Privacy

Last updated: March 2026. This policy is subject to change; the current version is always the one published on this page.

FAVEX, the publisher of the website www.hexatrap.com (hereinafter ‘Hexatrap’), attaches great importance to the protection of your personal data. The purpose of this policy is to inform you, clearly and transparently, about how we collect, use and protect your data, in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and the French Data Protection Act.

1. Who is responsible for processing your data?

Data controller: FAVEX SAS — 102 bis avenue du Président Kennedy, 75016 Paris

Contact: rgpd@favex.fr

2. What data do we collect?

We collect the following data, depending on your use of the website:

Identification data: surname, first name, postal address, email address, telephone number.

Order data: order history, delivery and billing addresses, products purchased.

Payment data: payment details are processed directly by our service provider, Monetico Retail (CIC Group). Hexatrap does not store your credit card numbers. For CO₂ cylinder subscriptions and exchanges, a secure alias (token) is stored by Monetico to enable recurring direct debits. We use Apple Pay and Google Pay to secure your transactions. These services process your payment data in accordance with their own privacy policies.

Browsing data: IP address, browser type, pages visited, session duration, data collected via cookies (see Article 6).

3. Why do we use your data?

Your data is collected and processed for the following purposes:

  • Processing and managing your orders (legal basis: performance of the contract)
  • Management of your customer account (legal basis: performance of the contract)
  • Management of subscriptions and recurring direct debits (legal basis: performance of the contract)
  • After-sales service, warranties and complaints (legal basis: performance of the contract and legal obligation)
  • Sending transactional emails (order confirmation, dispatch notifications, etc.) — (legal basis: performance of the contract)
  • Sending marketing emails and newsletters (legal basis: consent — you may unsubscribe at any time)
  • Audience measurement and website improvement (legal basis: legitimate interest and/or consent, depending on the tools used)
  • Targeted advertising (legal basis: consent)
  • Compliance with legal and accounting obligations (legal basis: legal obligation)

4. Who do we share your data with?

Your data may be passed on to the following third parties, strictly to the extent necessary for the provision of services:

  • GLS (courier): surname, first name, delivery address and telephone number, to ensure the delivery of your orders.
  • Monetico Retail / CIC (payment service provider): data necessary for the secure processing of your payments. Monetico is PCI-DSS certified.
  • Cofidis SA (instalment payments): data required to assess and grant interest-free payment plans in 3 or 4 instalments.
  • Google LLC (Google Analytics, Google Ads, Tag Manager): browsing and behaviour data on the website, for the purposes of audience analysis and targeted advertising. Google may transfer this data outside the EU under the Data Privacy Framework.
  • Meta Platforms Ireland Limited (Meta Pixel): browsing and conversion data, for the purposes of targeted advertising on Facebook and Instagram.

None of your data is sold to third parties. These transfers are governed by data processing agreements that comply with the GDPR.

5. Cookies and trackers

The website www.hexatrap.com uses cookies and trackers to ensure it functions properly, to measure its audience and to offer you adverts tailored to your interests.

Strictly necessary cookies: essential for the website to function (shopping basket, session, login). These do not require your consent.

Audience measurement cookies (Google Analytics): these allow us to analyse visitor behaviour in order to improve the website. Placed only with your consent.

Advertising cookies (Google Ads, Meta Pixel): these enable us to show you relevant adverts on other websites and social media platforms, and to measure the effectiveness of our campaigns. These are only set with your consent.

On your first visit, a cookie management banner allows you to accept or decline each category. You can change your preferences at any time via the ‘Manage my cookies’ link available at the bottom of every page on the website.

You can also configure your browser to block or delete cookies. Please note that this may affect certain features of the website.

6. Your rights

In accordance with the GDPR, you have the following rights regarding your personal data:

  • Right of access: to obtain a copy of the data we hold about you.
  • Right to rectification: to have inaccurate or incomplete data corrected.
  • Right to erasure: to request the deletion of your data, subject to our legal obligations regarding data retention.
  • Right to object: to object to the processing of your data, in particular for marketing purposes.
  • Right to restriction: to request the temporary suspension of the processing of your data.
  • Right to data portability: to receive your data in a structured, machine-readable format.
  • Right to withdraw your consent: at any time, for processing based on your consent (newsletter, advertising cookies), without this affecting the lawfulness of previous processing.

To exercise any of these rights, please contact us at rgpd@favex.fr or by post at FAVEX — 102 bis avenue du Président Kennedy, 75016 Paris, enclosing a copy of your identity document.

We undertake to respond to your request within one month. If you feel that your rights have not been respected, you may lodge a complaint with the CNIL: www.cnil.fr — 3, place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

7. Security of your data

FAVEX implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure. Payment transactions are secured using SSL encryption and processed by Monetico Retail, which is PCI-DSS certified.

8. Changes to the privacy policy

This policy may be updated at any time to reflect changes in the law, regulations or our practices. The date of the last update is shown at the top of this page. We encourage you to review it regularly.