Privacy Policy

Last updated: 23.02.2026

1) WHO WE ARE (DATA CONTROLLER)

Diggers Factory, France ("Diggers Factory", "we", "us") acts as the data controller for the processing described in this Privacy Policy.

  • Contact (support): contact@diggersfactory.com
  • Registered office: 10 Boulevard Arago, 75013 PARIS
  • Company registration: 813648714 RCS PARIS
  • VAT number: FR33813648714

Important note about artist/label stores: Some online stores are branded for artists/labels and operated on Diggers Factory infrastructure. Unless stated otherwise on the relevant store, Diggers Factory remains the controller for store operations (orders, payments, delivery, customer support, fraud prevention, compliance). Artists/labels may receive limited information (e.g., sales reporting, order details where needed for customer support) and may act as independent controllers for their own uses (e.g., their own marketing lists) if they collect data directly.

2) SCOPE

This Policy applies when you:

  • browse our websites and online stores,
  • purchase products, request support, create an account (if available),
  • subscribe to marketing communications (newsletter, alerts),
  • interact with our content and services.

3) PERSONAL DATA WE PROCESS

Depending on your interaction, we may process:

  • A. Identity & contact data: name, email, phone number, shipping/billing address.
  • B. Order & transaction data: items purchased, order history, invoices, payment status, returns/refunds.
  • C. Payment data: processed by secure payment providers; we do not store full card numbers.
  • D. Account data (if applicable): login details, preferences.
  • E. Customer support data: messages, complaints, attachments, call/chat logs (if used).
  • F. Technical data: IP address, device/browser data, logs, security events.
  • G. Cookies/trackers: only as permitted by your choices (see Cookie Policy and Cookie Settings).

4) WHY WE USE YOUR DATA (PURPOSES)

We process personal data to:

  • process and deliver your orders (checkout, payment, fulfilment, delivery),
  • manage returns, refunds, and after-sales service,
  • provide customer support and handle disputes,
  • secure our services and prevent fraud/abuse,
  • comply with legal obligations (accounting, tax, consumer law),
  • operate and improve our websites (performance, debugging, service quality),
  • send marketing communications (only when permitted and based on your choices),
  • measure advertising performance and improve marketing (only when permitted and based on your choices).

5) LEGAL BASES (EEA/UK/CH)

Where GDPR/UK GDPR/FADP applies, we rely on:

  • Contract: to provide the services and fulfill your order.
  • Legal obligation: accounting/tax obligations, consumer law, compliance requests.
  • Legitimate interests: security, fraud prevention, service improvement, essential service communications.
  • Consent: marketing emails where required; non-essential cookies/trackers; targeted advertising/analytics where required.

6) COOKIES & TRACKERS

We use a consent management platform ("CMP") to collect and store your cookie preferences. By default, non-essential cookies/trackers are not activated where consent is required, and you can change your choices at any time via "Cookie Settings" in the footer. See our Cookie Policy for details.

7) WHO WE SHARE DATA WITH

We may share personal data with trusted service providers, including:

  • Payment providers (e.g., Stripe / PayPal) for payment processing.
  • Logistics partners (warehouses, fulfillment, carriers) to deliver orders.
  • Hosting, security and IT providers to operate the services.
  • Customer support tools (ticketing, email, chat) to assist you.
  • Analytics and advertising partners (e.g., Google Analytics, Google Ads, Meta, Criteo) only as permitted by your cookie choices and applicable law.
  • Artists/labels (store partners) only to the extent necessary for store operations, reporting, or customer support, and under appropriate contractual safeguards.

8) INTERNATIONAL TRANSFERS

We may process data outside your country (including outside the EEA/UK). Where required, we implement appropriate safeguards such as Standard Contractual Clauses and supplementary measures.

9) DATA RETENTION

We keep data only as long as necessary for the purposes above:

  • Orders/invoices/accounting records: typically up to 10 years (subject to applicable law).
  • Customer support: for the duration of the request plus a limited archive period to manage disputes.
  • Fraud/security logs: limited periods proportionate to risk and legal requirements.
  • Marketing: until you unsubscribe or withdraw consent (and then in suppression lists to respect your choice).
  • Cookies: durations are shown in Cookie Settings.

10) YOUR RIGHTS

A. EEA/UK/CH:

You may request access, rectification, deletion, restriction, objection, and portability, and you may withdraw consent at any time. You may also lodge a complaint with your supervisory authority (France: CNIL; UK: ICO; Switzerland: FDPIC).

B. United States (state privacy laws):

Depending on your state, you may have rights to access, delete, correct, and opt out of targeted advertising and certain "sale/share" of personal data (as defined by law). You can manage advertising/analytics cookies via Cookie Settings.

11) MARKETING COMMUNICATIONS

If you subscribe to our newsletter you can unsubscribe at any time using the link in our emails. Transactional/service emails (order confirmations, shipping updates, support replies) are sent as part of our contract with you.

12) SECURITY

We use technical and organisational measures designed to protect your data (encryption in transit, access controls, reputable payment providers, monitoring, etc.). No system is 100% secure; if you suspect misuse, contact us.

13) CHILDREN

Our services are not directed to children. If you believe a child has provided us with personal data, contact us.

14) CHANGES TO THIS POLICY

We may update this Policy. The "Last updated" date indicates the current version.