Your data and privacy

Order requests

The form collects your name, phone, e-mail, city, address, requested items and optional details. This information allows you to prepare, confirm and follow your request. Avoid entering medical information in the delivery details.

Where are they treated?

Requests are stored in the store's Cloudflare database and accessible to the store's administration. If you choose to send the summary to WhatsApp, the contact details that it contains are also transmitted to this service.

Register to get a promo code

If you request a promo code, we will register your e-mail, phone, offer and date of your agreement. These contact details are accessible to the CPAPShop administration and transmitted to the store's courier via Resend when the alerts are activated. The registration does not create a customer account and the contact details are not verified by SMS or e-mail. Two separate optional agreements allow you to receive other offers by e-mail and by WhatsApp; they are not necessary to obtain the code.

Registration forms longer than 180 days are deleted from the database when accessing the form or administration in the future. Copies received by e-mail and backups must be managed separately by the shop. You can request a correction, withdrawal of agreement or deletion via the Contact page, without any obligation to purchase.

Storage in your browser

The basket, the comparator and the references of "My equipment" use local storage. The summary and the tracking link use session storage; their display is limited to 24 hours. The private tracking link remains usable as long as the order and the key of the service exist: keep it confidential.

Statistics and security

Aggregated meters measure the steps of the journey without visitor ID or basket content. The browser's "Don't Track Me" signal disables these events. IP address fingerprints protect the forms from abuse; old abuse meters are cleaned when using the services. Administrators use a session cookie.

Site speed and stability are measured using LCP, INP and CLS categories, without visitor identifiers or visited URLs. Aggregated counts are retained for up to 90 days and cleaned when new measurements arrive. Do Not Track disables these measurements.

Customer account and rewards

Your profile, linked orders and loyalty history are stored in Cloudflare D1. A secure cookie keeps you signed in for 12 hours. Resend sends verification and recovery links, valid for 30 minutes and one use only. Registration does not subscribe you to marketing. Uploading therapy tracking files is not available.

Retention and applications

The store has to specify the duration of the orders and backups. Contact us to request access, correction or deletion of your information.

Contact: +212 7 27 88 67 71The identity of the person in charge is indicated on the Legal Notice page when it is provided.