Slide Candy – Privacy Policy

Last updated: 25 June 2026.
Slide Candy (“we”, “us”, “our”) is a ski and snowboard equipment rental business based at Le Pont des Combes, Le Raffort, 73550 Méribel, France, operating in the Méribel valley and La Tania. We are the data controller for the personal information described in this policy.

This policy explains what personal information we collect, why, the legal basis for processing it, how long we keep it, and the rights you have under the General Data Protection Regulation (GDPR) and French data protection law (Loi Informatique et Libertés).

We may update this policy from time to time. Please check this page periodically for the latest version.

1. Who we are and how to contact us

Slide Candy
Le Pont des Combes, Le Raffort, 73550 Méribel, France
Email: hello@slidecandy.com

If you have any questions about this policy or how we handle your personal information, please contact us using the details above. We aim to respond to all enquiries within one month.

2. Information we collect, why, and our legal basis

We only collect personal information that you provide to us directly. The sections below set out what we collect, why we use it, and the legal basis we rely on under Article 6 GDPR.

a. Contacting us

When you use our online enquiry form, we collect your name, email address, and any other information you choose to include in your message.
  • Purpose: responding to your enquiry
  • Legal basis: legitimate interest (responding to enquiries you have raised with us)

b. Online bookings

When you make a booking, we collect:
  • Your resort and chalet company / tour operator
  • Where you are staying, and your arrival date and estimated time
  • The dates and duration of your ski/snowboard holiday
  • The number of people in your party
  • The name, age, sex, height, weight, ability level and ski/snowboard preference of each member of your party
  • Foot size (if booking boot hire)
  • Your email address, telephone number, and billing address
  • Payment information (processed securely by our payment provider, Stripe – see Section 6)
  • Any other information you choose to provide, including how you heard about us
  • Purpose: to process your booking, fit each member of your party with the correct equipment, and take payment.
  • Legal basis: performance of a contract with you (Article 6(1)(b) GDPR). Where you tell us how you heard about us or add optional comments, we rely on your consent to use that information to improve our service.
By submitting personal information on behalf of other members of your party (including minors), you confirm that you have their permission, or the appropriate parental/guardian authority, to share that information with us.

c. Account registration

If you register an account, we collect your email address, name, telephone number, and a password of your choice.
  • Purpose: account administration and fulfilment of bookings made while logged in
  • Legal basis: performance of a contract with you

d. Website analytics – Google Analytics

With your consent, we use Google Analytics to understand website traffic and engagement. This provides us with aggregated, non-identifying statistics about how visitors use our site.
  • Purpose: measuring and improving website performance
  • Legal basis: your consent, given via our cookie banner
You can withdraw consent at any time by adjusting your cookie preferences, or by installing the Google Analytics opt-out browser add-on.

Google Analytics may transfer data to the United States. Google participates in recognised transfer safeguards (such as the EU-U.S. Data Privacy Framework and/or standard contractual clauses) intended to ensure your data receives an equivalent level of protection.

e. Cookies

Our website uses cookies. Strictly necessary cookies (needed for the site to function) are set automatically; all other cookies, including analytics cookies, are only set once you have given consent via our cookie banner. You can change your preferences at any time. Please see our separate Cookie Policy for full details.

f. Marketing emails

If you opt in, we will send you promotional emails and special offers from Slide Candy only – we never pass your details to unaffiliated third parties for their own marketing.
  • Purpose: sending you marketing communications
  • Legal basis: your consent
You can withdraw consent at any time by clicking ‘unsubscribe’ in any marketing email, or by emailing hello@slidecandy.com.

3. How long we keep your information

We keep personal information only for as long as necessary for the purposes set out above, and to meet our legal obligations:
  • Booking and customer account data: retained for the duration of our relationship with you, and for up to 3 years after your last contact or booking with us, after which it is deleted or anonymised.
  • Invoices and billing records: retained for 10 years, as required under French commercial and accounting law (Code de commerce, Article L123-22).
  • Marketing consent records: retained until you unsubscribe or withdraw consent, plus a reasonable period to evidence that withdrawal.
  • Enquiry form submissions not leading to a booking: retained for up to 1 year.

4. Your rights

Under the GDPR, you have the right to:
  • Access the personal information we hold about you
  • Rectify inaccurate or incomplete information
  • Erasure of your personal information, in certain circumstances
  • Restrict how we process your information, in certain circumstances
  • Object to processing based on legitimate interest, including for marketing
  • Data portability – to receive certain information in a structured, machine-readable format
  • Withdraw consent at any time, where we rely on consent
To exercise any of these rights, contact us at hello@slidecandy.com or by post at the address above. We may refuse certain requests where we have a legal obligation or overriding legitimate ground to continue processing.

You also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), at www.cnil.fr, or with the supervisory authority in your own EU country of residence.

5. Information security

We use appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. All information submitted via our website is sent over a secure (HTTPS) connection. We do not sell, distribute or lease your personal information to unaffiliated third parties unless required by law or with your permission.

6. Third parties and payment processing

We use the following categories of third-party service providers, who process personal information on our behalf or as independent controllers:
  • Stripe – to process payments securely. We do not store full card details ourselves; these are handled directly by Stripe in accordance with its own privacy policy and PCI-DSS security standards.
  • Google Analytics – to analyse website traffic (see Section 2(d)).
We only share personal information with third parties where necessary to provide our services, where required by law, or with your consent.

7. Links to other websites

Our website may contain links to third-party websites. We do not control these sites and are not responsible for their privacy practices. Please review the privacy policy of any third-party site before submitting personal information to it.

8. Questions or concerns

If you have any questions or concerns about this privacy policy or how we handle your personal information, please email hello@slidecandy.com or write to Slide Candy, Le Pont des Combes, Le Raffort, 73550, Méribel, France.