Legal

Privacy Policy

Last updated: 12 October 2026

1. Data Controller

Smasheur SAS, headquartered in France, is the controller of your personal data collected through the smasheur.com platform. Contact: contact@smasheur.com

2. Data Collected

When using Smasheur, we collect the following data: Upon registration: — First and last name — Email address — Password (encrypted, never stored in plain text) — Profile type (player or stringer) Upon ordering: — Delivery or appointment address — Stringing preferences (model, tension, options) — Order history During platform use: — Browsing data (pages visited, session duration) — IP address and device information — Approximate location (if permitted) for stringer search

3. Purposes of Processing

Your data is used to: — Create and manage your user account — Process your orders and manage payments — Connect players with stringers — Send you notifications related to your account and orders — Improve our services and personalise your experience — Detect and prevent fraud — Comply with our legal and regulatory obligations

4. Legal Basis

Depending on the purpose, we process your data on the following legal bases: — Contract performance: processing your orders, managing your account — Legitimate interests: service improvement, fraud prevention, transactional communications — Consent: marketing communications (you may withdraw your consent at any time) — Legal obligation: retention of certain data for our accounting and tax obligations

5. Retention Period

Your data is kept as long as your account is active. Upon account deletion: — Account data is deleted within 30 days — Order data is retained for 5 years (accounting obligation) — Browsing data is deleted within 13 months Some data may be retained longer in case of legal obligation or ongoing dispute.

6. Data Sharing

Your data is never sold to third parties. It may be shared with: Service partners (subcontractors): — Payment providers (Stripe) for transaction processing — Brevo (Sendinblue SAS, France) for sending emails related to your account and orders — Cloud hosts for data storage — Analytics tools (anonymised data only) Stringers: — When you place an order, the stringer receives your name and appointment information necessary for the service. Authorities: — In case of legal obligation or court order. All our subcontractors are bound by data processing agreements compliant with the GDPR.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights: — Right of access: obtain a copy of your personal data — Right to rectification: correct inaccurate data — Right to erasure: request deletion of your data ("right to be forgotten") — Right to restriction: restrict the processing of your data — Right to portability: receive your data in a structured format — Right to object: object to data processing for legitimate reasons — Right to withdraw consent at any time for consent-based processing To exercise your rights, contact: contact@smasheur.com You also have the right to file a complaint with the CNIL (www.cnil.fr).

8. Cookies

Smasheur uses cookies and similar technologies for platform operation. Essential cookies (no consent required): — User session and authentication — Language and theme preferences — Security and fraud prevention Analytical cookies (with consent): — Anonymised audience measurement to improve the experience You can manage your cookie preferences at any time from your browser settings or via our cookie manager. Emails: Emails sent by Smasheur (verification codes, order confirmations, etc.) go through our provider Brevo, which automatically measures opens (invisible pixel) and clicks: links pass through a redirect address (r.mail.smasheur.com) before taking you to smasheur.com. These measurements are only used to monitor email delivery; we do not use them for advertising. You can block open tracking by turning off automatic image loading in your email app.

9. International Transfers

Some of our subcontractors (including Stripe) may process data outside the European Union. In such cases, we ensure that appropriate safeguards are in place (standard contractual clauses approved by the European Commission, etc.).

10. Policy Updates

We reserve the right to modify this policy at any time. Any significant changes will be communicated to you by email or platform notification. The current policy is always accessible at: smasheur.com/politique-confidentialite Last updated: 12 October 2026