Privacy Policy
Last updated: March 2026
1. Introduction
Les trouvailles de Géraldine attaches great importance to the protection of your personal data. This privacy policy informs you about how we collect, use and protect your data in accordance with the General Data Protection Regulation (GDPR).
2. Data Controller
Company name: Les trouvailles de Géraldine
Address: 40 Rue Antoine Charial, France
Email: geraldineclaise@me.com
Data Collected
We collect the following data:
-
Identification information: name, first name, email address, phone number
-
Delivery information: delivery and billing address
-
Payment information: securely processed by our payment provider Shopify Payments
-
Browsing data: IP address, cookies, pages visited
- Order history
4. Purposes of Processing
Your data is used for:
- Processing and delivering your orders
- Managing your customer account
- Sending you commercial communications (with your consent)
- Improving our services and website
- Complying with our legal obligations
- Preventing fraud
5. Legal Basis for Processing
The processing of your data is based on:
- Performance of the sales contract
- Your consent (newsletters, non-essential cookies)
- Our legitimate interests (improving our services, fraud prevention)
- Compliance with legal obligations (accounting, tax)
6. Data Retention Period
-
Order data: 10 years (accounting and tax obligations)
-
Customer account: until your account is deleted or 3 years of inactivity
-
Prospecting data: 3 years from the last contact
-
Cookies: maximum 13 months
7. Recipients of the Data
Your data may be shared with:
-
Shopify: hosting and e-commerce platform
-
Payment providers: Shopify Payments for secure payment processing
-
Carriers: for the delivery of your orders
-
Marketing services: only with your consent
-
Legal authorities: if required by law
8. Transfers Outside the EU
Some of your data may be transferred outside the European Union, particularly to Canada (Shopify). These transfers are governed by appropriate safeguards in accordance with the GDPR.
9. Your Rights
In accordance with the GDPR, you have the following rights:
-
Right of access: obtain a copy of your data
-
Right to rectification: correct your inaccurate data
-
Right to erasure: delete your data
-
Right to restriction: limit the processing of your data
-
Right to portability: receive your data in a structured format
-
Right to object: object to the processing of your data
-
Right to withdraw your consent: at any time
To exercise your rights, contact us at: geraldineclaise@me.com
10. Cookies
Our site uses cookies for:
-
Essential cookies: necessary for the site's operation (cart, login)
-
Analytical cookies: visit statistics (with your consent)
-
Marketing cookies: targeted advertising (with your consent)
You can manage your cookie preferences in your browser settings or via our consent banner.
11. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction.
12. Complaint
If you believe that your rights are not respected, you can lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés):
CNIL
3 Place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07
Phone: 01 53 73 22 22
Website:
www.cnil.fr
13. Modifications
We reserve the right to modify this privacy policy. Any modification will be published on this page with a new update date.
14. Contact
For any questions regarding this privacy policy or your personal data, contact us at:
Email: geraldineclaise@me.com
Address: 40 Rue Antoine Charial, France