Retour

Privacy Policy

Privacy policy and personal data protection

Last updated: June 2026

1. Data controller

The data controller for personal data collected via the online store is:

Days Edits (individual)
70 Rue Ruinart de Brimont
51100 Reims, France
Email: megad6222@gmail.com

2. Collected data and purposes

As part of the operation of the online store, the following categories of data may be collected:

  • Identification data: first name, last name, postal address, email address, phone number. Purpose: processing and shipping orders, customer service, issuing invoices ;
  • Financial data: information related to the payment method (processed directly by Shopify Payments/Stripe, not stored by the Seller). Purpose: securing and processing payments ;
  • Browsing data: IP address, cookie data, pages visited, duration of visit. Purpose: technical functioning of the site, audience analysis, improvement of user experience ;
  • Communication data: messages sent to customer service via email. Purpose: processing requests and disputes ;
  • Marketing data (with consent): email address, purchase history. Purpose: sending commercial communications, promotional offers, and news, only if you have consented to it.

3. Legal grounds for processing (art. 6 GDPR)

The processing of personal data is based on the following legal grounds:

  • Contract execution (art. 6.1.b GDPR): order processing, delivery, invoicing, after-sales service ;
  • Legal obligation (art. 6.1.c GDPR): retention of accounting and commercial documents in accordance with French tax obligations ;
  • Legitimate interest (art. 6.1.f GDPR): fraud prevention, website improvement, anonymized statistical analysis ;
  • Consent (art. 6.1.a GDPR): sending marketing communications, placing non-essential cookies. This consent can be withdrawn at any time.

4. Retention period

  • Order and contractual data: 5 years from the end of the business relationship (statutory limitation period) ;
  • Billing data: 10 years from the end of the financial year (legal obligation) ;
  • Customer service data: 3 years from the last contact;
  • Browsing data and analytical cookies: maximum of 13 months;
  • Marketing data: 3 years from the last purchase or last interaction, or until consent is withdrawn.

5. Data recipients and transfers outside the EU

Your data may be shared with the following providers in the context of operating the store:

  • Shopify Inc. (e-commerce platform), headquartered in Canada (151 O'Connor Street, Ottawa, Ontario K2P 2L8) and also has infrastructure in the United States. Shopify is certified compliant with the GDPR and governs transfers outside the EU by standard contractual clauses (SCC) approved by the European Commission, in accordance with Article 46 GDPR. More information at shopify.com/legal/privacy;
  • Carriers (Colissimo/La Poste, DPD): first name, last name, delivery address, phone number, as necessary for the delivery of the package;
  • Payment provider (Stripe, Inc.): secure processing of payments. Stripe is based in the United States; transfers are governed by standard contractual clauses;
  • Analytical tools: where applicable, third-party audience analysis tools (Google Analytics or equivalent) may transfer data outside the EU under appropriate safeguards.

No data is sold to third parties for commercial purposes.

6. Your rights

In accordance with Regulation (EU) 2016/679 (GDPR) and the amended Data Protection Act, you have the following rights regarding your personal data:

  • Right of access (art. 15 GDPR): obtain confirmation that data concerning you is being processed and receive a copy;
  • Right to rectification (art. 16 GDPR): have inaccurate or incomplete data corrected;
  • Right to erasure (art. 17 GDPR): request the deletion of your data, subject to legal retention obligations;
  • Right to object (art. 21 GDPR): object to the processing of your data, particularly for commercial prospecting purposes;
  • Right to portability (art. 20 GDPR): receive your data in a structured and machine-readable format;
  • Right to restrict processing (art. 18 GDPR): to obtain the suspension of processing in certain cases provided by law;
  • Right to withdraw your consent: at any time for processing based on your consent, without affecting the lawfulness of processing carried out before this withdrawal.

To exercise these rights, please send your request by email to megad6222@gmail.com, attaching a copy of an identity document if necessary. Any request will receive a response within one month from its receipt.

7. Right to appeal to the CNIL

If you believe that the processing of your personal data is not in compliance with applicable regulations, you have the right to file a complaint with the National Commission on Informatics and Liberty (CNIL), the competent French supervisory authority:

CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Site: www.cnil.fr

8. Cookies

The online store uses cookies and similar technologies. A cookie is a small text file placed on your device during your visit.

Categories of cookies:

  • Strictly necessary cookies: essential for the functioning of the site (cart management, browsing session, security). These cookies do not require your consent;
  • Analytical cookies: allow measuring audience and analyzing visitor behavior (pages visited, session duration). They require your prior consent;
  • Marketing and targeting cookies: used to provide you with personalized advertisements and measure the effectiveness of campaigns. They require your prior consent.

Upon your first visit, a cookie consent banner is presented to you. You can change your cookie preferences at any time via the cookie management link available at the bottom of the site, or by configuring your browser settings to refuse all cookies (which may affect certain functionalities of the site).

9. Changes to this policy

This privacy policy may be updated at any time to reflect legal, regulatory, or operational changes. The date of the last update at the top of the document is authoritative. We encourage you to review it regularly.