Privacy policy

Privacy Policy

This policy explains what personal data Opalyne collects when you visit the website or place an order, why, how long it is kept and how to exercise your rights. It applies in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

Adrien Belchard, sole proprietorship (EI), 46 route de Chez Naud, 17460 Varzay, France, SIRET 913 428 239 00017. For any question about your data: contact page.

2. Data collected

Orders: last name, first name, shipping and billing address, email, phone number, products ordered, amount.
Payment: card data is processed directly by our payment providers; we never have access to it.
Customer account (if you create one): login credentials, order history, saved addresses.
Communications: messages sent through the contact form or by email.
Browsing: IP address, device and browser type, pages viewed, through cookies (see section 7).

3. Why we use it

To process and deliver your order, handle returns and provide customer service (performance of a contract).
To comply with our accounting and tax obligations (legal obligation).
To prevent fraud and secure the website (legitimate interest).
To measure traffic and improve the website and, if you have agreed, to send you offers or show you tailored advertising (consent, which you may withdraw at any time).

4. Retention period

Order data and invoices: 10 years (accounting obligation).
Customer account: until it is deleted, or 3 years after your last activity.
Marketing: 3 years after your last contact with us.
Cookies: 13 months maximum.

5. Recipients

Your data is accessible to Opalyne and, strictly as needed, to our service providers: the Shopify platform (store hosting), payment providers, the suppliers and carriers who prepare and deliver your order, and analytics or advertising tools if you have accepted them. We do not sell your data.

6. Transfers outside the European Union

Some service providers, including Shopify and the suppliers who ship orders, may process data outside the European Union. These transfers are covered by the safeguards provided for by the GDPR, in particular the European Commission's standard contractual clauses.

7. Cookies

The website uses cookies necessary for it to function (cart, login, security) and, with your consent, analytics and advertising cookies. You can accept, refuse or change your choices at any time through the cookie banner or in your browser settings.

8. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent and to set instructions regarding what happens to your data after your death. To exercise these rights, write to us through the contact page; we respond within one month. If you believe your rights have not been respected, you may file a complaint with the CNIL (www.cnil.fr).

9. Security

The website is served over HTTPS and payments go through certified providers. Access to data is limited to the people and service providers who need it.