Privacy policy
Privacy Policy
Last updated: 22 October 2026
1. Identity of the data controller
RogMotorsport
simplified joint-stock company with a sole shareholder under French law (SASU)
Share capital: 1 000 €
Registered office: 173 rue de Courcelles, 75017 Paris, France
SIREN: 105 780 175 - Paris Trade Register
President: Léo Tom Cochard
Email: contact@rogmotorsport.com
2. Data collected
As part of your browsing and your purchases on rogmotorsport.com, we collect the following data:
When placing an order: surname, first name, delivery and billing address, email address, telephone number, payment data (processed by our secure provider, not stored by RogMotorsport).
When browsing: IP address, browsing data (pages visited, duration), browser and device type, via cookies.
Via the contact form: name, email, content of the message.
When configuring an exhaust: description of your vehicle and VIN (field E of the registration document), so that we can make the exhaust that fits your vehicle.
Rog Advisor: when you ask a question to the Rog Advisor, the automated assistant on our website, we receive the text of your question, the language and page of the site and, on a product page, the configuration you selected. The question is stored masked: e-mail addresses, phone numbers and the end of the VIN are removed. Your IP address is not stored: it is only used, as a fingerprint valid for one day, to limit the number of questions. If you ask to be contacted, we receive the phone number or e-mail address you enter.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing and tracking of orders | Performance of the contract |
| Sending the order confirmation | Performance of the contract |
| Customer service and complaints | Performance of the contract |
| Sending marketing emails (newsletter) | Consent |
| Improvement of the site and statistical analysis | Legitimate interest |
| Legal and accounting compliance | Legal obligation |
Rog Advisor: your questions are used to answer you, to improve the answers and to prevent abuse (legitimate interest); a contact request is used only to get back to you (your consent).
Proof of the order and defence in the event of a dispute: when you place an order, we keep the accepted version of the General Terms and Conditions of Sale, the date, time and IP address of the order, the configuration, vehicle and VIN entered, the invoice, the carrier's tracking data and our correspondence. In the event of a complaint, dispute or chargeback, this information is sent to the payment provider, the bank or the body concerned to establish that the order was performed (legitimate interest: defence of our rights).
4. Recipients of the data
Your data may be passed to the following providers, strictly within the scope of their duties:
- Shopify Inc. - hosting and management of the online store
- Payment providers (Shopify Payments, PayPal or equivalent): secure processing of transactions and, in the event of a dispute or chargeback, review of the order information; the banks and payment bodies concerned then receive this same information
- Carriers - delivery of orders
- Klaviyo - sending marketing emails (only if you have consented)
These providers act as processors and are bound by contractual confidentiality undertakings. No data is sold or transferred to third parties.
VIN check: to confirm your vehicle's model, the VIN entered on the product page may be looked up in the public database of the US road safety administration (NHTSA). The request is sent directly from your browser and contains only the VIN, without your name or contact details.
Rog Advisor: the text of your question is sent to Anthropic PBC, which provides the language model that writes the answer, and to Cloudflare, Inc., which hosts the program and its log. Contact requests arrive in our mailbox.
5. Transfers outside the European Union
Some of our providers (Shopify, Klaviyo) are established outside the European Union, in particular in the United States. These transfers are framed by appropriate safeguards (standard contractual clauses of the European Commission) in accordance with the GDPR.
Questions asked to the Rog Advisor may be processed in the United States by Anthropic and Cloudflare, under the European Commission's standard contractual clauses.
6. Retention period
| Category | Period |
|---|---|
| Order data | 10 years (accounting obligation) |
| Customer account data | 3 years after the last purchase |
| Browsing data | 13 months maximum |
| Commercial prospecting data | 3 years after the last contact |
| Contact data (form) | 3 years |
Rog Advisor: masked questions are kept for 12 months, contact requests for 90 days and the fingerprint used to limit questions for one day.
Sales contract and proof of order: for any order of 120 € or more, the contract and its evidence are kept for 10 years (French Consumer Code (Code de la consommation), Article L. 213-1); accounting records, 10 years (French Commercial Code (Code de commerce), Article L. 123-22).
7. Cookies
We use cookies to ensure the proper functioning of the site, remember your preferences and measure our audience.
Strictly necessary cookies - essential to the functioning of the site (cart, session). No consent required.
Analytics cookies - measurement of traffic and browsing behaviour (Google Analytics or equivalent). Subject to your consent.
Marketing cookies - targeted advertising and conversion tracking (Google Ads, Meta Pixel). Subject to your consent.
You can manage your cookie preferences at any time via the consent banner on the site, or via your browser settings.
8. Your rights
In accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) and the French Data Protection Act, you have the following rights:
- Right of access : obtain a copy of your personal data
- Right to rectification : correct inaccurate or incomplete data
- Right to erasure : request the deletion of your data
- Right to restriction : restrict the processing of your data
- Right to portability : receive your data in a structured format
- Right to object : object to the processing of your data for marketing purposes
- Right to withdraw your consent : at any time, without affecting the lawfulness of the processing carried out before the withdrawal
To exercise your rights, contact us at: contact@rogmotorsport.com
We undertake to reply within a maximum of one month.
9. Complaint to the CNIL
If you consider that the processing of your personal data does not comply with the regulations, you have the right to lodge a complaint with the French data protection authority (CNIL) :
Website: www.cnil.fr
Address: 3 Place de Fontenoy, 75007 Paris
10. Security
RogMotorsport implements the appropriate technical and organisational measures to protect your data against any unauthorised access, loss, alteration or disclosure. Payments are processed over secure connections (SSL/TLS) by our certified providers.
11. Changes
This privacy policy may be updated at any time. The date of the last update is shown at the top of this document. We encourage you to read it regularly.