PRIVACY POLICY - CALLE PIEL

1. COMPANY INFORMATION

Business Name: Calle Piel SAS
Legal Form: Société par Actions Simplifiée (SAS)
Registered Address: 21 rue des Filles du Calvaire, 75003 Paris, France
Contact Email: contact@callepiel.com
Website: www.callepiel.com

Data Controller: Calle Piel SAS is the data controller responsible for your personal data.

2. SCOPE AND APPLICATION

This Privacy Policy applies to personal data collected through our website, online store, social media channels (Instagram, TikTok), and any interactions with Calle Piel. This policy complies with:

  • General Data Protection Regulation (GDPR) (EU) 2016/679

  • French Data Protection Act (Loi Informatique et Libertés)

  • French Consumer Code

  • ePrivacy Directive requirements

Important: You must be at least 18 years old to use our services or make purchases from Calle Piel.

3. INFORMATION WE COLLECT

3.1 Information You Provide to Us

Required Information:

  • Full name

  • Email address

  • Shipping and billing address

  • Phone number

Optional Information:

  • Date of birth

  • Size preferences

  • Preferred product categories

  • Marketing communication preferences

3.2 Information We Collect Automatically

Website Analytics: We use Google Analytics to collect:

  • IP addresses (anonymized)

  • Browser type and version

  • Pages visited and time spent

  • Referring websites

  • Device information

Cookies and Tracking Technologies:

  • Essential cookies (necessary for website functionality)

  • Analytics cookies (Google Analytics)

  • Marketing cookies (for advertising on social media platforms)

3.3 Information from Third Parties

  • Payment processing information (through Squarespace Payments)

  • Social media interactions (Instagram, TikTok)

  • Shipping and delivery confirmations from our fulfillment partners

4. LEGAL BASIS FOR PROCESSING

We process your personal data based on:

Contract: Processing necessary to fulfill orders and provide customer service
Consent: Marketing communications, non-essential cookies, social media integrations
Legitimate Interest: Website analytics, fraud prevention, business operations
Legal Obligation: Tax records, accounting requirements, customer complaint handling

5. HOW WE USE YOUR INFORMATION

5.1 Order Processing and Fulfillment

  • Process and fulfill orders

  • Communicate order status and shipping updates

  • Handle returns and refunds

  • Provide customer support

5.2 Marketing and Communications

  • Send newsletters and promotional offers (with consent)

  • Personalize shopping experience

  • Social media advertising and engagement

  • Product recommendations

5.3 Business Operations

  • Website analytics and optimization

  • Fraud prevention and security

  • Legal compliance and record keeping

  • Business development and improvement

6. DATA SHARING AND TRANSFERS

6.1 Service Providers

We share personal data with trusted partners who assist us:

Fulfillment Partner: Customer shipping details are shared with our print-on-demand fulfillment partner located in the USA for order processing and delivery purposes. This partner is GDPR-compliant and operates under appropriate data protection safeguards.

Payment Processing: Squarespace Payments processes payment information securely
Analytics: Google Analytics processes website usage data
Email Marketing: Marketing platform providers (with consent)

6.2 International Transfers

Transfers Outside EU: Personal data may be transferred to our fulfillment partner in the United States. These transfers are protected by:

  • Standard Contractual Clauses (SCCs)

  • Data Processing Agreements with GDPR-compliant partners

  • US-EU Data Privacy Framework adequacy protections where applicable

6.3 Legal Requirements

We may disclose personal data when required by law or to:

  • Comply with legal obligations

  • Protect our rights and property

  • Prevent fraud or security threats

  • Respond to court orders or government requests

7. DATA RETENTION

We retain personal data only as long as necessary for the purposes outlined in this policy:

Active Customer Data: Retained while customer account remains active
Order and Transaction Data: 10 years (French accounting law requirements)
Marketing Data: 3 years from last contact or until consent is withdrawn
Inactive Account Data: 3 years after last activity
Website Analytics: 26 months (Google Analytics default)
Customer Support Records: 3 years from resolution

Automatic Deletion: Data is automatically deleted when retention periods expire, unless legal obligations require longer retention.

8. YOUR RIGHTS UNDER GDPR

As an EU resident, you have the following rights:

8.1 Right to Information

You have the right to receive clear information about how we process your data.

8.2 Right of Access

You can request a copy of your personal data we hold.

8.3 Right to Rectification

You can correct inaccurate or incomplete personal data.

8.4 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data when:

  • No longer necessary for original purpose

  • You withdraw consent

  • Data was unlawfully processed

  • Required for legal compliance

8.5 Right to Restrict Processing

You can limit how we process your data in certain circumstances.

8.6 Right to Data Portability

You can receive your data in a structured, machine-readable format.

8.7 Right to Object

You can object to processing based on legitimate interests or for direct marketing.

8.8 Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling systems.

9. EXERCISING YOUR RIGHTS

How to Contact Us: Email privacy@callepiel.com or use the contact form on our website

Response Time: We will respond within 30 days of receiving your request

Identity Verification: We may require proof of identity before processing requests

No Fees: Exercising your rights is free of charge, unless requests are manifestly unfounded or excessive

10. COOKIES AND TRACKING

10.1 Types of Cookies We Use

Essential Cookies: Required for website functionality (shopping cart, checkout)
Analytics Cookies: Google Analytics for website performance
Marketing Cookies: Social media pixels for advertising

10.2 Cookie Consent

We obtain explicit consent for non-essential cookies through our cookie banner. You can:

  • Accept or reject cookies

  • Modify cookie preferences anytime

  • Disable cookies in your browser settings

10.3 Third-Party Cookies

Google Analytics: Analytics and website performance
Social Media Platforms: Instagram and TikTok integration
Squarespace: Website functionality and e-commerce features

11. DATA SECURITY

We implement appropriate technical and organizational measures:

Technical Measures:

  • SSL/TLS encryption for data transmission

  • Secure payment processing systems

  • Regular security updates and monitoring

  • Access controls and authentication systems

Organizational Measures:

  • Staff training on data protection

  • Data protection policies and procedures

  • Regular security assessments

  • Incident response procedures

12. DATA BREACH NOTIFICATION

In case of a personal data breach that poses high risk to your rights:

  • We will notify the CNIL (French supervisory authority) within 72 hours

  • We will inform affected individuals without undue delay

  • We will provide information about the breach and protective measures

13. CHILDREN'S PRIVACY

Our services are not intended for individuals under 18 years old. We do not knowingly collect personal data from minors. If we discover we have collected data from someone under 18, we will delete it immediately.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect:

  • Changes in our data processing practices

  • Legal or regulatory requirements

  • New features or services

Notification: Significant changes will be communicated via:

  • Email notification to registered users

  • Prominent notice on our website

  • Updated "Last Updated" date

15. SUPERVISORY AUTHORITY

You have the right to lodge a complaint with the French supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Website: www.cnil.fr
Phone: +33 1 53 73 22 22

16. CONTACT INFORMATION

Data Protection Queries: contact@callepiel.com
General Inquiries: contact@callepiel.com
Postal Address: Calle Piel SAS, 21 rue des Filles du Calvaire, 75003 Paris, France

Response Commitment: We will respond to privacy-related inquiries within 72 hours during business days.