Politique de confidentialité / Données personnelles

PRIVACY POLICY (GDPR)

PRIVACY POLICY

I. Definitions

(Identical definitions as above – Website, Product, User, Customer, Member)

SABANAH SAS acts as the data controller of all personal data collected via the Website.

The Website is hosted and operated through Shopify, acting as a technical provider and, in certain cases, a processor under the GDPR.

II. Purpose of This Policy

This Privacy Policy explains:

how personal data is collected,
how it is used,
how it is stored and protected,
the rights of Users and Customers.

By creating an account or placing an order, Users agree to provide accurate and genuine information.

III. Data Collected

Data collected directly via forms:

identity,
postal address,
email,
phone,
delivery address,
order details,
preferences.

Data collected automatically:

IP address,
device used,
pages viewed,
navigation actions,
cookies.

SABANAH does not collect or store full credit card information.

Data is declared to CNIL under number: 1837817.

IV. Purposes of Processing

Data is used to:

process orders,
manage Member accounts,
handle delivery & billing,
manage complaints and returns,
send newsletters and marketing emails (with consent),
analyse traffic and improve the Website,
prevent fraud,
ensure technical security.

V. Data Recipients

Data may be shared with:

Shopify (hosting and e-commerce operations),
payment service providers,
anti-fraud agencies,
transport and logistics partners,
email service providers,
administrative or judicial authorities when required.

SABANAH does not sell personal data.

VI. Legal Basis

Processing is based on:

contract performance (orders),
legal obligations (billing, fraud prevention),
legitimate interest (security, analytics),
consent (marketing, cookies requiring consent).

VII. Data Retention

Data is retained:

for the duration necessary for processing,
extended by legal and regulatory retention periods.

Examples:

billing and invoice data: 10 years,
customer account data: duration of account + legal retention,
marketing data: 3 years after last interaction.

Cookies follow the durations listed in the Cookie Policy.

VIII. Cookies

Cookies are governed by the Cookie Policy.

IX. Security

SABANAH implements appropriate technical and organisational measures to protect data.

Payments use encrypted secure gateways (SSL). SABANAH does not store bank card data in readable form.

Absolute security cannot be guaranteed.

X. Transfers Outside the EU

Some providers, including Shopify, may store data outside the EU.

SABANAH ensures:

adequacy decisions, or
the use of Standard Contractual Clauses, or
other GDPR-compliant safeguards.

XI. User Rights

Users may exercise:

right of access,
right of rectification,
right of erasure,
right of restriction,
right of opposition,
right to data portability,
right to withdraw consent.

Contact for rights requests:

SABANAH – Data Protection Officer (DPO)
Email: flajolet.noel@sabanah.com
Address: SABANAH – Customer Service, 1 avenue Georges Clémenceau, 92500 RUEIL-MALMAISON – France

If unresolved, Users may file a complaint with the CNIL.

XII. Policy Updates

This policy may be updated at any time. Users should regularly review this page.