Shop

プライバシーポリシー

Last updated: 1 November 2026

Sassa Ann van Wyk EI operates this shop and website, including all related information, content, features, tools, products and services (the “Services”). The Services are hosted by Shopify. This Privacy Policy describes how we collect, use and disclose your personal data when you visit or use the Services, make a purchase through them, or otherwise communicate with us. In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy prevails with regard to the collection, processing and disclosure of your personal data.

Please read this Privacy Policy carefully.

Personal data we collect or process

“Personal data” means information that identifies you or can reasonably be linked to you. It does not include information that has been collected anonymously or de-identified so that it can no longer identify you. Depending on how you interact with the Services, we may collect or process the following categories of personal data:

  • Contact details: your name, billing address, shipping address, email address and phone number (if provided).
  • Payment information: payment method, transaction details and payment confirmation. Card and account details are processed securely by our payment providers and are not stored by us.
  • Transaction information: the items you purchase, return or cancel, and your past orders.
  • Withdrawal requests: if you withdraw from a contract online, we process your name, email address, order number, the items concerned, the date and time of your request and, if provided, your reason and comments. Your IP address is used briefly to prevent spam and is not stored.
  • Communications with us: the information you provide when you contact us by email, including your name, email address and the content of your message.
  • Device information: your IP address, browser type and operating system.
  • Usage information: the pages you visit and information collected through cookies.

Sources of personal data

We may collect personal data:

  • directly from you, for example when you place an order or contact us;
  • automatically through the Services, including through cookies and similar technologies;
  • from our service providers when they process personal data on our behalf.

How we use your personal data

  • Providing the Services: to fulfil your orders, process payments, arrange shipping, manage returns and withdrawals, and contact you regarding your order.
  • Security and fraud prevention: to detect and prevent fraudulent or unlawful activity and to keep the Services secure.
  • Communicating with you: to provide customer support and respond to your enquiries.
  • Improving our shop: with your consent, to understand how the shop is used through Shopify’s built-in analytics.
  • Legal reasons: to comply with legal obligations, including accounting requirements.

We do not send newsletters or marketing emails.

Legal basis

Personal data is processed in accordance with the GDPR on the basis of contractual necessity (orders), legal obligations (accounting), legitimate interests (security, customer enquiries) or consent (non-essential cookies).

How we disclose personal data

We share personal data only with service providers that act on our behalf:

  • Shopify (shop provision and hosting)
  • Shopify Payments and PayPal (payment processing)
  • La Poste (Colissimo) and UPS (delivery)
  • Revoq (online withdrawal requests and confirmation emails)

We may also disclose personal data where required by law. We do not sell your data.

Cookies and analytics

Our shop uses cookies and similar technologies that are necessary for it to function, such as keeping your shopping cart. With your consent, we also use Shopify’s built-in analytics. Non-essential cookies are set only after you have agreed to them in the cookie banner. You may manage or withdraw your consent at any time via the cookie banner or your browser settings.

International transfers

Your personal data may be transferred, stored and processed outside your country of residence. When personal data is transferred outside the EU or EEA, we rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses or adequacy decisions.

Data retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting and reporting obligations. Order data is typically retained for 10 years in accordance with French accounting law.

Your rights

Under the GDPR, you have the right to:

  • Access: request access to the personal data we hold about you.
  • Erasure: request that we delete your personal data.
  • Rectification: request that we correct inaccurate personal data.
  • Portability: receive a copy of your personal data and request its transfer to a third party.
  • Restriction and objection: ask us to stop or restrict processing of your personal data.
  • Withdrawal of consent: where processing is based on consent, withdraw it at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact us at contact(at)sassaannvanwyk.net.

Complaints

If you have a complaint about how we process your personal data, please contact us first. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés) at www.cnil.fr.

Contact

Sassa Ann van Wyk EI is the data controller for your personal data.

Sassa Ann van Wyk EI, 68 rue Léon Frot, 75011 Paris, France

contact(at)sassaannvanwyk.net