Privacy policy

Privacy Policy

Last updated: 27 September 2026

This is a courtesy translation. In the event of any discrepancy, the French version prevails.

1. Data controller

FESTIFYSHOP — Kény Jaures, EI, 47 Rue Vivienne, 75002 Paris, France — support@festifyshop.com. We process your personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

2. Data we collect

Identity and contact details: surname, first name, email, phone number, delivery and billing addresses;
Order: products purchased, amounts, history, exchanges with customer service;
Payment: your bank details are processed directly by our payment providers. We only receive limited information, such as the payment status or the last digits of the card;
Browsing: IP address, device, browser, pages viewed, via cookies and similar technologies (see section 7);
Customer account, if you create one, and newsletter, if you subscribe to it.

3. Purposes and legal bases

Processing and delivering your orders, handling returns, refunds and guarantees — performance of the contract;
Answering your requests, by email or via the chat — performance of the contract or legitimate interest;
Keeping accounts and meeting our tax obligations — legal obligation;
Preventing fraud and securing the site — legitimate interest;
Sending you the newsletter and offers — consent, which you can withdraw at any time using the unsubscribe link;
Measuring audience and displaying personalised advertising, for example via Meta — consent, collected through the cookie banner.

4. Recipients

Your data is never sold. It is shared only with the providers needed for the purposes above:

Shopify, for hosting the site and managing orders;
our payment providers, such as Stripe;
our suppliers and logistics partners, who prepare and ship orders;
carriers and parcel tracking services;
our chat, emailing and cookie consent management tools;
Meta Platforms, if you accept advertising cookies;
the authorities, where required by law.

5. Transfers outside the European Union

Some providers, such as Shopify, Meta or our logistics partners, may process data outside the European Union, in particular in the United States or Asia. These transfers are covered by appropriate safeguards: an adequacy decision, including the EU–US Data Privacy Framework, or the European Commission's standard contractual clauses.

6. Retention periods

Order data and invoices: 10 years (accounting obligation);
Customer and prospect data: 3 years after the last contact or the last purchase;
Cookies: 13 months maximum; your consent choice is kept for 6 months.

7. Cookies

Cookies that are essential for the site to work, such as the cart or payment, are placed without consent. Audience measurement and advertising cookies are only placed with your agreement, given through the cookie banner. You can change your choice at any time using the site's cookie management link or your browser settings.

8. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. You can also withdraw your consent at any time and set instructions on what happens to your data after your death. To exercise these rights, write to support@festifyshop.com. We reply within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the data protection authority of your country of residence.

9. Security

We implement appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted access and PCI-DSS certified providers for payments.