FCR, a French limited liability company (société à responsabilité limitée) with share capital of €8,000, trading under the brand FCR ORIGINAL
ZA du Planty, 26 rue du Planty, 86300 Chauvigny, France
SIRET: 534 206 214 00015, Poitiers Trade Register: 534 206 214
This document is an English translation provided for information purposes. In the event of any discrepancy, the French version prevails, without prejudice to the rights you hold under the General Data Protection Regulation.
The controller of the personal data collected on the website fcr-accessoires.com is:
FCR, société à responsabilité limitée with share capital of €8,000
Trading name and brand: FCR ORIGINAL
ZA du Planty, 26 rue du Planty, 86300 Chauvigny, France
SIRET: 534 206 214 00015, Poitiers Trade and Companies Register: 534 206 214
Telephone: +33 5 49 62 03 26
Email: accessoires@fcroriginal.com
FCR has not appointed a data protection officer. Any question about the processing of your data can be sent to the email address above.
We only collect the data needed for the purposes described in Article 3. Depending on how you use the Site, this may include the following categories.
Title, surname, first name, email address, telephone number, billing and delivery addresses.
Order history, products purchased, amounts, delivery method, tracking number, returns and complaints, exchanges with customer service (email, telephone, WhatsApp, contact form).
Type of payment method used, transaction status, amount, and the last four digits of the card where this information is passed to us. We do not collect or store any full card number or security code. This data is processed directly by our payment providers.
Make, model, year and version of your motorcycle, where you enter them in the model selector or in a request for a custom part.
Company name, EU VAT number, billing address, website URL, and proof of professional status provided when applying for an account.
IP address, browser and device type, pages viewed, date and time of connection, session identifiers, under the conditions described in Article 7.
Login credentials and preferences, when you create a customer account.
Mandatory fields are indicated on the forms. If they are not completed, we may be unable to process your order or request.
| Purpose | Legal basis | Retention period |
|---|---|---|
| Managing orders, delivery, returns and after-sales service | Performance of a contract (Art. 6(1)(b) GDPR) | Duration of the business relationship, then archived until legal guarantees and limitation periods expire |
| Invoicing and accounting obligations | Legal obligation (Art. 6(1)(c) GDPR) | 10 years from the end of the financial year |
| Managing the customer account and the PRO Area | Performance of a contract (Art. 6(1)(b) GDPR) | Until the account is deleted, or 3 years without activity |
| Verifying professional status (proof, VAT number) | Legitimate interest: reserving trade prices for resellers (Art. 6(1)(f) GDPR) | Duration of the business relationship, then 3 years |
| Responding to requests via the contact form, email, telephone or WhatsApp | Legitimate interest: responding to enquiries (Art. 6(1)(f) GDPR) | 3 years from the last contact |
| Sending marketing emails and news about new products | Consent for prospects (Art. 6(1)(a) GDPR); legitimate interest for customers regarding similar products | 3 years from the last contact, or until consent is withdrawn |
| Handling requests to exercise your rights | Legal obligation (Art. 6(1)(c) GDPR) | Time needed to process the request, then archived for 1 year (5 years for identity documents in the event of litigation) |
| Preventing and detecting payment fraud | Legitimate interest: securing transactions (Art. 6(1)(f) GDPR) | Duration of the business relationship, then 13 months for transaction data |
| Managing disputes and consumer mediation | Legitimate interest: establishing and defending legal claims (Art. 6(1)(f) GDPR) | Duration of the proceedings, then 5 years |
| Collecting and publishing customer reviews, sending review invitations | Legitimate interest: informing visitors about product quality (Art. 6(1)(f) GDPR) | Reviews kept while published; invitations: 3 years |
| Assistance via chatbot | Legitimate interest: responding to enquiries (Art. 6(1)(f) GDPR) | 13 months from the conversation |
| Tracking referrals under the affiliate programme | Consent for the trackers used (Art. 6(1)(a) GDPR); performance of the affiliate contract for commission tracking | Trackers: 13 months. Commission data: duration of the contract, then 10 years for accounting |
| Audience measurement and Site statistics | Consent, unless an exemption applies (Art. 6(1)(a) GDPR) | Trackers: 13 months maximum. Collected data: 25 months maximum |
At the end of these periods, data is deleted or irreversibly anonymised. Some data may be kept for longer in a restricted-access intermediate archive where a legal obligation or the defence of legal claims requires it.
The data we process is collected directly from you when you place an order, create an account, fill in a form, contact us or browse the Site.
Some data may be passed to us by our service providers in the course of fulfilling your order: payment confirmation from the payment institution, delivery status from the carrier.
FCR does not buy or rent marketing lists from third parties.
Your data is accessible to authorised FCR staff responsible for order management, logistics, accounting and customer relations.
It is also shared with the following service providers, acting as processors or as independent controllers, strictly for the purposes described:
| Category | Providers | Data concerned |
|---|---|---|
| Hosting and e-commerce platform | Shopify | All Site and order data |
| Payment | Shopify Payments, PayPal, Apple Pay | Identity, contact details, transaction data |
| Instalment payment | Klarna, Alma | Identity, contact details, amount, data needed to assess the application |
| Shipping and delivery | Colissimo, Mondial Relay, DPD, FedEx, DHL, and our shipping preparation tools | Name, delivery address, telephone, email, parcel contents |
| Customs formalities | Carriers and customs authorities of the destination country | Identity, address, description and value of the goods |
| Customer reviews | Judge.me | Name, email, products ordered, published reviews and photos |
| Advertising and social networks | Google, Meta | Browsing and conversion data, subject to your consent |
| Customer service, invoicing and accounting | Our messaging and invoicing tools and our accounting firm | Contact details, content of exchanges, billing data |
| Consumer mediation | CM2C, if a case is referred | Data relating to the dispute |
Your data may also be disclosed to administrative or judicial authorities where required by law.
FCR does not sell or rent your personal data to third parties for commercial purposes.
Some of our service providers, in particular Shopify, the payment solutions and international carriers, may process your data outside the European Union.
These transfers are subject to the safeguards set out in Chapter V of the GDPR: an adequacy decision of the European Commission where one exists, or standard contractual clauses together with supplementary technical and organisational measures.
When you order delivery outside the European Union, your identity and address data is necessarily passed to the customs authorities of the destination country under the applicable customs rules.
You can obtain a copy of the safeguards in place by writing to accessoires@fcroriginal.com.
FCR implements appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access: HTTPS encryption of communications, hosting on secure infrastructure, access restricted to authorised staff, authentication of administrator accounts.
Payment data is processed directly by PCI DSS certified providers. FCR has no access to it.
In the event of a data breach likely to result in a high risk to your rights and freedoms, you will be informed under the conditions laid down in Article 34 of the GDPR.
Under the General Data Protection Regulation and the French Data Protection Act, you have the following rights:
Send your request to accessoires@fcroriginal.com or by post to FCR, ZA du Planty, 26 rue du Planty, 86300 Chauvigny, France.
We will respond within one month of receiving your request. This period may be extended by two months for complex or numerous requests; you will be informed if so.
We may ask for proof of identity if we have reasonable doubts about your identity. This proof is kept only for as long as needed to process your request.
To unsubscribe from our marketing emails, you can also use the unsubscribe link included in each message.
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the competent supervisory authority.
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Telephone: +33 1 53 73 22 22
Website: www.cnil.fr
If you live in another European Union Member State, you may also contact the supervisory authority of your country of residence.
This policy may be amended to reflect changes to our services, our tools or the regulations. The applicable version is the one published on the Site on the date you consult it.
In the event of a substantial change affecting your rights, we will inform you by appropriate means, in particular by email or by a visible notice on the Site.
Last updated: 28 September 2026.
