or tools such as Stripe Payments Europe, there is a data transfer to third countries. However, the data processing procedures of these providers comply with the EU-US Privacy Shield Policy.

11. User rights
Each User has the right to access, modify, object to, erase, and transfer their personal data. They may also withdraw their consent at any time.

12. Changes to the privacy policy
Nous pouvons mettre à jour cette politique de confidentialité. Le cas échéant, Energie Surf Sàrls modifiera la date de la dernière mise à jour sur la présente page.

13. Acceptance of the privacy policy
Acceptance of this privacy policy is required to use our services. Consent is required when making a purchase.