Privacy policy

This English version is provided for convenience. In case of discrepancy, the French version prevails.

Last updated: 27 September 2026.

Albéa & Co (“we”) operates this online store. This policy explains what personal data we collect, why, how long we keep it and what rights you can exercise. It is drawn up in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller

Albéa & Co — 11 rue Jules Massenet, 94120 Fontenay-sous-Bois, France.
Contact: contact@albeaco.com

Data we collect

  • Identity and contact details: name, first name, shipping and billing address, email, phone.
  • Order data: products ordered, amount, history, returns and exchanges.
  • Payment data: processed directly by our payment provider. We never have access to your full card number and we do not store it.
  • Account data, if you create one: login details and preferences.
  • Technical and browsing data: IP address, device and browser type, pages viewed, via cookies and similar technologies.
  • Communications with us: the content of your emails and messages.

Purposes and legal bases

  • Processing and delivering your orders, handling returns, warranty and customer service — performance of the contract.
  • Meeting our legal obligations (accounting, invoicing, fraud prevention) — legal obligation.
  • Improving the store and measuring audience — legitimate interest or consent depending on the cookies used.
  • Sending you our emails if you have signed up — consent, which you can withdraw in one click in every message.
  • Personalised advertising — only with your consent, given via the cookie banner.

Recipients

Your data is accessible to our team and our service providers, strictly for the purposes above:

  • Shopify (store hosting and payment);
  • the payment providers you choose at checkout;
  • the carrier delivering your parcel;
  • our emailing and audience measurement tools, where applicable.

We do not sell your personal data.

Transfers outside the European Union

Some providers, including Shopify, may host or process data outside the European Union. These transfers are covered by recognised safeguards, notably the European Commission's standard contractual clauses.

Retention periods

  • Order and billing data: 10 years (accounting obligation).
  • Customer account: until deleted, then 3 years of inactivity.
  • Prospects and newsletter subscribers: 3 years after the last contact.
  • Cookies: 13 months maximum.

Cookies

On your first visit, a banner lets you accept or refuse non-essential cookies. Cookies strictly necessary for the store to work (cart, security) do not require your consent. You can change your choices at any time from this banner or in your browser settings.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to give instructions regarding your data after death. To exercise them, write to us at contact@albeaco.com. We reply within one month.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr).

Security

Communications with the store are encrypted (HTTPS) and access to data is limited to those who need it. As no system is infallible, we ask you never to send us bank details by email.

Minors

The store is not intended for children under 15 and we do not knowingly collect their data.

Changes

This policy may be updated. The date of the last change appears at the top of the page.