Privacy notice

Privacy policy

This policy explains how ECB Développement SAS, trading as HC Health Trading (74 rue Ney, 69006 Lyon, France), collects and uses personal data on hc-health-trading.com and in its business relationships. We act as data controller. Contact: contact@hc-health-trading.com.

Data collected and purposes

  • Contact form and quote requests: name, email address, company, phone number if you provide it, and your message. Purpose: reply to your request and prepare a quote. Legal basis: pre-contractual steps and legitimate interest in answering business enquiries.
  • Customer account and orders: identity, company, billing and delivery addresses, order history, payment status. Purpose: perform and invoice the contract, meet accounting obligations. Legal basis: contract and legal obligation.
  • Professional prospecting: name, job title, company and business contact details of people working in healthcare establishments, pharmacies, care homes and NGOs, collected from professional sources such as LinkedIn or company websites. Purpose: present our offer to professionals. Legal basis: legitimate interest in B2B prospecting. You can object at any time.
  • Technical and security data: IP address, browser data and security logs (anti-spam and firewall tools). Purpose: protect the site. Legal basis: legitimate interest.
  • Cookies and trackers: we use strictly necessary cookies (cart, session, security, remembering your choice), which do not require consent. With your consent, we use Google Analytics to measure audience (_ga cookies, kept for 13 months at most). Fonts are loaded from Google Fonts, which may send your IP address to Google. At checkout, Stripe sets security and fraud-prevention cookies. You can change your choice at any time through the cookie banner.

Recipients

Only the people and providers who need them: our host (OVH), our email provider, our payment provider (Stripe), our accountant, and the suppliers who prepare and ship your order. We do not sell personal data.

Transfers outside the European Economic Area

Some of our suppliers may be located outside the European Economic Area, for example in the United Kingdom or the United Arab Emirates. Delivery data are then sent to them only to fulfil your order, with appropriate safeguards where the law requires. Google (Analytics, Fonts) and Stripe may process data outside the European Union under contractual safeguards.

Retention periods

  • Prospecting and contact data: up to 3 years after our last contact with you.
  • Customer and billing data: 10 years, in line with accounting obligations.
  • Security logs: 12 months.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and the right to object to processing, including prospecting. To exercise them, write to contact@hc-health-trading.com. You may also lodge a complaint with the CNIL (www.cnil.fr).

Data protection contact

Christophe Berrodier, contact@hc-health-trading.com

Changes to this policy

We may update this policy. Last updated: 6 November 2026.