Privacy Policy

Updated October 2, 2026

This policy explains how ATELIER DU POUF collects and uses your personal data when you visit atelierdupouf.com or place an order, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act of January 6, 1978.

1. Data controller

ATELIER DU POUF
Simplified joint-stock company with share capital of €5,000
Registered office: 7 rue des Omnibus, 59200 Tourcoing, France
943 534 354 R.C.S. Lille Métropole – SIRET 943 534 354 00015
EU VAT number: FR96943534354
Email: contact@atelierdupouf.com

2. Data collected

  • Orders and customer accounts: last name, first name, shipping and billing addresses, email address, telephone number, and order history. Bank card details are processed directly by our payment providers: we do not have access to them.
  • Communications with customer service: the content of your messages and requests for returns or withdrawal.
  • Newsletter: email address, if you subscribe.
  • Customer reviews: name or pseudonym, rating, and comment, if you submit a review.
  • Browsing: IP address, device and browser type, pages viewed, and data from cookies and trackers (see section 8).

3. Purposes and legal bases

  • Processing and delivering your orders, managing returns, withdrawals, and warranties: performance of the contract.
  • Complying with our accounting, tax, and contract retention obligations: legal obligation.
  • Preventing fraud, securing the site, responding to your requests, and managing customer reviews: legitimate interest.
  • Sending you the newsletter and offers by email: consent, which you may withdraw at any time via the unsubscribe link.
  • Measuring audience and personalizing advertising through non-essential cookies: consent.

4. Recipients

Your data is intended for ATELIER DU POUF and, where necessary for the performance of their duties, our service providers:

  • Shopify (hosting and management of the online store);
  • our payment providers (Payplug, PayPal);
  • carriers and parcel tracking services;
  • our suppliers and their carriers, for products they ship directly (name, shipping address, telephone number);
  • Judge.me (collection and publication of customer reviews);
  • our email-sending, audience measurement, and advertising tools (for example, Google, Meta, and Pinterest), for the purposes to which you have consented.

We do not sell your personal data. It may be disclosed to authorities when required by law.

5. Transfers outside the European Union

Some service providers and suppliers are located outside the European Union (particularly in Canada, the United States, or Asia for certain suppliers). These transfers are governed by an adequacy decision of the European Commission where one exists or by the European Commission's standard contractual clauses. You can obtain information about these safeguards by writing to us.

6. Retention periods

  • Customer data: during the business relationship, then for 3 years from your last order or last contact for sending offers, unless you object.
  • Accounting records and invoices: 10 years.
  • Contracts for an amount equal to or greater than €120: 10 years from delivery.
  • Data necessary to establish evidence in the event of a dispute or warranty claim: for the applicable limitation period.
  • Newsletter: until you unsubscribe, or for 3 years without interaction.
  • Cookies and trackers: no more than 13 months; your cookie choices are retained for 6 months.

7. Your rights

You have the right to access, rectify, erase, restrict, object to the processing of, and transfer your data, the right to withdraw your consent at any time, and the right to define instructions regarding what happens to your data after your death. To exercise these rights, write to contact@atelierdupouf.com or by post to 7 rue des Omnibus, 59200 Tourcoing. Proof of identity may be requested if there is doubt about your identity. You may also lodge a complaint with the CNIL (www.cnil.fr).

8. Cookies and trackers

The site uses cookies that are strictly necessary for its operation (shopping cart, security, payment), which do not require your consent. Audience measurement and advertising cookies are only placed with your consent, which you may accept, refuse, or withdraw at any time. You can also configure your browser to refuse cookies; more information is available on the CNIL website.

9. Security

We implement appropriate technical and organizational measures to protect your data (encrypted connection, restricted access, secure service providers).

10. Changes

This policy may be updated. The date of the latest update appears at the top of this page.