Last updated: July 2026.
1. Data Controller
The data controller for personal data collected on the FroggyParts website is NM Automotive. See the legal notices.
2. Scope
This privacy policy applies to the processing of personal data implemented in connection with the operation of the website. https://froggyparts.com, including during browsing, contacting us, possibly creating a customer account, placing an order and making payment.
3. Data collected
Depending on the use of the Site, NM Automotive may collect the following categories of data:
- Identification data: surname, first name, title; ;
- Contact details: postal address, email address, telephone number; ;
- Order-related data: products ordered, quantities, amounts, order history, delivery information, billing information; ;
- data related to the customer account, when an account is created: username, encrypted password, connection history; ;
- payment data transmitted to payment providers, under the conditions set out below; ;
- Technical data: IP address, connection logs, terminal type, browser, pages viewed, data strictly necessary for the security and operation of the Site.
NM Automotive does not voluntarily collect so-called sensitive data unless it is spontaneously communicated by the person concerned in the context of a specific request.
4. Purposes and legal basis
Personal data is processed for the following purposes:
- handling contact requests and responding to messages – legal basis: legitimate interest of NM Automotive or pre-contractual measures depending on the request; ;
- order management, payments, deliveries, returns, cancellations, after-sales service and guarantees – legal basis: performance of the contract; ;
- creation and management of the customer account when this feature is used – legal basis: performance of the contract or legitimate interest; ;
- fraud prevention, site security and incident management – legal basis: legitimate interest; ;
- compliance with accounting, tax and legal obligations – legal basis: legal obligation; ;
- management of potential disputes – legal basis: legitimate interest.
NM Automotive uses audience analysis tools (Google Analytics and Sourcebuster) to understand visitor navigation, improve the Site's usability, and measure page performance – legal basis: user consent (Article 6, paragraph 1, point a) of the GDPR). The user can withdraw their consent at any time via the cookie banner or the cookie management settings.
If additional processing (newsletter, commercial prospecting, etc.) is implemented, this policy will be updated accordingly and a specific consent collection will be put in place.
5. Data Recipients
Personal data is accessible, within the limits of their respective responsibilities, to authorized personnel of NM Automotive as well as to service providers strictly necessary for the operation of the Site and the execution of orders, including:
- The website host: o2Switch ;
- Payment providers: Stripe And PayPal ;
- the carriers and logistics providers offered at the time of ordering, in particular, but not limited to Mondial Relay, Chronopost, DPD France, GLS France, UPS France and FedEx France ;
- technical advisors or service providers involved in the maintenance or security of the Site, if necessary; ;
- administrative or judicial authorities when required by law.
Payment data is processed directly by the relevant payment providers, in accordance with their own privacy policies. NM Automotive does not store the full credit card numbers entered on these providers' secure interfaces.
6. Shelf life
The data is kept for a period not exceeding that necessary for the purposes pursued, and in particular:
- Data related to contact requests: the time required to process the request, then intermediate archiving if necessary; ;
- data relating to orders and invoicing: for the duration necessary for the execution of the contract and then for the applicable legal retention periods, in particular accounting and tax purposes; ;
- Customer account data: until account deletion or after a reasonable period of inactivity, subject to legal retention obligations; ;
- Technical logs and security data: for the duration necessary to secure the Site and manage incidents.
7. Cookies and trackers
The Site uses cookies and trackers, categorized by purpose in the table in our Cookie policy (EU), Chapter 6 presents the identified services, their purpose category, and the option to view details of the cookies placed. The cookie management banner, implemented via Complianz, allows the user to view the updated list, modify their preferences, and withdraw any consent given.
Details of the cookies placed by each service (cookie name, retention period, description) are available in the cookie management banner or in the dedicated interface provided by Complianz by clicking on the "▼" symbol. The list above may change with updates to the services integrated into the Site.
Users can configure their browser to limit or block certain cookies. However, refusing strictly necessary cookies may impair the Site's functionality or prevent an order from being placed.
8. Security
NM Automotive implements appropriate technical and organizational measures to preserve the security, integrity and confidentiality of personal data, taking into account the nature of the Site, its technical environment and reasonably foreseeable risks.
9. Rights of individuals
In accordance with applicable regulations, any person concerned has, depending on the situation, a right of access, rectification, erasure, restriction of processing, objection, as well as the right to data portability.
She can also define guidelines regarding the fate of her data after her death where regulations allow.
These rights can be exercised by contacting NM Automotive via this form, subject «Management of my personal data (GDPR)».
If there is reasonable doubt about the applicant's identity, proof of identity may be requested.
The person concerned also has the right to lodge a complaint with the CNIL if they believe that the processing of their personal data does not comply with applicable regulations.
10. Transfers outside the European Union
Some technical or payment service providers may process certain data outside the European Union. In this case, such processing is governed by applicable regulations and the appropriate contractual or organizational safeguards implemented by the providers concerned.
11. Policy Update
This privacy policy may be modified at any time to reflect legal, regulatory, jurisprudential, or technical developments, or changes in the services offered on the Site. The applicable version is the one published on the Site on the date of consultation.