Intixo B2B

Privacy policy

VRAIVEX SAS is committed to protecting the privacy of users of the Intixo B2B platform, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Last update: February 2026

1. Data controller

The data controller for personal data is:

  • VRAIVEX SAS
  • 229 rue Saint-Honoré, 75001 Paris, France
  • SIREN: 909 163 313
  • Email: [email protected]

2. Data collected

In the context of using the Intixo B2B platform, we collect the following categories of data:

2.1. Registration data

  • Contact name
  • Professional email address
  • Phone number
  • SIRET number
  • VAT number
  • KBIS extract (PDF document)
  • Delivery and billing addresses
  • Type of activity and website

2.2. Order data

  • Order history
  • Products purchased and amounts
  • Payment information (processed by our secure payment provider)
  • Delivery addresses

2.3. Browsing data

  • IP address
  • Browser type and operating system
  • Pages visited and visit duration
  • Cookie data (see section 9)

3. Purposes of processing

Your personal data is processed for the following purposes:

  • Customer account management — creation, validation and administration of your professional account
  • Order processing — handling, tracking, delivery and invoicing
  • Commercial communication — information on new products, promotions and services (with your consent)
  • Service improvement — analysis of platform use and optimisation of user experience
  • Legal obligations — compliance with accounting, tax and regulatory obligations

4. Legal basis for processing

Processing of your data is based on the following legal grounds:

  • Contract performance (Article 6.1.b GDPR) — processing necessary for order execution and account management
  • Legitimate interest (Article 6.1.f GDPR) — service improvement, fraud prevention, platform security
  • Consent (Article 6.1.a GDPR) — sending commercial communications, analytical cookies
  • Legal obligation (Article 6.1.c GDPR) — retention of accounting and tax data

5. Retention period

Your personal data is retained for the following periods:

Type of dataRetention period
Customer account data3 years after last activity
Order data3 years after last activity
Accounting and tax data10 years (legal obligation)
Browsing data / cookies13 months maximum
Cookie consent6 months

Upon expiry of these periods, data is deleted or irreversibly anonymised.

6. Data recipients

Your personal data may be disclosed to the following recipients, strictly as necessary:

  • Internal services — commercial, logistics and technical teams of VRAIVEX SAS
  • Technical providers — hosting, payment provider, email service
  • Carriers — for order delivery
  • Competent authorities — upon judicial request or legal obligation

Our providers are bound by contractual confidentiality and security obligations compliant with the GDPR.

7. Transfers outside the European Union

VRAIVEX SAS does not transfer your personal data outside the European Union. All data is hosted and processed on servers located within the EU. Should a transfer be considered, it would be covered by appropriate safeguards provided for by the GDPR (standard contractual clauses, European Commission adequacy decision).

8. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

  • Right of access — obtain confirmation of processing of your data and receive a copy
  • Right to rectification — have inaccurate or incomplete data corrected
  • Right to erasure — request deletion of your data in cases provided for by the GDPR
  • Right to portability — receive your data in a structured, commonly used format
  • Right to object — object to processing of your data on legitimate grounds
  • Right to restriction — request restriction of processing in certain cases
  • Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

Exercising your rights

You may exercise your rights by contacting us at: [email protected]

We are committed to responding to your request within one month. This period may be extended by two further months in case of complexity or a large number of requests. Identity verification may be required.

9. Cookies

The Intixo B2B platform uses cookies to ensure proper functioning and improve your experience.

9.1. Technical cookies (necessary)

These cookies are essential for the website to function. They enable navigation, authentication and cart management. They do not require your consent.

9.2. Analytical cookies (optional)

These cookies allow us to measure site traffic and analyse browsing patterns to improve our services. They are only placed with your prior consent.

You can modify your cookie preferences at any time via the cookie management banner or your browser settings.

10. Data security

VRAIVEX SAS implements appropriate technical and organisational measures to protect your personal data against unauthorised access, modification, disclosure or destruction. These measures include encryption of communications (HTTPS/TLS), access control, regular data backup and staff training.

11. DPO contact

For any questions regarding the protection of your personal data, you may contact our Data Protection Officer (DPO):

Email: [email protected]

12. Complaint to the CNIL

If you consider that the processing of your personal data does not comply with the regulations in force, you have the right to lodge a complaint with the French Data Protection Authority (CNIL):

  • CNIL
  • 3 Place de Fontenoy, TSA 80715
  • 75334 Paris Cedex 07
  • Website: www.cnil.fr