Privacy Policy
1. Introduction
This “Privacy Policy” describes the privacy and security measures implemented by Colis Privé France (RCS Marseille 391 029 345), located at Tour Mirabeau, 4 Quai d’Arenc, Boulevard Jacques Saadé, 13002 Marseille, in collecting, using and sharing the personal data you provide via its website (“Site”).
Colis Privé France, as the data controller, commits to implementing a policy compliant with applicable data protection regulations, including the EU General Data Protection Regulation (GDPR).
2. Who this policy applies to
This Privacy Policy applies to the following categories of people:
- Senders / e-commerce merchants: direct customers of Colis Privé France who subscribe to a parcel delivery service.
- Parcel recipients: individuals to whom Colis Privé delivers parcels entrusted by senders.
- Delivery partners: carriers to whom Colis Privé entrusts delivery tasks.
- Site visitors: anyone who connects to, visits or navigates the Site.
3. Personal data collected and processed
Colis Privé France commits to collecting only data strictly necessary to provide the services offered, and only for the purposes described in this policy.
Colis Privé France may collect and process information about you when you use the Website, including the following data:
- Civil status, identity and identification data:
- For individuals: your title, last name, first name, email address, phone number, postal address, as well as the parcel number and the postal code associated with the parcel.
- For professionals: the company name, last name, first name, email address, job title and phone number of the contact person, postal address, city, and the number of parcels per year.
- Professional data: CV and cover letter.
- Data necessary for the management and monitoring of parcel delivery services: parcel number, postal code associated with the parcel.
- Connection data: IP addresses, metadata (connection date and time, browser type and operating system used, time spent on each page viewed, location, etc.).
- Authentication data for Website accounts: login credentials and password.
- Other data: comments, additional delivery information/instructions, transport licence, message, etc.
The Website is not intended for minors. Colis Privé France does not knowingly collect data from children.
- Methods of data collection
Direct collection
Direct collection refers to cases where data is collected (i) directly from the individual or (ii) through devices or technologies that observe the individual’s activity (web browsing analysis, etc.).Therefore, Colis Privé France collects data directly from you when you provide information via the Site, for example, when you fill out a form or create an account. Information required to access the services offered is marked with an asterisk. Optional information may also be requested to personalize services. The information you provide must be accurate and complete, and it is your responsibility to ensure this.
Colis Privé France may also collect information during your browsing on the Site through the use of cookies. To learn more about our cookie policy, click here.
Indirect collection
Indirect data collection refers to cases where data is obtained from a third party.
Colis Privé France may collect your data exclusively through third parties, such as e-commerce shipping providers. These third parties act as Data Controllers within the framework of the independent relationship you have with them, upstream, for example, for an online purchase. These third parties transmit your data to us for the provision of parcel delivery services. Colis Privé France, as the recipient of the data, decides, for the performance of the services it offers, the purposes and means of processing the data collected and transmitted by these third parties. In this case, Colis Privé France acts as the Data Controller for this transmitted data.
5. Legal basis for data collection
Only the collection and processing of your personal data on a valid legal basis is permitted.
This legal basis may be :
- Consent :
Consent is defined as “any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.”
When you give us your consent, we process your personal data for the specific purposes to which you have consented. - Performance of the services offered by Colis Privé France (contractual basis) :
The performance of a contract may constitute the legal basis for processing if: (i) a genuine contractual or pre-contractual relationship exists between the organisation and the data subject; (ii) the contract is valid under applicable law; (iii) the processing of data is genuinely necessary for the performance of the contract. When Colis Privé France provides its services to you, it processes the personal data necessary for the performance of a contract with you (such as a service agreement) and for the fulfilment of any resulting obligations.
Processing your personal data on the basis of pre-contractual and/or contractual obligations towards you is a contractual requirement. It may also be a condition for entering into a contract. Consequently, failure to provide the required data will make it impossible to conclude or perform the contract.
- Legitimate interest of Colis Privé France :
An interest is considered legitimate as long as it is pursued in a manner compliant with data protection regulations on the one hand, and with any other relevant regulations on the other.
Colis Privé France has a legitimate interest in particular when processing is carried out in the context of a customer relationship, when it processes personal data for the purpose of improving or developing its services, preventing fraud, or ensuring the security of its network and information systems.
- Legal obligations of Colis Privé France:
Processing is necessary for compliance with a legal obligation to which Colis Privé France is subject.
You will find in Article 6 of the Privacy Policy the purposes and legal bases for the processing of your personal data carried out by Colis Privé France.
- Summary of the policy implemented by Colis Privé France (purposes and legal bases of the personal data processing activities, data subjects, retention periods)
| PURPOSES | SERVICES | LEGAL BASES | DATA SUBJECTS |
|---|---|---|---|
| Management of your Colis Privé space (E-merchant account) | Management of your account | Performance of the contract | Shippers |
| Authentication for accessing your space and implementing account security actions | Legitimate interest | Shippers | |
| Providing details and history of your deliveries and parcels | Performance of the contract | Shippers | |
| Management of your Distributor space (Delivery Partner account) | Management of your account | Performance of the contract | Delivery partners |
| Authentication for accessing your space and implementing account security actions | Legitimate interest | Delivery partners | |
| Management of your parcel deliveries | Providing parcel delivery information (expected delivery date, tracking updates, real-time delivery status) | Legitimate interest | Shippers / Recipients |
| Sending notifications regarding delivery steps and potential incidents | Legitimate interest | Recipients | |
| Subject to your consent, receiving delivery satisfaction surveys | Consent | Shippers / Recipients | |
| Management of customer service | Management of customer relations | Legitimate interest | Shippers / Recipients |
| Handling claims and resolving disputes (loss or damage claims, satisfaction surveys, follow-ups on undelivered parcels or abnormal shipments) | Legitimate interest | Shippers / Recipients | |
| Customer commercial prospecting | Conducting marketing operations through advertising messages, contests, partnerships, surveys, platform invitations, and promotional offers | Consent | Shippers |
| Publicity profiling to customize communications and advertisements based on browsing behavior | Consent (data collected via cookies) | Shippers / Website visitors | |
| Performance analysis | Conducting statistics and analyses for marketing optimization and service improvement | Legitimate interest + Consent | Shippers / Recipients / Website visitors |
| Newsletter management | Sending newsletters by email | Consent | Shippers / Website visitors |
| Management of rights requests | Handling requests relating to data protection rights | Legal obligation | Shippers / Recipients / Website visitors |
| Management of spontaneous applications | Processing your job application | Consent | Website visitors |
| Partner/distributor prospecting | Processing your application as a delivery partner | Legitimate interest (cookies) | Delivery partners |
| Website operation | Managing and operating the website for administrative and technical purposes | Legitimate interest (cookies) | Website visitors / Delivery partners |
A retention period of 9 months from the last action taken on the parcel is applied in order to meet operational requirements and to allow the handling of any dispute that may arise after delivery.
Furthermore, please note that, in the context of the complaint submitted and the request for access to personal data in accordance with the GDPR, Colis Privé France will process the personal data of the data subject for the duration of the complaint review and the exercise of rights in accordance with the GDPR. In addition, Colis Privé France will retain the personal data of the data subject until the expiry of the time limits for potential claims or until the end of the mandatory data retention period resulting from legal provisions.
Your personal data is retained for no longer than necessary in relation to the purposes for which it is processed. The retention period varies depending on the purposes pursued. It should be noted that such data may be stored in an intermediate archive with restricted access, in accordance with applicable statutory limitation periods, in order to comply with legal obligations.
- Recipients of your data
Colis Privé France is committed to preserving the confidentiality of your personal data and complying with all legal requirements regarding their sharing and disclosure.
Colis Privé France therefore undertakes to share or disclose your data only with the persons and entities that need access to them in order to enable Colis Privé France to achieve the purposes for which they are processed.
The data collected are intended to be used by the internal departments of Colis Privé France (IT department, human resources department, marketing and communication department, sales department, etc.), which process only the data necessary to carry out their tasks.
Your personal data may also be communicated to third-party partners, located in France or within the European Union, with whom Colis Privé France collaborates.
Below are the categories of recipients of your data :
- partners responsible for the design of the Website
partners responsible for hosting the Website - partners responsible for Website maintenance
- partners responsible for Website performance analysis
- delivery partners for the provision of parcel delivery services
- partners for customer service
- partners for satisfaction surveys
- partners for digital accessibility
- partners for marketing and promotional campaigns
As part of the CEVA group, Colis Privé France may also share your personal data within the group for IT support, handling customer requests, ensuring compliance with data subject rights, administrative support, and the development of joint Business-to-Business offers.
Colis Privé France ensures that these recipients have access to your personal data only to the extent strictly necessary for the performance of their duties and that they commit to using them solely for the purposes indicated by Colis Privé France.
In certain cases such as for the contestation, preservation, or defense of a legal right; in the context of administrative or criminal investigations; judicial proceedings; or to meet accounting requirements Colis Privé France is subject to obligations requiring it to transfer some of your data to authorities, legally designated bodies, external advisors, or any other third party.
8. Subcontracting
When Colis Privé France uses a service provider, it will not share any personal data for processing purposes until it has received a commitment and assurance from the provider that it is able to meet the required security and confidentiality standards.
Colis Privé France enters into contracts with its subcontractors in accordance with legal and regulatory obligations, contractually defining the conditions under which personal data are processed by these subcontractors.
9. Transfer of your data
If Colis Privé France were to transfer data outside the European Union, you would be informed, and such transfers would only take place where mechanisms ensuring an adequate level of protection are in place. International transfers of personal data between Colis Privé France and a company located in a third country are governed by safeguards approved by the European Commission, such as standard contractual clauses.
For the handling of complaints, Colis Privé France uses a French subcontractor that operates some of its sites outside the European Union: Concentrix SAS France. Colis Privé France has ensured compliance with the European Commission’s recommendations by verifying that the transfer of your data meets all applicable regulatory requirements.
10. Security of your data
Colis Privé France places great importance on the security of your personal data.
Appropriate technical and organisational measures are implemented to ensure that data are processed in a way that protects them against loss, destruction or accidental damage, as well as against breaches that could compromise the confidentiality or integrity of the data. Your personal data are stored in a secure environment.
Colis Privé France employees are bound by contractual confidentiality obligations and must comply with an internal code of good practice regarding the use of the information system.
During the development, design, selection and use of tools used to process your personal data, Colis Privé France ensures that they provide an optimal level of protection for the data processed.
If you have created an account on our Website, you remain responsible for protecting your login credentials and passwords. This information is for your personal use only and must not be shared with anyone else. If Colis Privé France becomes aware that a personal data breach for which it is responsible presents a high risk to your privacy, we will inform you as soon as possible so that you may take all necessary precautions to limit its consequences (such as changing your passwords, etc.).
11. Your rights
Colis Privé France attaches particular importance to respecting your rights in the context of the data processing it carries out. In this way, it aims to ensure fair and transparent processing, taking into account the specific circumstances and context in which your personal data are processed.
Your right of access
This right allows you to confirm whether or not your personal data are being processed and, if so, to what extent. Where this is the case, you have the right to request a copy of your data and information concerning you.
Your right to rectification of your data
You may ask us to rectify or complete your personal data if they are inaccurate, incomplete, equivocal or obsolete.
Your right to erasure of your data
You may request the erasure of your personal data if one of the following grounds applies:
- the data are no longer necessary for the purposes for which they were collected or otherwise processed;
you withdraw the consent you previously gave; - you object to the processing of your personal data and there are no compelling legitimate grounds for the processing;
- the processing of the data is not carried out in accordance with the provisions of the applicable laws and regulations.
Please note that the right to erasure is not a general right and may only be exercised where the legal grounds provided for in the applicable regulations are met.
If these legal grounds do not apply, Colis Privé France will not be able to respond favourably to your request. This is the case, for example, where it is required to retain the data on the basis of a legal or regulatory obligation, or for the establishment, exercise or defence of legal claims.
Your right to restriction of processing
You may request that the processing of your personal data be restricted in the cases provided for by the applicable laws and regulations.
Your right to object to data processing
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data where the legal basis for such processing is legitimate interest.
If you exercise this right to object, Colis Privé France will ensure that your personal data are no longer processed in connection with the processing concerned, unless we can demonstrate compelling legitimate grounds for continuing such processing. These grounds must override your interests, rights and freedoms, or the processing must be justified for the establishment, exercise or defence of legal claims.
Your right to data portability
You have the right to the portability of your personal data. Please note that this is not a general right. Not all data from all processing activities are portable, and this right applies only to automated processing, not to manual or paper-based processing.
This right is limited to processing operations for which your consent, or the implementation of pre-contractual measures or a contract, constitutes the legal basis.
The right to portability must not adversely affect the rights and freedoms of third parties, such as those protected by trade secrets.
Your right to withdraw your consent
Where our processing of data is based on your consent, you may withdraw this consent at any time. Colis Privé France will then cease processing your data, without affecting the lawfulness of processing previously carried out on the basis of your consent.
The right not to be subject to a decision based solely on automated processing
In the course of its activities, Colis Privé France may use automated data processing. You have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you, except where such a decision is necessary for entering into or performing a contract, or is authorised by law.
The right to lodge a complaint
You have the right to lodge a complaint with the competent data protection authority:
Commission nationale de l’informatique et des libertés (CNIL)
3 Place de Fontenoy – TSA 80715
75334 PARIS CEDEX 07 – FRANCE
+33 (0)1 53 73 22 22
Your right to define instructions regarding your data after your death
You may define specific instructions relating to the retention, erasure and sharing of your personal data with our services after your death, in accordance with the procedures set out below. These specific instructions will only apply to the processing carried out by us and will be limited to this scope.
Procedures for exercising your rights
To exercise your rights, please send an email to the following address:
donnees-personnelles@colisprive.com
This email address is not intended for, and therefore will not process, job applications, requests for information concerning the delivery of your orders, or complaints directly related to the services provided by Colis Privé France. If you have such questions, please contact customer service.
12. Changes to this document
Colis Privé France reserves the right to update and amend the Privacy Policy at any time, without providing justification.
We encourage you to consult this Privacy Policy regularly on the Website.
The most recent update to the Privacy Policy was made on the date indicated in the footer, at which time it entered into force and automatically replaced the previous version of the Privacy Policy.
Last updated on 28 May 2025