​

Last updated: 21 July 2026

2.1 Data controller

The controller responsible for personal data processed through RationBox.eu is:

SAS RATIONBOX
Registered office: 

7 impasse du puits fleuri, 17510, Chives, France
SIREN: 949 746 069
Email for privacy enquiries: info@rationbox.eu

 

2.2 Information we collect

Depending on how the website is used, we may collect:

• name and surname;

• billing and delivery address;

• email address;

• telephone number;

• order and transaction information;

• payment status;

• customer-service correspondence;

• account information;

• IP address;

• browser and device information;

• website activity;

• cookie preferences; and

• marketing preferences.

Payment-card details are normally processed directly by the payment provider and are not stored in full by RationBox.

2.3 Why we process personal data

We may use personal data to:

• process and deliver orders;

• manage payments, refunds and returns;

• provide customer service;

• create and maintain customer accounts;

• prevent fraud and secure the website;

• fulfil accounting, tax and legal obligations;

• manage recalls and Product-safety communications;

• improve the website and services;

• send marketing communications where legally permitted; and

• establish, exercise or defend legal claims.

2.4 Legal bases

Depending on the processing activity, we rely on:

• performance of a contract;

• compliance with a legal obligation;

• our legitimate interests;

• protection of vital interests where relevant; or

• the Customer’s consent.

Marketing consent can be withdrawn at any time.

2.5 Who receives personal data

Personal data may be shared with service providers where necessary, including:

• payment providers;

• banks and accounting providers;

• delivery companies;

• warehousing and fulfilment partners;

• website and hosting providers;

• email and customer-service platforms;

• analytics or advertising providers, where permitted;

• fraud-prevention providers;

• professional advisers; and

• public authorities where legally required.

These recipients may only process personal data for authorised purposes and subject to appropriate safeguards.

2.6 International transfers

Some service providers may process data outside the European Economic Area.

Where required, RationBox will use an appropriate transfer mechanism, such as an adequacy decision or approved standard contractual clauses.

2.7 Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected and to comply with legal, tax, accounting and dispute-resolution requirements.

Typical retention periods include:

• account data: while the account remains active and for an appropriate period afterwards;

• order and invoice data: for the legally required accounting and tax-retention period;

• customer-service correspondence: for the time needed to handle the request and related claims;

• marketing data: until consent is withdrawn or the information is no longer required; and

• cookie data: for the period described in the Cookie Policy.

2.8 Individual rights

Subject to applicable law, individuals may have the right to:

• access their personal data;

• correct inaccurate data;

• request deletion;

• restrict processing;

• object to processing;

• receive portable data;

• withdraw consent; and

• lodge a complaint with a data-protection authority.

Requests may be sent to info@rationbox.eu

RationBox may request reasonable proof of identity before processing a request.

Individuals in France may submit a complaint to the Commission Nationale de l’Informatique et des Libertés, commonly known as the CNIL.

2.9 Marketing

Marketing emails will be sent only where legally permitted.

Recipients can unsubscribe using the link included in a marketing email or by contacting info@rationbox.eu

Unsubscribing from marketing does not prevent RationBox from sending transactional messages concerning orders, payments, deliveries, recalls or customer-service requests.

2.10 Security

RationBox uses reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, loss, disclosure or destruction.

No internet-based system can be guaranteed to be completely secure.

2.11 Children

RationBox.eu is not intended for use by children who are not legally able to enter into a purchase contract.

We do not knowingly collect personal data from children for marketing purposes.

2.12 Changes to this policy

This Privacy Policy may be updated to reflect changes in legal requirements, processing activities or service providers.

The latest revision date appears at the beginning of the Policy.