Privacy policy
Last updated: 23/03/2026
The protection of your personal data is a priority. This policy describes what data we collect, why, how long we retain it, and what your rights are. It applies to any visitor or customer of the Site, whether located in France or in another European Union member state.
Data Collected and Purposes
1.1 Order-related Data
When placing an order, we collect the following information: first name, last name, email address, delivery address, as well as payment information, processed exclusively by our secure payment provider and not stored by us.
Legal basis: performance of a contract (Article 6.1.b of the GDPR). Retention period: 3 years from the last order, then archived for 10 years to meet accounting obligations.
1.2 Browsing Data and Analytical Cookies
We use Google Analytics to measure our site's audience (pages visited, session duration, traffic sources). This data is anonymized and does not allow you to be directly identified.
Legal basis: consent (Article 6.1.a of the GDPR) — collected via the cookie banner. Retention period: 26 months. Google LLC is based in the United States. This transfer is governed by standard contractual clauses approved by the European Commission.
1.3 Meta Pixel (Facebook / Instagram)
We use the Meta Pixel to measure the effectiveness of our advertising campaigns and optimize their reach. This tool may link your browsing activity to your Meta account if you are logged in.
Legal basis: consent (Article 6.1.a of the GDPR) — collected via the cookie banner. Retention period: 180 days. Meta Platforms Inc. is based in the United States. This transfer is governed by standard contractual clauses approved by the European Commission. You can also manage your advertising preferences directly from your Meta settings.
1.4 Newsletter and Commercial Communications
If you subscribe to our newsletter or check the corresponding box when placing an order, we use your email address to send you information about our products and news.
Legal basis: consent (Article 6.1.a of the GDPR). Retention period: until unsubscription. You may unsubscribe at any time via the link included in every email. Tool used: Klaviyo (Klaviyo Inc., based in the United States). This transfer is governed by standard contractual clauses approved by the European Commission.
1.5 Shipment Management
In order to prepare and track your orders, we use Packlink Pro (Auctane Spain SL). Your delivery data (first name, last name, address) is shared with this platform to generate shipping labels and ensure parcel tracking.
Legal basis: performance of a contract (Article 6.1.b of the GDPR). Retention period: 3 years. Packlink Pro is based in Spain and operates within the framework of European GDPR — no transfer outside the EU.
Cookies
Upon your first visit, a banner allows you to accept or refuse non-essential cookies. You may update your preferences at any time via the "Cookie Settings" link at the bottom of the page. Cookies that are strictly necessary for the Site to function are not subject to consent.
We use the following cookies on our Site:
Google Analytics : audience measurement and browsing statistics. Retention period: 26 months. Transfer to the United States governed by standard contractual clauses.
Meta Pixel : advertising conversion tracking. Retention period: 180 days. Transfer to the United States governed by standard contractual clauses.
Session cookie : shopping cart and order functionality. Duration: session only. No transfer outside the EU.
T&Cs cookie : records acceptance of the General Terms and Conditions of Sale. Retention period: 12 months. No transfer outside the EU.
Data Sharing
We do not sell or rent your personal data to third parties. Your data may only be shared with the following processors, strictly for the purpose of providing their services:
— Shopify Payments : secure payment processing
— Packlink Pro : shipping label generation and parcel tracking
— [Carrier (Colissimo, DHL…)] :order delivery
— Google LLC : analytics (see 1.2)
— Meta Platforms Inc. : advertising pixel (see 1.3)
— Klaviyo : newsletter delivery (see 1.4)
These processors are contractually bound to protect your data and to use it solely for the purposes for which it was shared. Where required by law, your data may be disclosed to the relevant authorities.
Your Rights
In accordance with the GDPR and applicable data protection law, you have the following rights :
— Right of access : obtain a copy of your data
— Right of rectification : correct inaccurate data
— Right to erasure : request the deletion of your data
— Right to data portability : receive your data in a structured format
— Right to object : object to processing for direct marketing purposes
— Right to restriction : request the temporary suspension of processing
— Right to withdraw consent : at any time, without affecting prior processing
To exercise these rights, contact us at: [contact email]. We will respond within a maximum of 30 days. If you believe your rights have not been respected, you may lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority of your country of residence.
Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. Payments are processed by a PCI-DSS certified provider. No banking details are stored on our Site.
Changes
We reserve the right to modify this policy at any time, in particular to comply with legislative or regulatory developments. The update date at the top of this document will be amended accordingly. In the event of a substantial change, you will be notified by email if you are a customer or subscriber to our newsletter.
