Data controller
The data controller is:
NOVASOFT TECH LLP
6 Eamer Crescent, RG41 1AJ, Wokingham, United Kingdom
Companies House: OC459443
Data protection contact: info@roghunting.com
Data collected
We collect different types of data depending on your interactions:
1. Registration data
- Identity: last name, first name
- Contact: email, phone (optional)
- Password (stored only as an Argon2id hash)
- For pros: business name, SIRET, VAT number, company address, K-bis (stored encrypted with AES-256-GCM, access restricted to admins)
2. Order data
- Delivery and billing addresses
- Purchase history and ordered products
- Payment methods (PayPal token only; never the card number)
3. Browsing data
- IP address (logged 90 days for security)
- Pages visited and products viewed (anonymised audience analysis)
- Technical and preference cookies (see our cookie policy)
Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Process your order | Contract performance | 10 years (accounting obligation) |
| Manage your account | Contract performance | Until account deletion |
| Send the newsletter | Consent | Until unsubscribe |
| Prevent fraud | Legitimate interest | 5 years |
| K-bis validation (pros) | Legal obligation | 5 years after end of relationship |
| Improve the site (analytics) | Consent (cookie) | 13 months |
Recipients
Your data is shared only with:
- Our technical subcontractors under DPA (Neon DB for database, Vercel for the frontend, Cloudflare R2 for media, Resend for email delivery)
- Our logistics partners for delivery (GLS, ShippingBo)
- Our payment provider (PayPal) for card payments
- Competent authorities upon judicial request
We never sell your data to third parties.
Transfers outside the EU
Some technical providers (Vercel, Anthropic for AI) may be located outside the EU. These transfers are governed by the Standard Contractual Clauses of the European Commission, in accordance with articles 46 and 47 of the GDPR.
Your rights
In accordance with the GDPR, you have the following rights:
- Right of access: request a copy of your data
- Right to rectification: correct inaccurate data
- Right to erasure ("right to be forgotten"), subject to legal retention obligations
- Right to restriction of processing
- Right to portability: retrieve your data in a structured format
- Right to object to processing based on legitimate interest
- Right to withdraw consent at any time for processing based on it
- Right to lodge a complaint with the CNIL
Exercising your rights
To exercise your rights, contact us:
- By email: info@roghunting.com
- By post: see address at the top of the page
- From your customer area: Security section → Download my data
We respond within a maximum of 1 month (extendable by 2 months for complex requests). The response is free of charge unless the request is manifestly unfounded or excessive.
Security
We implement technical and organisational measures to protect your data:
- TLS 1.3 encryption on all connections
- Passwords hashed with Argon2id
- Sensitive credentials (K-bis, API keys) encrypted AES-256-GCM server-side
- Restricted and traced administrator access (audit log)
- Encrypted daily backups
Complaint
If you consider that the processing of your data infringes your rights, you can lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.