Privacy Policy

The purpose of this privacy policy is to inform users of the site in a clear, transparent manner and in accordance with current regulations, in particular Regulation (EU) 2016/679 known as the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data Controller

The data controller for the personal data collected on this site is:

Name / Company name: Zage Colorful Life (micro-entrepreneur)

Address : 90 dead end Grand Champs, 30650 Rochefort-du-Gard, France

Address e-mail : zage.colorfullife@gmail.com

2. Personal data collected

In connection with the use of the online store, the following personal data may be collected:

Identity: last name, first name

Contact details: address email address , postal address, telephone number

Order information: products purchased, amount, order history

Connection and browsing data: IP address, browser type, cookies

This data is collected when the user:

carried out an order,

created an account,

contact customer service,

navigate on the website.

3. Geographical scope

The online store offers its products to customers located in the following countries: France, Germany, Belgium, Austria, Netherlands, Spain, Italy, Portugal and Switzerland.

Personal data processing is carried out in accordance with the GDPR for clients located in the European Union and with applicable regulations for clients located in Switzerland.

4. Purposes of the processing

Personal data is collected and processed for the following purposes:

Order management and processing

Product delivery

Customer relationship management and after-sales service

Payment management and fraud prevention

Sending commercial and promotional information (if prior consent has been given)

Website improvement, statistical analysis and audience measurement

5. Legal basis for processing

Data processing relies on:

the execution of a contract (order and delivery),

THE compliance with legal obligations (invoicing, accounting),

THE user consent (commercial prospecting, cookies),

the interest legitimate interests of the data controller (site security, service improvement).

6. Data Recipients

Personal data is intended exclusively for the data controller.

As part of the operation of the online store, certain data may be processed by standard services integrated into the platform. Shopify , acting as a subcontractor, in particular for:

there online store management,

THE payment processing and security ( Shopify) Payments and related payment methods),

there order and delivery management,

there communication with clients ( emails) transactional),

THE sales and attendance statistics.

These processing operations are strictly limited to what is necessary for the operation of the shop.

Shopify Inc. may process certain data outside the European Union, particularly in Canada and the United States. Shopify guarantees an adequate level of protection in accordance with the GDPR, relying in particular on standard contractual clauses approved by the European Commission.

No personal data is sold or transferred to third parties for commercial purposes.

Service providers are contractually obligated to guarantee the confidentiality, security and regulatory compliance of the data processed.

7. Data retention period

Personal data is retained only for as long as necessary for the purposes for which it was collected, including:

data Clients: duration of the business relationship followed by legal archiving.

data billing period: 10 years (legal obligation),

data Commercial prospecting: 3 years from the last contact.

cookies : maximum duration of 13 months.

8. Data Security

The data controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

encryption sensitive data,

access restricted to data,

protocols computer security,

measures physical and logical protection.

9. Cookies

This website uses cookies and similar technologies in order to:

ensure the proper functioning of the site,

improve user experience,

realize attendance statistics.

Users can accept, refuse, or configure cookies via the cookie management banner or their browser settings. Refusing certain cookies may limit some website functionalities.

10. User Rights

In accordance with applicable regulations, the user has the following rights:

right access,

right rectification,

right to erasure,

right to the limitation of treatment,

right opposition,

right to data portability,

right to withdraw their consent at any time.

To exercise these rights, the user can contact the data controller at the following address: zage.colorfullife@gmail.com .

A response will be provided within a maximum of one month.

1. Complaint

If the user believes that their rights are not being respected, they can file a complaint with the competent supervisory authority, in particular the CNIL ( www.cnil.fr ).

1.2 . Links to third-party sites

The site may contain links to third-party websites. The data controller cannot be held responsible for the privacy practices of these sites, which have their own privacy policies.