Skip to content
Distributeur de BonheurHappiness vending

Home / Privacy policy

Privacy policy

Last updated: 20 October 2026

This policy is a solid base, written for the way the website actually works. It must be reviewed and approved by a lawyer before launch.

This page explains what personal data we collect on distributeurdebonheur.net and through our contact channels, why, who we share it with, where it is processed and what your rights are. It takes into account the European Union General Data Protection Regulation (GDPR), its UK version (UK GDPR) and China's Personal Information Protection Law (PIPL).

1. Data controller

  • [Company legal name in Chinese] / [Company legal name in English], a company registered in the People's Republic of China
  • Unified Social Credit Code (统一社会信用代码): [Unified Social Credit Code]
  • Registered address: [Registered address in China]
  • Legal representative: [Legal representative name]
  • Privacy contact: [Contact email]

As our company is not established in the European Union, we appoint a representative under Article 27 GDPR: [Name and address of EU representative]. For the United Kingdom: [Name and address of UK representative].

2. Data we collect

Through the quote or contact form (processed by Netlify Forms):

  • company name and registration number (and VAT number where relevant);
  • contact person's first and last name, job title;
  • email address and phone or WhatsApp number;
  • country and delivery address;
  • your product selection and your message.

Through WhatsApp and email: your number, your profile name, the content of our conversations (messages, photos, videos, documents) and their dates.

When you place an order: billing and delivery details, history of quotes and invoices, limited payment information (amount, date, transfer or transaction reference). No card data is collected or stored on the website: card payments are made on the secure page of a payment provider.

Technical data: our hosting provider Netlify automatically records technical logs (IP address, date and time, page requested, browser, operating system) to run and secure the website.

Cookies: advertising tools are used only with your consent. See our cookie policy.

We do not ask for sensitive data. Please do not include any in your messages.

3. Purposes and legal bases

  • Answering your requests and preparing a quote or pro-forma invoice: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • Performing the order (production, payment, shipping, customs, warranty, support): performance of the contract (Art. 6(1)(b)).
  • Keeping accounts and invoices, responding to authorities: legal obligations (Art. 6(1)(c)).
  • Preventing fraud, securing the website, handling disputes: legitimate interest (Art. 6(1)(f)).
  • Contacting you about our products as a business customer or prospect: legitimate interest, and you can object at any time and in every message.
  • Measuring the effectiveness of our advertising (Meta Pixel, Google tag, TikTok Pixel): your consent (Art. 6(1)(a)), collected through the cookie banner.

For individuals located in China, this processing relies on the equivalent bases under the PIPL (Article 13): necessity to conclude or perform a contract, legal obligations, or consent where consent is required.

We do not make any solely automated decisions that have legal effects on you.

4. Recipients

Your data is processed by our team in China. It is never sold. It is shared only with:

  • Netlify, Inc. (United States): website hosting, technical logs and form submissions;
  • WhatsApp / Meta (WhatsApp Ireland Limited for Europe, Meta Platforms, Inc. in the United States): if you contact us on WhatsApp;
  • our email provider: [Email service provider];
  • carriers, freight forwarders, customs brokers and inspection companies: for shipping and customs clearance;
  • our payment provider ([card payment provider, e.g. Airwallex]) and our bank: for card payments and bank transfers;
  • our accountant and advisers: for our accounting, tax and legal obligations;
  • partner factories: only the information needed for production and marking (for example the importer's name to be shown on the machine);
  • Meta, Google and TikTok: only if you accept advertising cookies;
  • authorities: where required by law.

5. International transfers

As our company is established in China, your data is transferred to and processed in China. Our hosting provider Netlify processes it in the United States. Carriers may also process it in transit and destination countries.

The European Commission has not adopted an adequacy decision for China. To protect these transfers, we rely on [safeguards used, e.g. the European Commission's Standard Contractual Clauses (Decision 2021/914) and, for the UK, the UK Addendum or IDTA], together with security measures. For Netlify: [safeguard used for Netlify, e.g. Standard Contractual Clauses in its data processing agreement, or EU-US Data Privacy Framework certification if applicable].

To be transparent: despite these safeguards, data processed in China or the United States may be accessible to the authorities of those countries under the conditions set by their law. Some transfers are also necessary to perform the contract you ask us to enter into (Article 49(1)(b) GDPR), for example to build and ship your machine from China.

For individuals located in China: when your data is sent outside China (for example to Netlify in the United States), we do so in line with the PIPL rules on cross-border transfers, in particular where the transfer is necessary to conclude or perform a contract to which you are a party, and we ask for your separate consent where the law requires it.

You can obtain a copy of the safeguards in place by writing to [Contact email].

6. Retention periods

  • Quote requests that do not lead to an order and conversations with prospects: 3 years after the last contact.
  • Customer data: for the duration of the business relationship, then 5 years (limitation period), or longer in case of dispute.
  • Invoices and accounting records: for the period required by applicable accounting and tax rules ([statutory accounting retention period, e.g. 10 years]).
  • Form submissions stored by Netlify: deleted from the Netlify dashboard after [form retention period at Netlify, e.g. 12 months], once transferred to our sales records.
  • Hosting technical logs: according to Netlify's policy, for a limited period.
  • Cookie consent: 6 months (13 months maximum).

7. Security

The website is served over HTTPS. Access to data is limited to people who need it, with password-protected accounts and, where possible, two-factor authentication. As no system is infallible, we will inform you and the competent authorities of any data breach that poses a risk, as required by law.

8. Your rights

Depending on the law that applies to you, you have the following rights:

  • right of access to your data and to obtain a copy;
  • right to rectify inaccurate data;
  • right to erasure, unless we must keep the data (invoices, disputes);
  • right to object, in particular to marketing, at any time;
  • right to restriction of processing;
  • right to data portability for data you have provided;
  • right to withdraw your consent at any time (for example using the "Cookie settings" link at the bottom of each page), without affecting processing already carried out;
  • for French residents, the right to give instructions on what happens to your data after your death;
  • under the PIPL: the right to know and decide, to access, copy, correct and delete your data, to ask for an explanation of our processing rules and to transfer your data where the conditions are met.

9. Exercising your rights and complaints

Write to us at [Contact email] stating your request. We may ask you to prove your identity. We reply within one month, which may be extended by two months for complex requests, in which case we will tell you.

If you believe your rights are not being respected, you can lodge a complaint with the data protection authority of your country: in France, the CNIL (www.cnil.fr), in the United Kingdom, the ICO (ico.org.uk), in China, the competent offices of the Cyberspace Administration of China (CAC), or the authority in your own EU country.

10. Minors

The website is intended for businesses. It is not directed at people under 18 and we do not knowingly collect their data.

11. Data collected by the machines

Some machines (AI smart fridge with cameras, 4G telemetry, contactless payment) collect data when they are in operation. The customer who operates the machine is responsible for this processing towards its own users (information notices, legal basis, retention periods). When we access this data for technical support, we act on the customer's behalf. See also the compliance page.

12. Changes

We may update this policy, for example when we add a new tool. The update date is shown at the top of the page. If there is a significant change, we will say so on the website.

See also our legal notice and our cookie policy.