Privacy & personal data

Data collected

Via the form: name, company, email, phone, country, estimated volume and message.

Purpose

To answer your business enquiry and manage the relationship.

Legal basis

Legitimate business interest (B2B outreach) and pre-contractual measures.

Retention

3 years maximum from the last contact.

Your rights

Access, rectification, objection and deletion of your data: write to contact@ostraregal.com.

Customer account and event requests

If you create an account or send an out-of-zone event request, we keep your name, email, phone number, the event's place, date and composition, for the sole purpose of organising the event. Each request is kept for 400 days after its last update; the account itself is kept until you ask for it to be deleted, at any time, by writing to us through the contact form. If you save delivery addresses in your account, they are kept there until you delete them or ask for the account to be deleted. Your account also shows the history of the orders placed with its email address; those orders remain kept as described under “Online orders”.

If you ask for an oyster bar quote by email, or start a booking without completing it, we keep your name, email address, phone number, and the location, date and details of the event for 90 days so that we can call you back; this data is then deleted automatically.

For a quote, we also keep, for the same 90 days, the company and address if you provided them, together with the quote itself and its details. The link and QR code on your quote reopen those details and the document: only share them with the people concerned.

When our team prepares an order at your request, the basket and the contact details you gave us are kept behind the link sent to you. That link stops working after 14 days. Your contact details are deleted as soon as the order is paid or the link is cancelled, and all the data at the latest 15 days after the order was prepared. Anyone you pass that link on to can read them.

E-mail pop-up: personal code and news

If you leave your e-mail address in the window offering a discount code, we keep that address, the date of your consent and the personal code sent to you. We use them to send you this code and, because you ticked the box provided for that purpose, Ostra Regal news. You can withdraw your consent at any time by e-mailing contact@ostraregal.com; your data is kept for 3 years at most from our last contact, then deleted.

Online orders

When you order oysters from the online shop, we collect your name, e-mail address, telephone number, delivery address or chosen pick-up point, the day of receipt, and the contents and amount of the order. This data is used to prepare, ship or hand over your order, to confirm it by e-mail, to reach you on the delivery day and to keep our accounts. Processing is based on the performance of the sales contract and on our legal obligations. Payment takes place on Stripe's secure pages: we neither receive nor store your card number.

This data is passed only to the service providers needed for the order: Stripe for payment, Vercel for hosting the site and recording orders, Odoo, our order management software, Google (Gmail) for sending e-mails, and the carrier France Express for delivery. It is not passed to any other third party.

Order data is kept for 10 years, the retention period for accounting records laid down by the French Commercial Code. You may exercise your rights of access and rectification at any time; deletion takes place at the end of that period.

Contact

contact@ostraregal.com

Audience measurement

We use PostHog, an audience-measurement tool hosted in the European Union. Without your consent the measurement stays anonymous: no cookie is stored, your IP address is not kept, and nothing lets us recognise you from one visit to the next.

If you accept, a cookie is stored and your visit is recorded in anonymised form (pages viewed, clicks, movements) so that we can see where the journey breaks down. The fields you fill in — name, email address, contact details — are hidden in the recording, and payment takes place on Stripe's secure pages, outside this site. Recordings are kept for the period set on our PostHog project, then deleted automatically.

Advertising: with your consent, we also use Google Ads (Google Ireland Limited) to find out which ads led to an order or a booking, and to show you our ads on other sites. Google cookies are then stored; without your consent, no Google script is loaded. We do not send Google your name, your email address or your postal address: only the pages viewed, the items added to the basket, and the amount and reference of the order.

You can withdraw your consent at any time: the “Manage cookies” link at the bottom of every page reopens the banner. Declining stops the recording and clears the cookie; the anonymous measurement carries on.