Privacy Policy

Privacy Policy

This Privacy Policy describes how Cibili EI collects, uses, and protects your personal data when you visit cibili.com or place an order with us. It is provided in accordance with the EU General Data Protection Regulation (GDPR — Regulation 2016/679) and the French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

The data controller is:

  • Cibili EI, sole proprietorship (micro-entreprise)
  • Email: support@cibili.com

2. Data We Collect

We collect the following categories of personal data:

  • Identification data: first and last name;
  • Contact data: email address, phone number, shipping and billing addresses;
  • Order data: items purchased, order history, amounts paid;
  • Payment data: processed directly by Stripe — we never store full card details;
  • Technical data: IP address, browser type, device information, pages visited (collected via cookies);
  • Marketing data (with consent): newsletter subscription, marketing preferences.

3. How We Collect Data

We collect data:

  • Directly from you when you create an account, place an order, contact us, or subscribe to our newsletter;
  • Automatically through cookies and similar technologies when you browse the Site;
  • From our service providers (Shopify, Stripe, carriers) in the context of order fulfillment.

4. Purpose of Processing

We use your data for the following purposes:

Purpose Legal basis
Processing and shipping your orders Performance of contract
Customer support and after-sales service Performance of contract
Compliance with legal obligations (accounting, tax) Legal obligation
Fraud prevention Legitimate interest
Newsletter and marketing communications Consent
Site analytics and improvement Legitimate interest

5. Data Recipients

Your data is shared only with parties that need it to fulfill these purposes:

  • Shopify International Limited (Ireland) — hosting and e-commerce platform;
  • Stripe Payments Europe Ltd. (Ireland) — payment processing;
  • La Poste / Colissimo and other carriers — order delivery;
  • Email service providers (e.g. Shopify Email, Klaviyo or equivalent) — transactional and marketing communications;
  • Tax and accounting service providers, when legally required.

We never sell your data to third parties.

6. International Transfers

Some of our processors may transfer data outside the European Economic Area (e.g. United States). When this is the case, we ensure that appropriate safeguards are in place, such as the EU Standard Contractual Clauses or adequacy decisions issued by the European Commission.

7. Cookies

We use cookies and similar technologies to operate the Site, analyze traffic, and (with your consent) personalize content and ads. You can manage your cookie preferences via the cookie banner displayed on your first visit, or by adjusting your browser settings.

Categories of cookies used:

  • Strictly necessary: required for the Site to function (cart, checkout, security);
  • Analytics: anonymous statistics on Site usage;
  • Marketing: subject to your prior consent.

8. Data Retention

We retain your data for the following durations:

  • Order data: 10 years (accounting and tax obligations under French law);
  • Account data: for the duration of your account, plus 3 years of inactivity;
  • Marketing data: until you withdraw consent, or 3 years after the last interaction;
  • Cookies: maximum 13 months.

9. Your Rights

Under GDPR, you have the right to:

  • Access your personal data;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten");
  • Restrict processing in certain cases;
  • Object to processing based on legitimate interest or for marketing purposes;
  • Portability — receive your data in a structured, machine-readable format;
  • Withdraw consent at any time, where processing is based on consent;
  • Define directives regarding the fate of your data after your death.

To exercise these rights, contact us at support@cibili.com. We will reply within one month.

You also have the right to lodge a complaint with the French data protection authority (CNIL — www.cnil.fr) if you believe your rights have been infringed.

10. Security

We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, alteration, or disclosure. However, no transmission over the internet is fully secure, and we cannot guarantee absolute security.

11. Children

Our products are not directed at children under 16. We do not knowingly collect data from minors without parental consent. If you believe a minor has provided us with personal data, please contact us so we can delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version is always available on the Site, with the "Last updated" date at the top.

13. Contact

For any question regarding your personal data or this Policy, contact us at:

support@cibili.com