Privacy Policy
Last updated: July 2026.
Data Controller
The data controller is [TO BE COMPLETED: company name] (contact details in the Legal Notice). We are committed to protecting your privacy in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
Data Collected
- Identity and contact: last name, first name, postal address, email, phone number.
- Order and payment: purchase details, shipping and billing address (bank details are processed by our payment provider and never stored by us).
- Browsing: IP address, device and browser type, pages viewed, via cookies and similar technologies.
Purposes and Legal Basis
- Process and deliver your orders, provide customer service (contract performance).
- Send you marketing communications if you have consented (consent) — you can unsubscribe at any time.
- Prevent fraud and secure the website (legitimate interest).
- Comply with our accounting and legal obligations (legal obligation).
Recipients
Your data is shared only with necessary service providers: Shopify (store hosting), the payment provider, the carrier and the fulfillment warehouse, and, where applicable, our emailing tool. These providers act as data processors and only use your data for the purpose of the service.
Data Retention Period
Order data is retained for the duration of the commercial relationship, then archived in accordance with legal deadlines (including 10 years for accounting documents). Marketing data is retained until you unsubscribe or 3 years after the last contact.
Your Rights
You have the rights to access, rectify, erase, object to, restrict, and port your data, as well as the right to define post-mortem directives. To exercise these rights, please write to [TO BE COMPLETED: contact email]. You can also lodge a complaint with the CNIL (www.cnil.fr).
Cookies
The website uses cookies necessary for its operation, as well as, subject to your consent, audience measurement and marketing cookies. You can manage your preferences at any time via the cookie banner.
Transfers Outside the EU
Some service providers may process data outside the European Union. These transfers are governed by appropriate safeguards (standard contractual clauses of the European Commission).
