Politique de confidentialité

1. Data Controller and Contact

The data controller is the legal entity operating cookinstores.shop. Contact requests may be sent to info@cookinstores.shop. French law requires the operator’s full legal identity and geographic address to be disclosed separately in the Legal Notice. Because those details were not provided for this document, they are not invented here; the operator must publish them before relying on this policy as a complete privacy notice.

2. Personal Data We Collect

Identity and contact data, such as name, email address, telephone number, billing address and delivery address.

Order and transaction data, such as purchased products, order value, payment status, refunds and delivery history. Full payment-card data is normally processed by payment providers and is not stored by the store.

Account and preference data, such as login details, language, saved items and marketing choices.

Customer-service content, including emails, return evidence, product photographs and complaint records.

Technical and usage data, such as IP address, device type, browser, cookie identifiers, approximate location, pages viewed, referral source and security logs.

Marketing and analytics data, where permitted and subject to consent where required.

3. Sources of Data

We receive data directly from you, automatically from your device, and from service providers involved in checkout, fraud prevention, payment, fulfilment, delivery, analytics, advertising and customer support. We may also receive updated delivery events from carriers and lawful fraud or chargeback information from payment partners.

4. Purposes and Legal Bases

Contract: processing orders, taking payment, delivering products, providing tracking, handling returns and communicating about the transaction.

Legal obligation: accounting, tax, product-safety, consumer-protection, fraud-prevention and regulatory recordkeeping.

Legitimate interests: securing the website, preventing abuse, improving operations, managing claims and understanding store performance, balanced against individual rights.

Consent: non-essential cookies, certain analytics or advertising activities, and electronic marketing where consent is required. Consent may be withdrawn at any time without affecting earlier lawful processing.

Legal claims and vital interests: establishing, exercising or defending claims and responding to urgent safety matters where applicable.

5. Shopify, Payments and Service Providers

The store is operated using Shopify’s commerce infrastructure. Personal data may be processed by Shopify and by providers that support payments, hosting, security, fulfilment, delivery, email, customer service, analytics and advertising. Each provider receives only the data reasonably required for its role and is subject to contractual or legal obligations appropriate to the service.

6. Cookies and Similar Technologies

Strictly necessary technologies may be used to provide the shopping cart, checkout, account security, fraud prevention and network communication. Non-essential analytics, personalisation and advertising cookies are used only where a valid legal basis exists and prior consent is obtained when required. The consent interface should make accepting and refusing non-essential cookies equally accessible and allow preferences to be withdrawn or changed. Browser settings do not replace a compliant website consent mechanism.

7. Marketing

We may send service messages required for an order without marketing consent. Promotional email or similar marketing is sent only where permitted by law. Every marketing email will provide an unsubscribe method, and you may also contact info@cookinstores.shop. Unsubscribing from marketing does not stop essential order, security or legal communications.

8. Sharing and Disclosure

Data may be shared with Shopify, payment processors, fraud-prevention providers, warehouses, suppliers, carriers, IT and hosting providers, professional advisers, insurers and public authorities where necessary and lawful. We do not sell personal data in the ordinary meaning of a direct exchange for money. Advertising disclosures, where used, remain subject to consent and transparency requirements.

9. International Transfers

Some service providers may process data outside France or the European Economic Area. Where required, transfers will rely on an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism, together with supplementary measures where appropriate. Information about relevant safeguards may be requested by email, subject to confidentiality and security restrictions.

10. Retention

Data is retained only as long as necessary for the relevant purpose, including order fulfilment, customer service, legal accounting and tax periods, warranty and consumer claims, fraud prevention and dispute resolution. Marketing data is retained until consent is withdrawn or the applicable retention period expires. Security logs and abandoned-cart information are retained for proportionate periods. Data is then deleted or anonymised unless continued retention is legally required.

11. Security

We use proportionate organisational and technical safeguards, including access controls, secure service providers, encryption in transit where supported, account protections, monitoring and staff or contractor confidentiality obligations. No online system can be guaranteed completely secure. Customers should use unique passwords and should not send complete card numbers or identity documents by ordinary email.

12. Your GDPR Rights

Access to personal data and information about its processing.

Rectification of inaccurate or incomplete data.

Erasure where the legal conditions are met.

Restriction of processing in qualifying circumstances.

Objection to processing based on legitimate interests and an absolute right to object to direct marketing.

Data portability for certain data processed by automated means on consent or contract.

Withdrawal of consent at any time.

The right not to be subject to a qualifying decision based solely on automated processing that produces legal or similarly significant effects, subject to lawful exceptions.

To exercise a right, contact info@cookinstores.shop. We may request proportionate information to verify identity. We normally respond within one month, subject to lawful extensions for complex or numerous requests. You may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) at cnil.fr.

13. Children

The store is not directed to children and does not knowingly invite children to create accounts or purchase products without appropriate adult involvement. If you believe a child has provided personal data unlawfully, contact us.

14. Changes

We may update this policy to reflect operational, legal or technical changes. The current version will be posted on the website with a revision date. Material changes will be highlighted or otherwise communicated where legally required.