Privacy policy

Last updated: 27 September 2026.
Albéa & Co ("we") operates this online store. This policy explains what personal data we collect, why, how long we keep it, and what rights you can exercise. It is established in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller
Albéa & Co — 11 rue Jules Massenet, 94120 Fontenay-sous-Bois, France.
Contact: contact@albeaco.com

Data we collect

  • Identity and contact details: first and last name, shipping and billing address, email, phone number.
  • Order data: products ordered, amount, history, returns and exchanges.
  • Payment data: processed directly by our payment provider. We never have access to your full card number and do not store it.
  • Account data, if you create one: login details and preferences.
  • Technical and browsing data: IP address, device and browser type, pages visited, via cookies and similar technologies.
  • Correspondence with us: the content of your emails and messages.

Purposes and legal bases

  • Processing and delivering your orders, managing returns, warranty and customer service — performance of the contract.
  • Complying with our legal obligations (accounting, invoicing, fraud prevention) — legal obligation.
  • Improving the store and measuring audience — legitimate interest or consent depending on the cookies used.
  • Sending you our emails if you have subscribed — consent, withdrawable with one click in every message.
  • Personalized advertising — only with your consent, given via the cookie banner.

Recipients
Your data is accessible to our team and our service providers, strictly for the purposes above:

  • Shopify (store and payment hosting);
  • the payment providers you choose at checkout;
  • the carrier responsible for your parcel;
  • our email and audience measurement tools, where applicable.

We do not sell your personal data.

Transfers outside the European Union
Some providers, including Shopify, may host or process data outside the European Union. These transfers are governed by recognized safeguards, notably the European Commission's standard contractual clauses.

Retention period

  • Order and invoicing data: 10 years (accounting obligation).
  • Customer account: until deletion, then 3 years of inactivity.
  • Leads and newsletter subscribers: 3 years after last contact.
  • Cookies: 13 months maximum.

Cookies
On your first visit, a banner lets you accept or decline non-essential cookies. Cookies strictly necessary for the store to function (cart, security) do not require your consent. You can change your choices at any time from this banner or your browser settings.

Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability and to set post-mortem directives. To exercise them, write to us at contact@albeaco.com. We respond within one month.
If you believe your rights are not being respected, you can file a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr).

Security
Exchanges with the store are encrypted (HTTPS) and access to data is limited to those who need it. As no system is infallible, we ask that you never send us banking information by email.

Minors
The store is not intended for minors under 15, and we do not knowingly collect their data.

Changes
This policy may be updated. The date of the last update appears at the top of the page.