Privacy policy

Last updated: 5 October 2026

This page explains, in plain terms, what personal data we collect when you use the wellputt.com/eu store, why we use it, who we share it with, how long we keep it and how to exercise your rights. It applies in accordance with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act ("Informatique et Libertés") of 6 January 1978.

1. Who is responsible for your data?

The controller of your data is Wellputt France SAS, a subsidiary of Wellputt USA Inc. (Florida, USA):

• simplified joint-stock company (SAS) with a share capital of €5,600;
• registration: RCS Bayonne 525 338 083 (EUID FR6401.525338083);
• EU VAT number: FR68525338083;
• registered office: 23 chemin de Cazenave, 64100 Bayonne, France;
• e-mail: contact@wellputt.com.

Wellputt has not appointed a data protection officer; if you have any question, write to contact@wellputt.com.

2. What data do we collect?

We collect the data you give us directly, and some technical data linked to your browsing:

• Your customer account: first and last name, e-mail address, password (stored only in encrypted form: we do not know it), date of birth if you choose to provide it.
• Your addresses and phone number: delivery and billing addresses, phone number (useful to the carrier).
• Your orders: products bought, amounts, invoices, delivery tracking, withdrawal, cancellation or return requests.
• Payment: we only know the payment status (accepted, declined, refunded). Your card details are entered on our payment provider's secure page and are never stored by Wellputt.
• Your exchanges with us: messages sent to customer service, conversations with our online assistant (chatbot), contact or quote request forms, including any attachments you choose to add.
• Your reviews of our products.
• Your newsletter subscription and e-mail preferences.
• The affiliate programme, if you take part: your contact details, the sales generated and the commissions.
• Your browsing data: cookies and trackers (see section 6), IP address and technical server logs.

Mandatory fields are marked in the forms. Without them, we cannot process your order or your request. Other information is optional.

3. Why do we use your data, and for how long?

Each use of your data relies on a basis provided for by the GDPR: performance of the contract (your order), a legal obligation, your consent, or our legitimate interest (a reasonable business interest that does not override your rights).

At the end of these periods, your data is deleted or anonymised. We never sell your personal data.

4. Newsletter and e-mails

If you subscribe to the newsletter (for example to receive the HELLO10 welcome code), we send you our news and offers. You can unsubscribe at any time, free of charge, using the link at the bottom of every e-mail, or by writing to contact@wellputt.com.

E-mails about your orders (confirmation, shipping, withdrawal) are not advertising e-mails: you receive them as long as you have an order in progress. You can refuse review requests at any time by writing to us.

5. Our online assistant (chatbot)

The assistant available on the site answers your questions about our products and your orders. It runs on an artificial intelligence model provided by Anthropic PBC (USA): the messages you write are sent to it to produce the answer. If you are signed in to your account, the conversation is linked to it.

We keep conversations for 12 months to follow up on your requests and improve our service. We advise you not to share sensitive information in it (health data, bank details, passwords). To talk to a person, write to contact@wellputt.com.

The chatbot and our forms are protected against spam by Google reCAPTCHA, which analyses some technical data (IP address, browsing behaviour) to tell a human from a robot.

6. Cookies

We use cookies that the site needs to work (cart, sign-in, language choice) and, only with your consent, audience measurement and advertising cookies. All the explanations, the list of cookies and their durations are in our cookie policy.

You can change your choice at any time with the "Manage cookies" link at the bottom of every page, or here: manage my cookies.

7. Who has access to your data?

Your data is accessible only to the members of the Wellputt team who need it for their work, and to the following providers, who act on our behalf and on our instructions:

• Brevo (Sendinblue SAS, France): sending order e-mails and the newsletter, managing contact lists;
• Société Générale – Sogecommerce (France): card payment;
• PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg): PayPal payment, offered through Sogecommerce; when you use your PayPal account, PayPal also applies its own privacy policy;
• OVH SAS (France): hosting of the site and its data;
• Anthropic PBC (USA): artificial intelligence model behind our online assistant;
• Google: reCAPTCHA spam protection on the chatbot and forms and, if you accept them, the audience measurement and advertising services listed in our cookie policy;
• Meta (Facebook, Instagram): only if you accept advertising cookies, as stated in our cookie policy;
• PrestaShop SA (France): technical services linked to the store software (PrestaShop Accounts, CloudSync);
• 2L Logistic (Mouguerre, France): our warehouse, which prepares and ships your orders and receives your returns;
• our partner carriers: delivery of your parcels (name, address, phone number, e-mail for tracking);
• Wellputt USA Inc. (USA), the group's parent company: customer service and management within the group;
• our management and accounting tools and our accountant.

We may also disclose data to administrative or judicial authorities when the law requires us to.

Our site contains links to other sites (social networks, YouTube and Vimeo videos). These sites have their own privacy policies, for which we are not responsible.

8. Transfers of data outside the European Union

Some recipients are located in the United States: Anthropic, Google, Wellputt USA Inc. and, if you accept advertising cookies, Meta. These transfers are covered by the EU–US Data Privacy Framework where the recipient is certified under it, and otherwise by the standard contractual clauses adopted by the European Commission. You can obtain information about these safeguards by writing to contact@wellputt.com.

9. Security of your data

We protect your data with appropriate measures:

• the whole site runs on HTTPS (encrypted connection);
• access to data is restricted to authorised members of the team and to the providers listed above;
• passwords are stored in encrypted (hashed) form;
• card payments are handled directly by our payment provider: Wellputt never has access to your card numbers.

10. Your rights

You have the following rights over your data:

• access: find out what data we hold about you and receive a copy;
• rectification: correct inaccurate or incomplete data;
• erasure: ask us to delete your data, unless the law requires us to keep it (invoices, for example);
• restriction: ask us to suspend the use of some data;
• objection: object to a use based on our legitimate interest and, at any time and without giving a reason, to direct marketing;
• portability: receive the data you gave us in a common format, to pass it on to another service;
• withdrawal of consent: at any time, for the newsletter or cookies, without affecting what was done before;
• post-mortem instructions: decide what happens to your data after your death (a right provided by French law).

How to exercise your rights. E-mail us at contact@wellputt.com, or write to Wellputt France SAS, 23 chemin de Cazenave, 64100 Bayonne, France. If we have reasonable doubts about your identity, we may ask you for proof. We reply within one month. This period may be extended by two months if the request is complex; we will let you know if so.

Complaints. If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr. You can also contact the data protection authority of the EU country where you live.

11. Children

Our store is not intended for children under 15. We do not knowingly collect data about them. If you believe a child has sent us data, write to us and we will delete it.

12. Changes to this policy

We may update this policy, for example if we change providers. The date of the last update is shown at the top of this page. If there is a significant change, we will let you know on the site or by e-mail.