Last updated: July 2026.
This policy explains how IMPACT, publisher of the wholesale-matcha.eu site, collects and processes your personal data, in accordance with Regulation (EU) 2016/679 known as the GDPR and with French Act no. 78-17 of 6 January 1978 as amended.
Data controller
IMPACT, simplified joint stock company with share capital of 1,000 euros, Paris trade and companies register 991 071 341, 58 rue de Monceau, 75008 Paris, France. Contact: contact@wholesale-matcha.eu.
Data collected
- Identification and contact data: surname, first name, company name, billing and delivery address, email address, telephone number.
- Business data: intra-community VAT number, company registration number where applicable.
- Order data: purchase history, amounts, means of payment used. Bank card numbers are never kept by IMPACT, they are handled directly by the payment provider.
- Browsing data: IP address, browser type, pages viewed, cookie identifiers.
Purposes and legal bases
| Purpose | Legal basis |
| Managing orders, delivery and customer service | Performance of the contract |
| Invoicing and accounting and tax obligations | Legal obligation |
| Sending commercial information by email | Consent, or legitimate interest for existing customers on similar products |
| Audience measurement and site improvement | Consent |
| Fraud prevention and site security | Legitimate interest |
Recipients
Your data is accessible to authorised staff at IMPACT and to its processors involved in delivering the service: hosting and ecommerce platform (Shopify), payment providers, carriers, email sending tool and audience measurement tool. Each processor is bound by a contract compliant with article 28 of the GDPR.
No data is sold or rented to third parties.
Transfers outside the European Union
Some providers may process data outside the European Union. These transfers are covered by the European Commission's standard contractual clauses or by an adequacy decision.
Retention periods
- Order data and accounting records: 10 years from the close of the financial year, in accordance with the French commercial code.
- Prospecting data: 3 years from the last contact.
- Audience measurement cookies: 13 months maximum.
- Customer account data: the duration of the commercial relationship, then 3 years.
Your rights
You have a right of access, rectification, erasure, restriction of processing, objection and portability in respect of your data, as well as the right to give instructions about what happens to it after your death. You may also withdraw your consent at any time where processing is based on it.
These rights are exercised by email to contact@wholesale-matcha.eu or by post to IMPACT, 58 rue de Monceau, 75008 Paris, France. You will receive a reply within one month.
You may lodge a complaint with the French data protection authority, Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at www.cnil.fr.
Cookies
The site places cookies that are strictly necessary for it to work, in particular for managing the basket and the session. These cookies do not require your consent.
Other cookies, intended for audience measurement and personalisation, are only placed after your consent has been obtained through the banner shown on your first visit. You can change your choice at any time from the cookie settings on the site or from your browser settings.
Security
IMPACT implements appropriate technical and organisational measures to protect your data against destruction, loss, alteration and unauthorised access. Exchanges with the site are encrypted over HTTPS.