Privacy Policy

Last updated: 06/07/2026

1) Who is the data controller?

Personal data collected on the https://olfia.shop website (the "Site") is processed by:

Olfia, registered with the RCS of Lyon under number 102266525, whose registered office is located at 50 chemin de Sagris 69440 Taluyers (hereinafter "Olfia", "we").

Contact: serviceclient.olfia@outlook.fr

2) What data do we collect?

Depending on your use of the Site, we may collect:

A. Identity and contact data

  • Last name, first name

  • Email, phone

  • Delivery and/or billing address

B. Order data

  • Products ordered, amount, purchase history, exchanges with customer service

C. Payment data

  • We do not store your bank details: payment is processed by our payment providers [Stripe / PayPal / Shopify Payments…] (who may collect certain data necessary for payment).

D. Account data (if you offer a customer account)

  • Login details, history, preferences

E. Browsing data (cookies/trackers)

  • IP address, device/browser type, pages visited, cookie identifiers, audience measurements, etc. (see Cookies section).

F. Marketing (if enabled)

  • Marketing preferences, newsletter subscriptions/unsubscriptions, interactions with our emails.

3) Why do we process your data and on what legal bases?

We process your data only when we have a legal basis (contract, legal obligation, legitimate interest, consent).

Main purposes

  1. Manage orders (cart, payment, delivery, billing, returns)
    Legal basis: contract execution

  2. Delivery via carriers (Mondial Relay / Colissimo)
    Legal basis: contract execution

  3. Customer service (responses, follow-up, after-sales service)
    Legal basis: contract execution and/or legitimate interest

  4. Accounting and tax obligations (invoices, accounting)
    Legal basis: legal obligation

  5. Security and fraud prevention (Site security, payments, abuse)
    Legal basis: legitimate interest

  6. Prospecting / newsletter (if you subscribe)
    Legal basis: consent (unsubscription possible at any time)

  7. Audience measurement and advertising cookies (if used)
    Legal basis: consent (except strictly necessary cookies)

4) To whom do we transmit your data?

We share your data only if necessary, notably with:

  • Our authorized internal teams (customer service, order preparation).

  • E-commerce technical providers: Shopify (platform / hosting) and applications installed on Shopify (e.g., email, reviews, analytics, after-sales service).

  • Payment providers: [Stripe/PayPal/Shopify Payments…].

  • Carriers: Mondial Relay, Colissimo/La Poste (to deliver your order).

  • Audience measurement providers: [Google Analytics)

  • Authorities: if required by law (requisition, fight against fraud).

5) Is your data transferred outside the European Union?

Some of our providers (e.g., technical tools, analytics, email) may be located outside the EU or transfer data there. In this case, we implement the required safeguards (e.g., standard contractual clauses, supplementary measures) in accordance with the GDPR.

6) How long do we keep your data?

We keep your data only for the necessary period, then we delete or anonymize it.

  • Orders / billing / accounting documents: retention according to legal obligations (including retention of accounting documents for 10 years).

  • Data related to the business relationship / evidence: duration necessary for contract and dispute management (often up to 5 years depending on the nature of the documents).

  • Commercial prospecting (newsletter, marketing reminders): generally during the commercial relationship then 3 years from the end of the relationship or the last customer contact.

  • Customer account: as long as the account is active, then deletion/anonymization after [X] of inactivity (e.g., 3 years) or upon request.

  • After-sales service tickets: duration necessary for processing + archiving if needed (dispute/warranty).

7) Cookies and other trackers

When you browse, cookies/trackers may be placed:

7.1 Strictly necessary cookies (without consent)

They enable the proper functioning of the Site (cart, security, language choice, etc.). They cannot be disabled via our banner, as they are essential.

7.2 Cookies subject to consent (audience measurement / advertising / social networks)

They are only placed after your agreement via the cookie banner.

Retention period (acceptance/refusal): 6 months
Audience measurement: trackers - 13 months and retention of collected information - up to 25 months.

7.3 Manage your preferences

You can accept, refuse or configure your cookies during your first visit, then modify your choice at any time via "Manage my cookies" at the bottom of the page.

8) What are your rights?

You have the following rights: access, rectification, erasure, restriction, opposition, portability (depending on the case), and withdrawal of consent at any time (for processing based on consent).

To exercise your rights: email us at serviceclient.olfia@outlook.fr specifying the subject of your request.
We may request proof of identity if necessary (only to verify that it is indeed you).
We generally respond within 1 month (this period may be extended depending on the complexity).

Complaint: You can also contact the CNIL (French National Commission for Data Protection and Liberties).

9) Security

We implement appropriate technical and organizational measures to protect your data (access controls, payment security via providers, backups, etc.). As no system is infallible, we cannot guarantee absolute security.

10) Minors

The Site is intended for adults. If a minor contacts us/places an order, this must be done under the responsibility of a legal representative.

11) Policy Update

We may modify this policy (e.g., Site evolution, tools, obligations). The applicable version is the one published on the Site on the date of browsing/ordering.