Privacy
Last updated 29 October 2026
Data controller
Data is processed by Cristal de Roche ([Nom et prénom du responsable, ou raison sociale]). For any question: cristalederoche25@gmail.com.
Data collected
Contact form: name, email address, phone (optional), subject, message and piece concerned.
Review form: first name and initial, rating and comment.
WhatsApp: if you message us on WhatsApp, your messages are handled by that service under its own terms.
The website does not create customer accounts and records no payment.
Use
This information is used only to answer your requests, to let you know when a piece is back in stock and, with your consent, to publish your review (first name and initial only).
It is never sold, rented or used for advertising.
Service providers
To work without a server, the website relies on providers, some located outside Tunisia: Web3Forms (delivering forms to our mailbox), Google (email, and the Google Maps map if you choose to display it), hCaptcha (protection against bots) and Cloudflare (website hosting).
Retention
Messages are kept for at most three years after our last exchange. Reviews remain published for as long as the website exists, unless you ask for them to be removed.
Cookies
The website uses no analytics or advertising cookies. The Google Maps map is only loaded if you click “Show the map”; Google may then set its own cookies. The anti-bot captcha may use technical cookies when a form is sent.
Your rights
Under Tunisian Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data, you may access your data, have it corrected or deleted, and object to its use, by writing to cristalederoche25@gmail.com. If you live in the European Union, you have the same rights under the GDPR.
You may also lodge a complaint with the National Authority for the Protection of Personal Data (INPDP).