Delivery & Shipping Costs

Last updated: September 15, 2026

Our personal data protection policy (hereinafter the "Policy") describes how Arc Web & Retail, a simplified joint-stock company, registered with the Boulogne-sur-Mer Trade and Companies Register under number 483 855 227, located at 104, avenue du Général de Gaulle – 62510 Arques (hereinafter "AWR"), processes, as data controller, the personal data of its customers (hereinafter "Customer(s)").

AWR operates the website www.latabledarc.com (hereinafter the "Website"), and collects, stores, and processes personal data concerning the Customer when the latter uses the Website. This Policy is therefore intended to exclusively govern the processing of data collected directly on the Website and in the context of electronic communications that AWR sends to its Customers.

Committed to ensuring the highest level of protection of your personal data, AWR undertakes to take all necessary measures to process your personal data in accordance with the provisions of Law No. 78-17 of January 6, 1978, as amended, relating to data processing, files, and freedoms, and those of Regulation (EU) No. 2016/679 of April 27, 2016, on personal data protection.

AWR may collect and process all or part of the following personal data for the purposes described in section 3:

• Identification data: title, surname, first name(s), email address, telephone number, billing address, and delivery address;
• Account data: username(s) and password(s) on the Site (password is stored in an unreadable format), connection history;
• Data relating to purchases and orders: products ordered, amounts, order history, product returns, complaints, and after-sales service records;
• Payment data: chosen payment method, transaction reference, and status. AWR does not store full bank details (see section 3);
• Data relating to customer relationship: content of exchanges with customer service (email, contact form), product reviews submitted by the Client;
• Data relating to our communications: expressed consents and refusals, unsubscribes, engagement data related to our emails (opens and clicks), under the conditions described in section 11;
• Data relating to participation in contests;
• Technical and electronic identification data collected from the Client's device: IP address, tracker identifiers, pages and content viewed, browsing path, device type, operating system, and browser.

Mandatory data are identified by an asterisk on the Site's forms; others are optional and allow AWR to improve communications and services to the Client. Without the mandatory data, the Client's order cannot be processed.

AWR does not collect or process data falling under the special categories referred to in Article 9 of the GDPR, namely data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data, data concerning health, sex life, or sexual orientation. AWR also does not process data relating to criminal convictions or offenses.

The Customer's personal data is collected:

Directly from the Customer, when they:

• create their customer account on the Website;
• place an order on the Website and proceed with payment;
• subscribe to our newsletter or consent to receive our commercial communications;
• contact customer service, by phone, email, or via the contact form;
• post a product review;
• participate in a contest;
• express their choices regarding trackers and communication preferences.

Automatically, when browsing the Website and opening our emails, using the trackers described in sections 10 and 11, and subject to the Customer's consent, when required.

From our service providers, for only the information necessary for order fulfillment (e.g., delivery status transmitted by the carrier or transaction status transmitted by our payment service provider).

AWR collects personal data for the following purposes, each based on a specific legal basis.

3.1. Processing necessary for contract performance

The provision of personal data collected for distance selling purposes is necessary for the confirmation and validation of the Customer's order, as well as for its tracking and shipping. This data may be transmitted to AWR's service providers solely for the proper execution of the order, particularly its payment and delivery, according to the options selected by the Customer during the order.

The purposes pursued on this basis are as follows:

• Creation and management of the customer account, shopping cart, and orders;
• Management of delivery operations;
• Management of payment operations: when the Customer makes a payment on the Site, payments are secured by our banking service provider: the Customer's credit card details are encrypted using the SSL protocol and are never transmitted unencrypted over the network. No banking data is stored by AWR. Banking transactions take place directly between the Customer and AWR's banking service provider. Payment can also be made via a Paypal account. If the Customer has a Paypal account, payment will be made using the process set up by this company: payment with the email address and password entered when creating the Paypal account. All of the Customer's banking details are collected only by our certified payment service provider, which ensures payment security;
• Customer relationship management by telephone or email, after-sales service tracking, management of product returns and refunds;
• Sending service communications relating to the Customer's account or the contractual relationship, for example, to inform them of a modification to the Site, this Policy, or the general terms and conditions of sale.

3.2. Processing necessary for AWR's compliance with legal obligations

AWR uses the Customer's personal data to fulfill its legal obligations, particularly for purposes of:

• proof of transactions and operations;
• compliance with its accounting and tax obligations;
• responding to legal or administrative requirements incumbent upon AWR, the needs of its insurers, or for audit purposes;
• managing requests for the exercise of data subjects' rights.

3.3. Processing based on your consent

The Customer expresses their consent through a positive and unambiguous act (opt-in), distinct for each purpose, particularly when:

• subscribing to our newsletter and agreeing to receive our commercial communications;
• depositing non-strictly necessary trackers on their terminal when browsing the Site, under the conditions described in section 10;
• inserting tracking pixels in our emails, under the conditions described in section 11;
• participating in a contest.

The Customer may withdraw their consent at any time, as easily as it was given:

• for commercial communications: via the unsubscribe link present in each of our communications;
• for trackers deposited on the Site: via the tracker management module permanently accessible on the Site ("Cookie Management" module from the footer of the Site);
• for tracking pixels in our emails: via the preference center accessible from the footer of each of our messages.

The withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

3.4. Processing based on AWR's legitimate interest

AWR has a commercial interest in processing Customer data, which is justified, balanced, and does not tend to harm their privacy. When the processing carried out by AWR is based on its legitimate interest, the Customer may object to it, for reasons related to their particular situation, under the conditions provided in section 10.

Such processing may occur during:

• sending commercial communications by email to our Customers, relating to products or services similar to those they have already purchased from AWR, in accordance with Article L. 34-5 of the French Postal and Electronic Communications Code. The Customer is informed of this option at the time of collecting their email address and can object to it at any time via the unsubscribe link present in each message. Any other commercial prospecting by email is based on the Customer's prior consent (section 3.3);
• sending satisfaction surveys for the purpose of improving our services;
• organizing commercial events for the purpose of retaining Customers;
• combating fraud during order payment;
• managing product reviews to improve our goods and services;
• conducting statistical analyses, on aggregated data, for the purpose of managing and improving our services;
• managing our social media accounts, for the purpose of promoting our products and customer service;
• using trackers exempt from consent in our emails, under the conditions described in section 11;
• managing Customer litigation for the defense of our interests in court.

AWR does not transfer, rent, or sell the Customer's personal data to third parties for commercial purposes. To achieve the aforementioned purposes, the Customer's personal data is only shared with the following recipients:

4.1. ARC Group Entities

Only authorized personnel of ARC Group 1825 (i.e., any entity, regardless of its form, in which ARC HOLDINGS – 575 680 350 RCS Boulogne-sur-Mer – directly or indirectly holds capital or voting rights) whose activity justifies access to the information is authorized to access Customer data.

These communications are based on AWR's legitimate interest in pooling certain support functions within the Group, with the exception of any use for commercial prospecting purposes by another Group entity, which could only occur with the Customer's prior consent.

Below is the list of ARC Group entities likely to process your personal data for the associated purposes:

The processing of personal data is carried out by the company Verrerie Arc 1825, with its registered office at 104, avenue du Général de Gaulle, 62510 Arques - France, and registered with the Boulogne-sur-Mer Trade and Companies Register under number 998 943 419. The sole purpose of this processing is the management and handling of requests related to the exercise of GDPR rights.

4.2. Sub-processors

AWR uses service providers and sub-processors who perform services according to its instructions and on its behalf only, and to whom data may be temporarily and securely transmitted. Each is bound to AWR by a contract compliant with Article 28 of the GDPR. These include in particular:

• Colissimo, Chronopost and Schenker, for order delivery;
• Klaviyo, for routing our emails, measuring engagement as described in section 11, managing loyalty programs, managing customer relationships and sales tracking (CRM);
• Shopify Payments, for payment processing and security;
• Shopify and Odoo, for hosting the Site and our databases;
• Avis-Vérifiés, for collecting and moderating product reviews;
• Gorgias, for customer service; 
• Colorz and Niboo, service providers who assist us in providing IT services, maintaining our databases, software and applications; these providers may have access to your data to perform the requested tasks.

4.3. Third-party trackers

The marketing trackers described in section 11 may lead to the communication of data to our advertising partners, when the Customer has previously consented. The list of these partners, as well as the associated purposes and durations, is accessible from the Site's tracker management module.

4.4. Other third parties

As part of a restructuring, reorganization or transfer, in any form and capacity whatsoever (including sale of business assets, dissolution, liquidation, merger), of ARC Group entities.

AWR shares your personal data with other third parties only if (i) AWR is obliged to do so by its legal obligations, for example at the request of competent courts, or (ii) if the sharing is lawful under applicable law.

Certain regulated professions such as lawyers, notaries or statutory auditors, as part of the performance of their mandate, or directly judicial or administrative authorities in application of legal provisions.

Some of the Customer's personal data may be transferred to or made accessible outside the European Union as part of its subcontractors' activities.

These transfers are governed by one of the following mechanisms:

• an adequacy decision by the European Commission recognizing that the destination country provides an adequate level of protection;
• for providers established in the United States, certification under the EU-US Data Privacy Framework;
• failing that, the standard contractual clauses adopted by the European Commission by Implementing Decision (EU) 2021/914, supplemented if necessary by additional technical and organizational measures identified after an analysis of the level of protection offered by the destination country;
• or any other valid transfer mechanism that may be put in place in the future.

Personal data is only kept for the period necessary for the purposes for which it was collected, according to the following durations.

• Customer account, prospecting, and email engagement data: 3 years from the last order or last contact initiated by the Customer.
• Order, billing, and accounting documents data: 10 years from the end of the financial year.
• Data relating to product warranty and conformity: the period necessary to comply with contractual and legal obligations.
• Proof of consent and its withdrawal: the duration of the processing concerned, then 3 years for evidential purposes.
• Data relating to product reviews: 18 months from their collection, followed by purging and anonymization (the review remains visible but anonymized).
• Data relating to contests: 3 years for customers who have opted-in to the newsletter (otherwise kept for the time it takes to award the prize), followed by secure archiving for 5 years for legal reasons.
• Trackers and associated data: maximum 13 months for trackers placed on the terminal and maximum 25 months for data collected using site trackers.
• Engagement data related to our emails: 3 years from the last contact initiated by the Customer.
• Requests for exercising rights: the time necessary to process the request, then archived for evidential purposes during the applicable limitation periods.

A contact initiated by the Customer constitutes any positive action on their part, such as an information request, a click on a hyperlink contained in an email, or the creation of a customer account without placing an order.

If the Customer has consented to receive commercial communications, their data is kept until they unsubscribe or, in any case, at the end of the 3-year period mentioned above.

At the end of these periods, the data is deleted or anonymized. However, it may be subject to interim archiving, with strictly restricted access to authorized persons, when necessary for the establishment, exercise, or defense of a legal right, during the applicable limitation period. In the event of legal action, data is kept until all remedies have been exhausted, then deleted or archived within the limits permitted by law.

AWR implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR, including:

• encryption of communications between the Client's terminal and the Site using the TLS protocol;
• strict access management, limiting data access only to those whose duties justify it;
• confidentiality commitments applicable to staff and service providers;
• selection of subcontractors providing sufficient guarantees and bound by a contract in accordance with Article 28 of the GDPR.

In the event of a personal data breach likely to result in a risk to the Client's rights and freedoms, AWR will notify the CNIL of this breach within 72 hours of becoming aware of it and, when the risk is high, will inform the Client as soon as possible.

The Site is intended for adults. The creation of a customer account and the placement of orders are reserved for individuals with the legal capacity to enter into contracts.

AWR does not knowingly collect personal data concerning minors under 15 years of age. Should such a case come to our attention, the data concerned would be deleted as soon as possible. The holder of parental authority may at any time request the deletion of a minor's data at the address indicated in section 13.

In accordance with amended Law No. 78-17 of January 6, 1978, and Regulation (EU) No. 2016/679 of April 27, 2016, the Client has the following rights:

• Right of access: The Client can obtain information regarding the processing of their personal data as well as a copy of their personal data.
• Right to rectification: If the Client believes that their personal data is inaccurate or incomplete, they can request that this data be amended accordingly.
• Right to erasure: The Client can request the erasure of their personal data, within the limits permitted by regulations.
• Right to restriction of processing: The Client can request the restriction of the processing of their personal data.
• Right to object: The Client can object to the processing of their personal data based on AWR's legitimate interest, for reasons related to their particular situation. The Client also has the absolute right to object to the processing of their data for commercial prospecting purposes, including profiling related to such prospecting.
• Right to data portability: Where this right applies, the Client has the right to receive the personal data they have provided to AWR back or, where technically feasible, to have it transferred to a third party.
• Right to withdraw consent: Where processing is based on consent, the Client can withdraw it at any time, as easily as it was given, according to the procedures indicated in section 3.3. This withdrawal does not affect the lawfulness of processing carried out previously.
• Right to define directives regarding the retention, erasure, or communication of their personal data, applicable after their death.

The Client can exercise these rights at any time by sending their request to the following address: dpo@arc-intl.com, or by post:

VERRERIE ARC 1825

104, avenue du Général de Gaulle 62510 Arques, France

For the attention of the Legal Department

AWR will respond to any request within one month of its receipt. This period may be extended by two months given the complexity or number of requests, in which case the Client will be informed. In case of reasonable doubt regarding the identity of the applicant, AWR may request proof of identity, a copy of which will be deleted after verification.

If, after contacting AWR, the Client believes that their rights are not being respected, they can lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07, or online at www.cnil.fr.

What is a tracker?

A tracker is a device that allows information to be written to or read from the Client's terminal. This concept includes cookies in the strict sense, but also other technologies with equivalent effects such as tracking pixels. Trackers inserted into our emails are covered in section 11.

A tracker identifies the terminal on which it is stored. It does not contain or store isolated information: it can be read by a server via an internet browser and provides information that allows the Site to better meet the expectations of its users, by notably recording usage preferences, detecting errors, or collecting statistical data.

The principle: your prior consent

Except when strictly necessary for the provision of a service expressly requested by the user, trackers can only be placed or read after obtaining your consent.

During your first visit, a tracker management module allows you, from the first level of information and with a single click, to either accept all trackers, refuse them, or customize your choices purpose by purpose. Refusing is as simple as accepting, and refusing non-essential trackers has no impact on your access to the Site or its essential functionalities. Your lack of choice is interpreted as a refusal.

Your choices are saved so that you are not solicited again on each visit, for a period of 13 months. You can modify them or withdraw your consent at any time, as easily as you gave it, from the tracker management module permanently accessible via the "Cookie Management" link at the bottom of each page of the Site.

The lifespan of deposited trackers does not exceed 13 months and the data collected through them is not retained beyond 25 months.

What types of trackers do we use?

Trackers strictly necessary for the operation of the Site

These are essential trackers for navigation, which allow you to use the main functionalities of the Site and secure your connection. They notably allow AWR to:

• implement security measures on the Site;
• facilitate your navigation by recording your language preferences, login credentials, or the content of your shopping cart;
• adapt the presentation of the Site to your terminal's display preferences.

These trackers are not subject to your consent.

Audience measurement trackers

They allow AWR to understand the use and performance of the Site, to establish statistics on its traffic and the use of its various elements. They notably allow us to:

• establish statistics concerning the volume of Site traffic (number of visits, page views) and compile reports on the use of its various sections and the navigation paths taken;
• improve the Site accordingly;
• detect potential navigation difficulties.

Some of these trackers, whose purpose is strictly limited to audience measurement for the exclusive account of AWR, whose data is not cross-referenced with other processing operations or transmitted to third parties, and whose scope is limited to the Site, may be exempt from consent in accordance with CNIL guidelines. The tracker management module specifies, for each tracker, whether it is exempt or subject to your consent. You can nevertheless object to exempt trackers from this same module.

Marketing and advertising trackers

These trackers notably allow for:

• limiting the number of times you see an advertisement or offer;
• displaying advertisements tailored to your interests, on or off the Site, based on your terminal's browsing;
• personalizing the content and offers presented to you on the Site;
• combating click fraud.

These trackers require your prior consent. Some are deposited by third-party partners, who act as data controllers for their own purposes and whose list, privacy policies, and retention periods are accessible from the tracker management module.

List of trackers used

The detailed list of trackers present on the Site, specifying for each its name, issuer, purpose, lifespan, and whether it is internal or third-party, is accessible in the tracker management module. This list is updated with each evolution of our tools.

Management via your browser

You can also configure your browser to accept or reject trackers, globally or on a case-by-case basis. Each browser has its own management system, described in its "Help" menu:

• Google Chrome: https://support.google.com/chrome/answer/95647?hl=fr
• Mozilla Firefox: https://support.mozilla.org/fr/kb/activer-desactiver-cookies-preferences
• Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac
• Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies 

Modifying your browser settings may affect your browsing experience, especially if you block trackers strictly necessary for the operation of the Site.

For any further explanation on trackers and how to configure your browser, you can consult the CNIL website: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

What is a tracking pixel?

A tracking pixel is a tracker, distinct from cookies but of a comparable nature, generally inserted as a very small image (one pixel by one pixel), invisible to the reader, in the body of an email. The address of this image contains an identifier unique to you: its loading from AWR's or its sending provider's servers allows us to know that the message has been opened and, depending on the settings chosen, to collect additional information such as the date and time of opening, the type of device and email software used, and the IP address.

These operations constitute access to your device within the meaning of Article 82 of Law no. 78-17 of January 6, 1978, as amended. They are therefore subject to the same rules as trackers placed on the Site.

Purposes subject to your prior consent

Except where an exemption applies, AWR only uses these trackers after obtaining your consent, for the following purposes:

• individually measure the opening of our emails and clicks on their content, in order to evaluate and improve the performance of our campaigns;
• personalize the content of our messages based on your interests;
• adapt the frequency of our mailings and the communication channel used.

Purposes exempt from consent

In accordance with the CNIL's recommendation regarding tracking pixels in emails, certain strictly necessary uses do not require your consent, subject to specific conditions. AWR uses them, informing you, for:

• ensuring the deliverability of our messages: recording only the last opening date of emails you have expressly requested, in order to identify inactive addresses and, if necessary, reduce the frequency of our mailings, use another channel, or stop mailings;
• securing certain messages: pixels inserted in authentication or password reset emails, in order to detect a possible interception attempt.

These processing operations are based on AWR's legitimate interest. You can object to them at any time by writing to the address indicated in section 12 or from your preference center.

Collection, refusal and withdrawal of your consent

Your consent is collected at the time of the collection of your email address — account creation, subscription to our newsletter, or participation in a contest — by a positive action on your part, distinct from your consent to receive our commercial communications. The possibility of refusing is offered to you as simply as that of accepting; your inaction is interpreted as a refusal.

You can change your choice at any time, as easily as you expressed it via the link at the bottom of each of our emails.

Recipients and retention period

This data is processed on behalf of AWR by Klaviyo, as a sub-processor responsible for routing our emails. It is kept for up to 3 years from the last contact with the customer, then deleted or anonymized. Global statistics, based on aggregated and anonymized data, may be kept beyond this period.

In accordance with CNIL recommendations, opening an email is not considered as a contact from you and therefore does not extend the retention period of your data for prospecting purposes.

This Policy may be modified, in particular to reflect any changes in the way AWR collects and processes Customer data. The Customer may consult these updates by referring to the Policy on the Website, the update date being specified at the top of this document. Any substantial modification may be communicated to the Customer via the Website or through the usual communication channels and, when regulations require it, a new collection of their consent.

Any questions regarding the processing of your personal data may be addressed:

• by email: dpo@arc-intl.com
• by post:

Verrerie Arc 1825 104, avenue du Général de Gaulle 62510 Arques, France 

For the attention of the Legal Department

The Customer may also consult the website of the French National Commission for Information Technology and Civil Liberties (CNIL): www.cnil.fr