Privacy Policy

• Suki Paris pays particular attention to protecting your personal data. This policy sets out what data we collect, why, how long we keep it, and how you can exercise your rights. It applies to the sukiparis.com website and to all of our services.

Data controller

The data controller for your personal data is Suki Paris, run by Amandine Simon, whose registered office is located at 6 rue Labie, 75017 Paris, France.

• Contact: hello@suki-paris.com

• Telephone: +33 6 65 50 92 72

• For any question about this policy, or to exercise your rights, you may write to us at hello@suki-paris.com.

Data we collect and purposes

We only collect the data strictly necessary for the following purposes:

• Processing your orders — First name, surname, delivery and billing address, email, telephone number, purchase history. Legal basis: performance of the sales contract.
• Secure payment — Payment card details never pass through our servers. They are processed directly by our PCI-DSS certified payment providers. Legal basis: performance of the contract.
• Responding to your enquiries — Email, content of your message. Legal basis: our legitimate interest in responding to you.
• Newsletter and marketing activities — Email, first name, preferences. We send you our monthly newsletter and, where you have consented, targeted offers. You may unsubscribe at any time via the link at the bottom of each email. Legal basis: consent.
• Audience measurement and advertising — Pages viewed, products viewed, items added to basket, purchases, anonymised technical identifiers. This data is only collected if you consent via the cookie banner. Legal basis: consent.
• Legal obligations — Invoices and accounting records. Legal basis: legal obligation (French Commercial Code).

Recipients of your data

Your data is never sold. It may be shared with technical service providers acting on our instructions and solely for the purposes described above:

• Shopify (Canada) — e-commerce platform and order management.
• Vercel (United States) — website hosting.
• Carriers (Colissimo, Chronopost, DHL) — delivery of your orders.
• Google (GA4, Google Ads) (United States) — audience measurement and advertising campaigns, only with your consent.
• Meta (Facebook, Instagram) (United States) — advertising campaigns, only with your consent.
• Klaviyo (United States) — sending our marketing emails, only with your consent.

Some of these providers are located outside the European Union. Transfers are carried out on the basis of standard contractual clauses approved by the European Commission and, where applicable, the Data Privacy Framework.

Retention periods

• Order data: kept for the duration of the contractual relationship, then archived for 10 years under our accounting obligations.
• Customer account: kept for as long as you use it, deleted after 3 years of inactivity.
• Prospecting data (newsletter, marketing): kept for 3 years from your last contact.
• Cookies and trackers: 13 months maximum, in accordance with CNIL (French data protection authority) recommendations.
• Contact forms: 3 years after the last exchange.

Cookies

We use three categories of cookies on this site:

• Strictly necessary — basket, security, preferences. These cookies cannot be disabled.
• Audience measurement — Google Analytics 4, to understand how you browse the site and to improve it. Anonymised data.
• Marketing — Meta (Facebook, Instagram), to measure the effectiveness of our advertising and offer you relevant content.

On your first visit, no measurement or marketing cookie is set until you have given your consent via the banner. You may change your choices at any time:

Your rights

In accordance with European Regulation 2016/679 (GDPR) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:

• Right of access — obtain confirmation that your data is being processed and receive a copy of it.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request the deletion of your data, subject to our legal obligations.
• Right to data portability — receive your data in a structured, readable format.
• Right to object and to restriction — object to the processing or request that it be restricted.
• Withdrawal of consent — withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
• Post-mortem directives — determine what happens to your data after your death.

• To exercise these rights, write to us at hello@suki-paris.com specifying the purpose of your request. We may ask you for proof of identity where necessary, and we respond within one month at the latest.

• If you believe your rights are not being respected, you may also lodge a complaint with the CNIL: cnil.fr/fr/plaintes.

Security

We implement technical and organisational measures to protect your data: encryption of communications (HTTPS), access control, regular backups, certified service providers.

Changes to this policy

This policy may change. Any substantial change will be indicated on this page and, where applicable, by email. The date of the last update appears at the top of the document.