Privacy Policy

Last updated: 27 October 2026

This page explains what personal data Pranacook collects on pranacook.com, why, how long we keep them and how you can exercise your rights. It applies to everyone: customers, newsletter subscribers, people who write to us, ambassadors and visitors who are simply browsing.

1. Who is responsible for your data

The controller within the meaning of the General Data Protection Regulation (GDPR) is PRANACOOK SAS, a French simplified joint-stock company (société par actions simplifiée) with share capital of €1,500, registered with the Rodez Trade and Companies Register (RCS) under number 988 797 072, with its registered office at 8 impasse des Landes, 12320 Conques-en-Rouergue, France.

If you have any questions about your data: contact@pranacook.com.

2. What we collect, why and for how long

When you place an order or create an account

• Data: surname, first name, delivery and billing addresses, email address, telephone number, products ordered, your order history. If you create an account, your password is stored in encrypted form.
• Purpose: to process and deliver your order, issue the invoice, handle returns, the guarantee and after-sales service, and send you the emails relating to your order (confirmation, dispatch, tips on using your cookware).
• Legal basis: performance of the sales contract (Art. 6(1)(b) GDPR).
• Payment: you enter your bank details directly with our secure payment providers (CIC Monetico, Stripe or PayPal, depending on the payment method chosen). Pranacook does not see or store them.
• Retention period: 5 years from the end of the business relationship. Invoices and accounting records are kept for 10 years, as required by the French Commercial Code (Code de commerce).

When you register the guarantee for a purchase made at a fair or exhibition

• Data: your email address and the details of your purchase.
• Purpose: to register your guarantee and send you your proof of purchase. This email address is not used for anything else.
• Legal basis: performance of the sales contract and of the guarantee (Art. 6(1)(b) GDPR).
• Retention period: the same as for an order placed on the website.

When you start an order without completing it

• Data: the email address, name and telephone number entered on the checkout page, and the contents of your cart.
• Purpose: to remind you about your cart by email, no more than four times (30 minutes, 1 day, 4 days and 10 days after the cart was abandoned). These emails do not contain any discount.
• Legal basis: our legitimate interest in reminding you of a purchase you have started (Art. 6(1)(f) GDPR). You can opt out of these reminders at any time using the unsubscribe link included in each of them.
• Retention period: 6 months after the cart was abandoned.

When you subscribe to the newsletter

• Data: your email address.
• Purpose: to send you our recipes, tips, offers and new products.
• Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box provided (in the newsletter form or on the checkout page). You can withdraw it at any time using the unsubscribe link in every email.
• Tool: an email marketing service provider established in the European Union.
• Retention period: until you unsubscribe.

When you write to us (contact forms, email)

• Data: surname, first name, address, email address, order number, your message and any files you attach.
• Purpose: to reply to your request (question about a product, after-sales service, return, partnership).
• Legal basis: performance of the contract if you are a customer (Art. 6(1)(b) GDPR); otherwise, our legitimate interest in replying to you (Art. 6(1)(f) GDPR).
• Tools: our email service, a customer service ticketing tool and, under the conditions described below, an artificial intelligence tool. The website’s forms are protected against automated submissions by Google’s reCAPTCHA service.
• Retention period: for a customer, the duration of the business relationship; in other cases, 3 years after our last exchange.

When you become a Pranacook ambassador

• Data: email address, first name, surname, telephone number, links to your social media accounts or website, your introduction, password (stored in encrypted form). Then, to manage the partnership: your promo code, the sales it generates, your commissions and, in order to pay them, your bank details and billing information.
• Purpose: to review your application, manage the programme and pay your commissions.
• Legal basis: performance of the affiliate programme terms (Art. 6(1)(b) GDPR); accounting obligations for payment records (Art. 6(1)(c) GDPR).
• Retention period: the duration of the partnership, then 5 years. Accounting records are kept for 10 years.

When you take part in a competition

The data collected and how long they are kept are set out in the rules of each competition.

When you browse the website

The website uses cookies to function, to measure its traffic and, if you agree, for advertising. You make your choice on your first visit and can change it at any time using the “Manage consent” button. Your choice is stored for 6 months. Refusing these cookies does not prevent you from placing an order. Details of each cookie and its lifetime can be found in our cookie policy.

If you accept marketing cookies, we use the Meta pixel and the Google Ads tag. They record the pages and products viewed, items added to the cart and purchases. We use them to find out which adverts lead to sales and to show our adverts to people who have already visited the website. When you make a purchase, and only if you have accepted these cookies, your email address and telephone number are sent to Meta in an irreversibly encoded form (hashing). Meta uses them to match the purchase to a Facebook or Instagram account and then deletes these contact details. For this collection and transfer, Pranacook and Meta Platforms Ireland are joint controllers (Art. 26 GDPR).

3. Customer service and artificial intelligence

To reply faster and better to requests sent to customer service, Pranacook may use artificial intelligence tools provided by Anthropic (United States). Before any processing, your personal data (name, address, email address, telephone number) are replaced by generic identifiers. Only your first name and order number are kept in order to personalise the reply.

These data are not used to train artificial intelligence models and are not stored permanently by the provider (temporary retention of no more than 30 days may take place for security reasons). Every reply is read and approved by a member of the Pranacook team before it is sent. You can object to this processing at any time by writing to contact@pranacook.com.

4. Who receives your data

Your data are used by the Pranacook team and, solely for the purposes described above, by our service providers:

• the website host, located in France;
• our logistics provider and the carriers, to prepare and deliver your orders;
• the payment service providers;
• the email service providers (order emails, cart reminders, newsletter);
• our customer service ticketing tool and our email service;
• our accountant (expert-comptable), for accounting records;
• Meta and Google, for advertising, only if you have agreed;
• Google, for our email service and to protect forms against bots;
• Anthropic, under the conditions set out in section 3.

Your data are never sold or rented out.

5. Transfers outside the European Union

Some of these service providers may process your data in the United States:

• Meta and Google (advertising, email service, form protection) and Anthropic (artificial intelligence). These transfers are governed by the EU-US Data Privacy Framework, under which Meta Platforms Inc., Google LLC and Anthropic are certified;
• our customer service ticketing tool, provided by a US company. These transfers are governed by the standard contractual clauses adopted by the European Commission.

How Meta and Google use these data is described in their own privacy policies: Meta and Google.

6. Your rights

You may at any time:

• access your data and obtain a copy of them (right of access);
• have them rectified if they are inaccurate or incomplete (right to rectification);
• have them erased (right to erasure), within the limits provided for by law (for example, we have to keep invoices);
• restrict their use (right to restriction of processing);
• receive them in a readable format, or ask for them to be transferred to another organisation (right to data portability);
• object to their use based on our legitimate interest, and at any time to their use for direct marketing (right to object);
• withdraw your consent (newsletter, cookies), without affecting what was done before;
• give instructions on what should happen to your data after your death (under French law).

Write to us at contact@pranacook.com or by post to Pranacook, 8 impasse des Landes, 12320 Conques-en-Rouergue, France. We reply within one month at most. If you are not satisfied with our reply, you can lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, 75007 Paris, France, www.cnil.fr), or another data protection supervisory authority, in particular the one in your country of habitual residence (Art. 77 GDPR).

We do not take any decisions based solely on automated processing that produce legal effects concerning you.

7. Security

We take technical and organisational measures to protect your data against loss, alteration and unauthorised access: encrypted connection, encrypted passwords, access limited to the people who need it. As no system is infallible, we cannot guarantee absolute security.

8. Changes to this page

We may change this page, for example when we change tools. The date of the last update is shown at the top. The rules specific to sales are set out in our terms and conditions (Article 13).