Privacy Policy

Privacy Policy

Last updated: 29 September 2026

RoyalCig pays particular attention to protecting the personal data of its customers and website users.

This Privacy Policy explains which personal data may be collected when you use the RoyalCig website, why it is used, to whom it may be disclosed, how long it is kept and what rights you have.

1. Data controller

The controller of personal data collected on the website is:

SAS ROYALCIG
Simplified joint-stock company with share capital of €2,000
81 boulevard d’Alsace Lorraine
64000 Pau – France
SIREN: 792 170 664
Email: royalcig@hotmail.fr
Telephone: 05 64 64 83 48

2. What data may we collect?

Depending on how you use the website, RoyalCig may collect the following categories of data:

  • first and last name;
  • postal and delivery addresses;
  • email address;
  • telephone number;
  • information required to create and manage your customer account;
  • order history and details;
  • information about billing, payments and any refunds;
  • communications with customer service;
  • newsletter subscription preferences;
  • technical data necessary for website operation and security, including certain connection information.

Required information is identified as such on the relevant forms. Where this information is necessary to process an order or provide a service, failure to provide it may prevent RoyalCig from handling the relevant request.

3. Creating and managing a customer account

When you create a RoyalCig account, certain data is used to create and administer your customer area, allow you to view your orders and facilitate the use of services associated with your account.

This processing is based in particular on providing the services requested by the user and, depending on the operation, RoyalCig’s legitimate interest in administering and securing its website and customer relationships.

4. Order management

Data provided when placing an order is used to:

  • record and process the order;
  • manage payment;
  • prepare and dispatch products;
  • track delivery;
  • issue billing documents;
  • manage any returns, refunds, warranties and complaints;
  • provide after-sales service;
  • comply with applicable legal, tax and accounting obligations.

This processing is primarily based on performance of the contract entered into when placing the order and, for certain retention or billing operations, on RoyalCig’s legal obligations.

5. Payment by bank card

Bank card payments are made through the secure payment solution Systempay.

The banking information needed to complete the transaction is processed by the payment provider when the order is paid for.

RoyalCig does not seek to receive or retain your full bank card number or card security code.

RoyalCig may, however, retain information necessary for the accounting and commercial monitoring of the transaction, such as its status, amount and references identifying the payment.

6. Delivery of orders

Data necessary for delivery of an order may be disclosed to providers involved in preparing, dispatching and delivering it.

This may include the recipient’s first and last name, address, email address and telephone number when needed for delivery or tracking.

The providers concerned must only use this information for the services for which it is shared and in accordance with their legal and contractual obligations.

7. Newsletter and marketing communications

RoyalCig may offer newsletter subscriptions to share news, offers and information about its business.

Where your consent is required, the subscription is based on that consent. You can withdraw it at any time, in particular by using the unsubscribe link in the relevant communications.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Messages necessary to process an order or manage the contractual relationship, such as order confirmations or delivery information, are not marketing newsletters and may be sent where necessary to perform the requested service.

8. Data recipients

To the extent necessary for their duties, personal data may be accessible to:

  • authorised persons within RoyalCig;
  • technical providers necessary for the operation and hosting of the website;
  • the payment provider;
  • shipping and delivery providers;
  • providers handling communications when that service is used;
  • legal advisers, authorities or legally authorised bodies where required by law.

RoyalCig does not sell its customers’ personal data to third parties.

9. Retention periods

RoyalCig retains personal data only for as long as necessary for the purposes for which it was collected, subject to legal obligations requiring longer retention.

Data needed for order management and the commercial relationship is kept for the period necessary for that relationship and may then be archived for the periods required, in particular to meet accounting or tax obligations or to establish, exercise or defend legal claims.

Accounting documents that must legally be kept are archived for the applicable statutory period.

Data used for marketing purposes is not retained indefinitely. The periods applied take account of CNIL recommendations and the nature of the relationship with the person concerned.

10. Data security

RoyalCig implements appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration and unauthorised disclosure.

Access to data is restricted to persons and providers who need it to perform their duties.

As no IT system can guarantee absolute security, the measures implemented are adapted to identified risks and may evolve with technology and security practices.

11. Your rights

Subject to applicable regulations, you may have the following rights:

  • the right to access your personal data;
  • the right to rectify inaccurate or incomplete data;
  • the right to erasure in circumstances provided for by law;
  • the right to restrict processing;
  • the right to object to certain processing;
  • the right to data portability where legal conditions are met;
  • the right to withdraw consent at any time where processing is based on consent.

You may exercise your rights by contacting:

SAS ROYALCIG
81 boulevard d’Alsace Lorraine
64000 Pau – France
Email: royalcig@hotmail.fr

RoyalCig may request information reasonably necessary to verify the applicant’s identity where there is reasonable doubt about it.

12. Complaints to the CNIL

If, after contacting RoyalCig, you believe that your personal data rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL).

13. Cookies and other trackers

The RoyalCig website may use cookies or similar technologies necessary for its operation and, depending on the tools actually installed on the website, other trackers subject to the applicable consent rules.

Cookies strictly necessary for website operation may be used without consent where permitted by law. Cookies or trackers requiring consent must only be placed after the user has expressed their choice.

Detailed information about the cookies used, their purposes and duration, and how to manage your choices is provided in the website’s Cookie Policy.

14. Service providers and data transfers

Certain technical providers may process personal data on behalf of RoyalCig to deliver their services.

Where data is transferred outside the European Economic Area, RoyalCig ensures that the transfer relies on a mechanism recognised by applicable regulations and, where necessary, is accompanied by appropriate safeguards.

15. Changes to this Privacy Policy

RoyalCig may change this policy, in particular to reflect changes to its services, service providers or applicable regulations.

The version in effect is the one published on the website at the time of consultation. The last-updated date is shown at the top of this page.