Privacy Policy
Last updated: September 2026
1. Who is responsible for your data?
The CELLFOOD® France website is operated by:
NAVOTI SAS
ZA Polaxis – Avenue de Boulnay
37360 Neuillé-Pont-Pierre – France
Tours Trade and Companies Register (RCS): 492 546 536
Phone: +33 2 34 74 43 10
Email: cellfood@navoti.com
NAVOTI SAS is the data controller for the personal data collected through the use of the CELLFOOD® France website.
2. What personal data do we collect?
The data we collect depends on how you use the website.
When you create an account, place an order or contact us, we may collect in particular:
- your first and last name
- your postal address
- your delivery and billing address
- your email address
- your phone number
- information about your customer account
- information about your orders, purchases, returns and refunds
- information you provide when you contact our customer service
Certain technical data may also be collected while you browse, including your IP address, the characteristics of your browser and device, and information about how you use the website.
Data that’s strictly necessary for an order is mandatory. Without it, we can’t process and deliver your order.
3. Why do we use your data?
We use your personal data for the following purposes:
Managing your customer account
Creating and managing your account and giving you access to your history when these features are available.
Managing your orders
Recording your order, payment, invoicing, preparation, shipping, delivery, returns, refunds and after-sales service.
Payment
The information needed for payment is processed by our secure payment provider, Stripe.
Customer service
Handling your questions, requests and complaints.
Website security and fraud prevention
Protecting the website, transactions and customer accounts against fraudulent or malicious use.
Complying with our legal obligations
Keeping accounting records, handling warranty requests and complying with the other legal or regulatory obligations that apply to NAVOTI.
4. What is the legal basis for processing your data?
Depending on the processing concerned, NAVOTI processes your data on the following legal bases:
Performance of the contract, in particular to process your order, payment, delivery or return request.
Compliance with a legal obligation, in particular for invoicing and keeping accounting records.
NAVOTI’s legitimate interest, in particular to ensure the security of the website, prevent fraud, handle certain customer service requests and defend its rights.
Your consent, when processing requires your prior agreement, in particular for certain non-essential cookies and trackers.
5. Who can access your data?
Your data is accessible only to the people who need it to carry out their duties and to the service providers involved in providing the services needed to run the website.
Depending on the case, this may include in particular:
- authorized NAVOTI departments
- Odoo, used to run the website and online store
- Stripe, for secure payment processing
- the carriers and logistics providers responsible for delivering your order
- technical providers needed to run, maintain or secure the website
Only the data needed to carry out their services is shared with them.
The CNIL (the French data protection authority) lists delivery providers among the legitimate recipients of the information needed to ship an order.
NAVOTI doesn’t sell your personal data.
6. Payment and banking data
Payments made on the website are processed by Stripe.
The banking data needed to make the payment is collected and processed by the payment provider as part of the transaction.
NAVOTI doesn’t have access to your full card number or its security code.
7. How long do we keep your data?
Personal data is kept only for as long as necessary to achieve the purposes for which it was collected, and may then be archived when it needs to be kept to comply with a legal obligation or to defend NAVOTI’s rights.
In particular:
Order and invoicing data: kept for as long as necessary to manage the business relationship and then, for documents subject to accounting obligations, for 10 years.
Customer account data: kept for as long as the account is in use and for a reasonable period after its last activity, subject to the applicable legal retention obligations.
Customer service requests: kept for as long as necessary to handle the request and then, where necessary, for as long as needed for NAVOTI to follow up on the relationship or defend its rights.
Cookie and tracker data: the retention period depends on the type of tracker and is specified in the Cookie Policy.
The CNIL points out that data mustn’t be kept indefinitely and that the retention period must be suited to the purpose of the processing. For data needed to manage orders and invoicing, it gives as a reference the duration of the business relationship and then 10 years for accounting obligations.
8. Cookies and other trackers
The website uses cookies and similar technologies that are necessary for it to work.
Depending on the features used on the website, other cookies may be used in particular to measure audience or provide additional features.
Where required by the regulations, these cookies are only placed after obtaining your consent.
You can accept, refuse or change your choices using the cookie management tool available on the website.
To find out more, see our Cookie Policy.
9. Your rights over your personal data
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you may, depending on your situation, exercise the following rights:
- right of access to your personal data
- right to rectify inaccurate or incomplete data
- right to have your data erased under the conditions set out in the regulations
- right to restrict processing
- right to object to certain processing
- right to the portability of certain data
- right to withdraw your consent at any time when processing is based on it
The exercise of certain rights may be limited when NAVOTI is legally required to keep certain information.
The CNIL points out that the data controller must enable these rights to be exercised effectively and, in principle, respond within one month.
10. How to exercise your rights
To exercise your rights or ask a question about the use of your personal data, you can contact NAVOTI:
By email: cellfood@navoti.com
By mail:
NAVOTI SAS
ZA Polaxis – Avenue de Boulnay
37360 Neuillé-Pont-Pierre
France
To protect your data, NAVOTI may ask for information to verify your identity when necessary.
11. Complaints to the CNIL
If, after contacting us, you believe that your rights regarding your personal data aren’t being respected, you can file a complaint with the Commission nationale de l’informatique et des libertés (CNIL), the French data protection authority.
12. Data security
NAVOTI implements technical and organizational measures to protect personal data against, in particular, loss, unauthorized access, alteration or unauthorized disclosure.
Access to data is limited to the people and providers who need it to carry out their duties or provide their services.
13. Data transfers outside the European Union
Some technical providers may process data from countries outside the European Union or the European Economic Area.
When such transfers take place, NAVOTI ensures that they’re based on a mechanism recognized by the applicable regulations, such as an adequacy decision or appropriate safeguards like the European Commission’s standard contractual clauses.
14. Changes to this policy
This Privacy Policy may be updated, in particular to reflect changes to the website, the services offered, the providers used or the regulations.
The date of the last update is shown at the top of this page.