Privacy policy
This page explains what IZ FIX does with your personal data, under Regulation (EU) 2016/679 and the French Data Protection Act of 6 January 1978 as amended. It is written to be understood, not to impress.
Who is responsible
IZ FIX, a French simplified joint-stock company, 37 rue du Luxembourg, 77580 Pierre-Levée, France, registered with the Meaux Trade and Companies Register under no. 918 169 400, is the controller for the processing described here. For any question, or to exercise your rights: contact@iz-fix.com.
We have not appointed a data protection officer: it is not mandatory in our situation, as our processing involves neither large-scale monitoring nor special categories of data.
What we collect, and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, email, phone, delivery address | Process and deliver your order, keep you informed, handle after-sales | Performance of the contract |
| Order details and invoice | Accounting and tax obligations, warranty follow-up | Legal obligation |
| Email and contents of an unpaid basket | Offer you the chance to resume an interrupted order | Legitimate interest; you can object by ticking the box at checkout, or in one click in every email |
| Name, email, phone, description of the fault or device | Answer a request for a quote, a repair or a buy-back | Pre-contractual steps taken at your request |
| IP address and technical call log | Site security and traceability of access to our workshop interface | Legitimate interest in securing the service |
| Email and shipped order | Ask for your review, once, a week after dispatch | Legitimate interest, with opt-out in the email |
| First name, initial of your surname, rating and text of your review | Publish your review on the site, marked “Verified purchase” | Consent, given by ticking the box on the form |
| Email and the Mac you are looking for | Tell you once when a matching Mac arrives | Consent, confirmed by clicking the link in our email |
| Trade-in voucher code, amount and email | Deduct the value of the Mac we bought from you from a purchase | Performance of the contract |
We collect no special category data, we carry out no profiling, and we take no automated decisions producing legal effects concerning you.
What we do not do
- We do not sell or rent your data to anyone.
- We use no analytics tool, no advertising tracker and no embedded social network.
- We keep no card details: they go straight to the payment provider.
Cookies and local storage
This site uses no advertising or analytics cookies. No consent banner is therefore required, and we do not show one.
- Your basket is kept in your browser's local storage, on your own device. It reaches us only when you place an order, and you can clear it by clearing the site data.
- A session cookie is set only when signing in to the administration area, to keep that session open. It is strictly necessary and does not concern shop visitors.
Both uses fall within the exemption in article 82 of the French Data Protection Act: they are strictly necessary to provide the service you have asked for.
Who your data is shared with
Your data is accessible only to our team and to the technical providers below, who act on our behalf and on our instructions.
| Provider | Role | Data | Location |
|---|---|---|---|
| Vercel | Site and image hosting | Technical logs, IP addresses, uploaded files | European Union (Paris) for execution; company established in the United States |
| Supabase | Database (orders, enquiries, accounts) | Identity, contact details, delivery address, order history | United States (us-east-1 region) |
| Stripe | Card payments | Card details, email, amount | Ireland and the United States |
| PayPal | PayPal account payments | Email, amount, delivery address | Luxembourg |
| Email provider | Order, tracking and reminder emails | Email, first name, order number | Either the company's own mail server or Resend (United States), depending on the setting chosen |
| Klarna | Pay in instalments, only if you choose it at checkout | Identity, email, address, amount; Klarna checks creditworthiness itself | Sweden; Klarna then acts as a separate controller, under its own policy |
| Carrier | Delivery of orders | Name, postal address, phone, email | France and the European Union |
Your order details are also passed to our workshop, which prepares and ships the devices, and to the carrier you have chosen.
Transfers outside the European Union
Several of our providers are established in the United States or host part of their infrastructure there. That is the case for our database, hosted by Supabase in the us-east-1 region.
These transfers are covered by the European Commission's standard contractual clauses and, where applicable, by our providers' certification under the EU–US Data Privacy Framework. You may obtain a copy of the safeguards in place by writing to contact@iz-fix.com.
Database to be moved to Europe
How long we keep it
| Data | Period | Reason |
|---|---|---|
| Orders and invoices | 10 years | Accounting obligation (article L123-22 of the French Commercial Code) |
| Customer reviews | Published: while online, removed on request. Rejected: 12 months | Publishing reviews, handling a dispute about moderation |
| Enquiries, quotes, buy-back requests | 3 years after the last exchange | Managing the commercial relationship |
| Abandoned baskets and recovery token | 6 months | Beyond that, a reminder serves no purpose |
| Workshop interface call log, including IP address | 12 months | Security and traceability of access |
| Anti-abuse traces for forms, orders and sign-ins (IP address) | 24 hours | Protecting the site against automated submissions |
| Availability alerts (email and search) | 7 days if not confirmed; otherwise 30 days after the alert is sent, 12 months at most | Telling you when a Mac arrives, at your request |
| Trade-in vouchers (code, amount, email) | 3 years after issue | Following up the buy-back of your device |
| Opt-out list (fingerprint of the email address) | 3 years after opting out | Respecting your refusal of reminders and review requests |
| Payment data | Not kept by the shop | Handled directly by Stripe or PayPal |
Your data during a repair or buy-back
If you send us a device, we may access its contents only so far as necessary for the diagnosis or recovery requested. We open no personal file without a technical need, and we keep no copy once the work is finished and you have confirmed your recovery.
Any device we buy back has its storage securely erased before resale. We nevertheless recommend that you back up and erase your data, and sign out of your Apple Account, before sending us a device.
Your rights
At any time, free of charge, you may:
- access the data we hold about you, and obtain a copy;
- have it corrected if it is inaccurate;
- ask for it to be erased, except where the law requires us to keep it, an invoice for example;
- ask for processing to be restricted while something is checked;
- object to processing based on our legitimate interest, in particular order reminders and review requests: by ticking the box at checkout, or through the link at the bottom of each of those emails;
- withdraw your consent at any time, for example to have a published review removed or an alert deleted;
- receive your data in a machine-readable format, or have us send it to another provider.
Write to contact@iz-fix.com setting out your request. We reply within one month. If there is genuine doubt about your identity, we may ask for proof — only in that case.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr. You may also complain to the supervisory authority of your own country of residence.
Security
Traffic to and from the site is encrypted. Administration passwords are stored as hashes, never in clear. Our workshop access keys are encrypted in the database, and every call is logged with its origin.
Last updated: 15 September 2026.