Privacy Policy

This Privacy Policy explains how DTB Holdings SASU collects, uses, and protects your personal data when you use dropthatbag.com. We are committed to protecting your privacy and complying with applicable data protection regulations, including the GDPR.

1. Data Controller

DTB Holdings SASU, 28 Avenue Rivièra, 06500 Menton, France (SIREN 103 658 712) is the data controller responsible for your personal data collected through dropthatbag.com.

2. Data We Collect

2.1 Data you provide directly

• Name, email address, shipping address, phone number (for order processing)
• Payment information (processed via Stripe — DTB does not store card data)
• Business name and VAT number (for B2B orders)
• Communications with our team (email, social media)

2.2 Data collected automatically

• IP address, browser type, device information
• Pages visited, time spent on Site, referral source
• Cookies and similar tracking technologies (see Section 7)

3. Legal Basis for Processing (GDPR)

• Contract performance: processing your orders and managing your account (Article 6(1)(b) GDPR)
• Legal obligation: tax records, accounting obligations under French law (Article 6(1)(c) GDPR)
• Legitimate interest: fraud prevention, Site analytics, marketing communications to existing customers (Article 6(1)(f) GDPR)
• Consent: marketing emails to new subscribers, cookies (Article 6(1)(a) GDPR)

4. How We Use Your Data

• Process and fulfill your orders
• Send order confirmations, shipping updates, and customer service communications
• Send marketing communications (with consent or legitimate interest)
• Comply with legal and tax obligations
• Prevent fraud and ensure Site security
• Improve our products and services

5. Data Sharing

DTB does not sell your personal data. We share data only with:

• Shipping carriers (name, address) for order fulfillment
• Stripe (payment processing) — subject to Stripe's own privacy policy
• Accounting and legal service providers under confidentiality obligations
• Public authorities where required by law

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area, including our manufacturing partner in China, for order fulfillment purposes. Such transfers are carried out under appropriate safeguards (Standard Contractual Clauses) in accordance with GDPR requirements.

7. Cookies

We use essential cookies (required for Site functionality) and optional analytics cookies (to improve user experience). You may manage cookie preferences via our cookie consent banner. Refusing non-essential cookies does not affect your ability to place orders.

8. Data Retention

• Order data: 10 years (French commercial and tax law requirements)
• Marketing data: until withdrawal of consent or unsubscribe
• Analytics data: 13 months maximum

9. Your Rights (GDPR)

If you are located in the EU/EEA, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interest
• Right to withdraw consent at any time

To exercise your rights, contact: hello@dropthatbag.com. You may also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at cnil.fr.

10. Contact

← Back to homepage