Legal information

Privacy policy

PRIVACY POLICY

Last updated: April 2026

1. Identity of the Data Controller The data controller for personal data collected on the website caftanparis.com is:

Caftan Paris 173 rue de Courcelles, 75017 Paris, France SIRET: 106 036 973 00019 Email: contact@caftanparis.com Phone: +33 6 64 27 07 65 Director: Fatiha ASSAKKALI

2. Data Collected As part of your browsing and purchases on caftanparis.com, we collect the following data:

  • Identification data : last name, first name, email address, phone number
  • Delivery data : delivery and billing postal address
  • Payment data : processed directly by our secure payment provider (Shopify Payments), Caftan Paris never stores your banking details
  • Browsing data : IP address, browser type, pages visited, visit duration (via cookies)
  • Order data : purchase history, product preferences

3. Purposes of Processing Your data is collected for the following purposes:

  • Processing and tracking of your orders
  • Delivery of your purchases (forwarded to Colissimo / Mondial Relay via Sendcloud)
  • Management of returns and refunds
  • Sending order confirmations and transactional communications
  • Improvement of our website and services
  • Compliance with our legal and accounting obligations
  • Fraud prevention (photos and videos of items before shipment and upon receipt)

4. Legal Basis for Processing Depending on the case, the processing of your data is based on:

  • Performance of a contract : processing your order, delivery, refund
  • Legal obligation : retention of accounting and tax data
  • Legitimate interest : fraud prevention, improvement of our services
  • Your consent : sending marketing communications (you can unsubscribe at any time)

5. Data Recipients Your data may be forwarded to the following third parties within the strict framework of executing your orders:

  • Shopify Inc. : hosting and management of the online store
  • Shopify Payments : secure processing of credit card payments
  • PayPal (Europe) S.à r.l. : secure processing of payments via PayPal
  • Sendcloud : shipment management
  • Colissimo / Mondial Relay : delivery of your orders
  • Competent authorities : in the event of a legal obligation or proven fraud

No data is sold or transferred to third parties for commercial purposes.

6. Retention Period Your data is kept for the following durations:

  • Order data : 10 years (accounting and tax obligation)
  • Customer account data : 3 years after the last purchase or contact
  • Browsing data and cookies : 13 months maximum
  • Photos and videos of items (quality control/anti-fraud): 30 days after receipt of the return or closure of the dispute

7. Your Rights In accordance with the GDPR (EU Regulation 2016/679) and the French Data Protection Act, you have the following rights:

  • Right of access : obtain a copy of your personal data
  • Right to rectification : correct inaccurate data
  • Right to erasure : request the deletion of your data
  • Right to data portability : receive your data in a structured format
  • Right to object : object to the processing of your data
  • Right to restriction : restrict the processing of your data

To exercise your rights, contact us at: contact@caftanparis.com We undertake to respond within 30 days.

If you feel that your rights are not being respected, you can lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

8. Cookies Our site uses cookies to improve your browsing experience. The cookies used are:

  • Essential cookies : necessary for the website to function (cart, session, payment)
  • Analytical cookies : audience measurement and website improvement
  • Marketing cookies : personalization of advertisements (only with your consent)

You can manage your cookie preferences at any time via the consent banner displayed during your first visit.

9. Data Security Caftan Paris implements all appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. Our site is hosted on Shopify, a PCI DSS certified platform for payment security.

10. Cross-Border Transfers Outside the EU Since Shopify Inc. is a Canadian company, your data may be transferred outside the European Union. These transfers are governed by appropriate safeguards in compliance with the GDPR (Standard Contractual Clauses).

11. Amendments Caftan Paris reserves the right to amend this privacy policy at any time. Any changes will be published on this page along with the update date.

12. Contact For any questions regarding the protection of your data: contact@caftanparis.com
Caftan Paris, 173 rue de Courcelles, 75017 Paris