Privacy policy

Effective date: July 2026

XYPRA (Atelier du Paumier OD) operates its website and sells padel rackets. We process your personal data in accordance with the GDPR and French data protection law.

Data controller

XYPRA (Atelier du Paumier OD)

61 rue de Lyon, 75012 Paris, France

Email: hello@xyprasport.com

Paris Trade Register (RCS) 102 586 070

VAT number: FR17102586070

Data we collect

Purchase data: name, email, phone, billing and delivery addresses

Transactional data: order details, payment method information (processed exclusively by Shopify and PayPal)

Navigation data: IP address, browser type, pages visited, location (country level)

Customer service data: communications regarding orders, returns and support requests

Payment information is NOT stored by XYPRA — it is processed directly by Shopify and PayPal.

Purposes of processing

We collect your data in order to process and manage your orders, as well as associated returns and refunds — these processing activities are based on the performance of the contract between us. Customer service is based on the same legal ground. Compliance with our legal obligations in relation to accounting and taxation constitutes a legal obligation to which we are subject. Fraud prevention and website security are based on our legitimate interest. Audience measurement and analytics are carried out on the basis of our legitimate interest or your consent, depending on the type of cookies used. Personalisation and marketing activities are based exclusively on your prior consent.

Data retention

  • Order data: duration of the contract + legal guarantee period
  • Customer service data: 3 years from the last contact
  • Cookies: 6 to 13 months depending on the type

Recipients of your data

Your data may be shared with the following recipients: our payment providers Shopify and PayPal, our logistics partner Boost (warehousing and shipping), our email service provider for our communications, and legal authorities where required by law. We do not sell your data to third parties.

Some of these providers, including Shopify and PayPal, may process your data outside the European Union. Such transfers are governed by appropriate safeguards, including the standard contractual clauses approved by the European Commission, in accordance with Article 46 of the GDPR.

Your rights

Under the GDPR, you have the following rights:

  • Right of access to your data
  • Right to rectification of inaccurate data
  • Right to erasure of your data
  • Right to object to processing
  • Right to restriction of processing
  • Right to data portability

Exercising your rights

Contact us at: hello@xyprasport.com

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

Cookies and trackers

When you visit our site, cookies may be placed on your device. You can accept or refuse non-essential cookies via the banner displayed on your first visit. You can also manage your preferences at any time in your browser settings.

Types of cookies used:

  • Essential: necessary for the proper functioning of the site
  • Analytics: measuring audience and site usage
  • Marketing: content personalisation

Data security

We take all necessary precautions to protect your data against unauthorised access, alteration or loss.

Links to third-party sites

Our site may contain links to external sites. We accept no responsibility for the privacy practices of those sites.

Changes to this policy

We reserve the right to modify this policy at any time. Any changes will be published on this page with an updated date.