Privacy policy

Last updated: 16 September 2026.

Data controller

The data controller is Cécile Trousse, professional painter, residing at 35 avenue Jean Jaurès, 73000 Chambéry, France. Contact: ceciletrousse@gmail.com ; 06 87 15 37 94.

Data collected

Depending on how the site is used, the following data may be collected:

  • identity and contact details, including name, postal address, email address and telephone number;
  • order, delivery, billing, return and exchange information;
  • communications sent via the contact form or by email;
  • subscription preferences for marketing communications;
  • technical and browsing information, including IP address, device, browser, pages viewed and data obtained from cookies;
  • information required for fraud prevention and site security.

Full payment card details are not held by Cécile Trousse. They are processed by the secure payment providers available at checkout.

Purposes and legal bases

The data is used to:

  • process, prepare, deliver and track orders, on the legal basis of the performance of the contract;
  • handle requests, returns, refunds and warranties, on the legal basis of the performance of the contract and legal obligations;
  • keep accounting records and comply with tax and regulatory obligations, on the legal basis of a legal obligation;
  • prevent fraud, secure the site, measure its performance and improve the services, on the legal basis of legitimate interest;
  • send the newsletter or marketing communications where consent has been given, with the option to unsubscribe at any time.

Recipients and service providers

The data is accessible only to the extent necessary to Cécile Trousse and to the service providers involved in operating the shop: Shopify, payment providers, carriers, manufacturing or printing providers where the order requires it, messaging, newsletter, analytics and security tools, and advisers bound by a duty of confidentiality.

The shop is hosted by Shopify. Information provided by the customer is shared with Shopify and with the service providers needed to deliver the services, some of which may be located outside the customer's country of residence. Shopify governs international transfers in accordance with applicable regulations. Shopify's Consumer Privacy Policy is available at https://www.shopify.com/fr/legal/privacy/consumers and the privacy choices offered by Shopify at https://privacy.shopify.com/fr.

Retention periods

Data is retained for as long as necessary for the purposes described above, and then archived for the applicable statutory periods. In particular, accounting records and invoices are retained for ten years. Data used for direct marketing purposes is retained until consent is withdrawn or, failing that, for a maximum of three years from the last active contact. Certain data may be retained for longer where required by law or where necessary for the establishment, exercise or defence of legal claims.

Cookies

The site uses cookies that are strictly necessary for its operation and may, subject to consent where required, use audience measurement, personalisation or marketing cookies. Preferences can be managed from the banner or the site's privacy settings. Refusing non-essential cookies does not prevent access to the shop's main features.

Data subjects' rights

In accordance with applicable regulations, any person may, depending on their situation, request access to, rectification, erasure or portability of their data, request restriction of processing, object to processing or withdraw their consent at any time.

Requests may be sent to ceciletrousse@gmail.com. Proof of identity may be requested only where necessary to prevent disclosure to a third party. A complaint may also be lodged with the CNIL: https://www.cnil.fr.

Updates

This policy may be updated to reflect changes to the site, service providers or regulations. The date of the last update appears at the top of this document.