Privacy Policy

Preamble

Chamini operates an online store accessible via the website, through which it offers products and services for sale (hereinafter the "Services").

Chamini is a limited liability company (SARL), acting as data controller within the meaning of Regulation (EU) 2016/679 on the protection of personal data (hereinafter the “GDPR”).

The site is hosted by Shopify Inc., which provides the technical infrastructure necessary for the operation of the Services, including store hosting, order management and secure payment processing.

This Privacy Policy aims to inform, clearly and transparently, all individuals accessing the website or using the Services worldwide (hereinafter referred to as "Users") about how their personal data is collected, used, stored, and protected. This Policy applies to all Users, but data processing is carried out in accordance with French and European law, specifically the GDPR and applicable French legislation.

1. Data controller and contact details

The data controller for personal data collected in connection with the use of the website and services is:

Chamini,

Limited liability company (SARL),

whose registered office is located at: 231 rue Saint-Honoré, 75001 Paris, France,

registered in the Trade and Companies Register under number 990 594 806.

Chamini determines the purposes and means of the processing of personal data implemented on the site, in accordance with Regulation (EU) 2016/679 on the protection of personal data (GDPR) and current French legislation.

For any questions relating to this Privacy Policy or to exercise their data protection rights, the User can contact Chamini group:

by email: chaminiparis@outlook.com

By mail: 231 rue Saint-Honoré, 75001 Paris, France

2. Personal data collected

When the terms "personal data" or "personal information" are used, they refer to any information that allows for the direct or indirect identification of a natural person, or that can reasonably be linked to that person, in the context of the use of the site and the Services.

Data collected anonymously or rendered irreversibly unidentifiable, which does not allow the identification of a User, is not considered personal data.

In connection with the use of the site and Services, Chamini may collect the following categories of personal data, depending on how the User interacts with the Services and in compliance with applicable legislation:

2.1. Identification and contact details

Name, surname, postal address, billing address, delivery address, telephone number and email address.

2.2. Payment data

Information necessary for processing payments, such as the payment method used, payment confirmation, and transaction details.

Payments are processed securely by third-party payment providers. Chamini does not store full bank card numbers or sensitive banking information under any circumstances.

2.3. Customer account data (if applicable)

2.4. Transaction and order data

Products viewed, added to cart or favorites list, purchased, returned, exchanged or cancelled, as well as order and transaction history.

2.5. Communications with Chamini

Information transmitted by the User during their interactions with Chamini, including via contact forms, emails or social networks.

2.6. Navigation and technical data

Information relating to the device used, the browser, the network connection, the IP address, as well as the User's interactions with the site (pages viewed, date and time of browsing), in particular via technical cookies.

Personal data is collected either directly from the User when using the Services, or automatically when browsing the site.

The site and services are not intended for minors. Chamini does not knowingly collect personal data concerning minors.

Chamini does not collect any sensitive data as defined by the GDPR, in particular no data relating to the health, political opinions, religious beliefs or privacy of Users.

3. Sources of personal information

The personal data collected by Chamini may come from the following sources:

Directly from the user, in particular when they create a customer account, place an order, contact Chamini, register for the Services or voluntarily provide their personal information
Automatically when using the Services, including via the user's device, while browsing the website, and through cookies or similar technologies, in accordance with the user's expressed preferences.
With our service providers, when they act on our behalf in the context of operating the site and providing the Services (for example: hosting, technical solutions, payment, delivery)
With partners or third parties, only when necessary for order processing, product delivery, payment, technical operation of the site, or when the user has expressly consented, in accordance with applicable legislation.

4. Children's Data

The Services are not intended for children and Chamini does not knowingly collect personal data concerning minors.

If a parent or legal guardian believes that a child has provided personal data to Chamini without authorization, they may contact Chamini using the contact details provided in this Privacy Policy to request the deletion of that data.

Chamini does not carry out any processing of personal data specifically intended for children and is not aware of the intentional collection of data concerning persons under sixteen (16) years of age.

5. Purposes of processing personal data

Depending on how the User interacts with the site and Services, Chamini uses the personal data collected for the following purposes:

5.1. Provision and Management of Services

Personal data is used to ensure the performance of the contract concluded with the User, in particular for:

order and payment processing and tracking
managing deliveries, returns and exchanges
customer account management, if applicable
sending communications related to orders, account or customer service

5.2. Improvement of the operation of the site and the Services

Some data may be used to analyze the operation of the site, to maintain it, to improve its performance, security and ergonomics, as well as to correct any malfunctions.

5.3. Security and fraud prevention

Personal data may be processed in order to:

to ensure the security of the site and the Services
to prevent, detect and combat fraud attempts, misuse or malicious activity
to protect the rights and security of Chamini and its Users

5.4. Compliance with legal and regulatory obligations

Personal data may be processed in order to comply with the legal, accounting, tax and regulatory obligations to which Chamini is subject.

6. Legal basis for processing

Chamini processes Users' personal data only on legal bases in accordance with Regulation (EU) 2016/679 (GDPR):

6.1 Contract Performance

Personal data is processed to enable the performance of the contract concluded with the User, in particular for:

order and payment processing
managing deliveries, returns and exchanges
customer account management, if applicable
sending communications related to orders or customer service

6.2. Compliance with a legal obligation

Certain data is processed in order to comply with the legal and regulatory obligations to which Chamini is subject, including tax, accounting and commercial obligations.

6.3. Legitimate interest

Personal data may be processed when necessary for Chamini's legitimate interests, such as:

the security of the Services and the prevention of fraud or abuse
the protection of the rights and security of Chamini and its users

Chamini does not currently process any data on other legal bases, particularly for marketing or advertising purposes. Such processing may be added later, after the implementation of specific tools and an update to this Privacy Policy.

7. Sharing data with third parties / disclosure

Chamini does not sell or rent Users' personal data to third parties. However, personal data may be shared in the following circumstances, only when necessary to provide the Services or comply with applicable law:

7.1. Service Providers

Chamini may share personal data with third-party service providers who perform services on its behalf, including for:

website hosting and technical maintenance
order and payment management
the preparation, shipping and delivery of products via carriers located in France and the EU
customer support and service
secure data storage and cloud backup

These service providers process the data only for the performance of their services and in accordance with Chamini's instructions.

7.2. Social networks and third-party integrations

When the User interacts with Chamini via social media platforms (Instagram, TikTok, Pinterest) or uses integrated third-party features, certain data may be transmitted to these platforms as part of the use of these services. These platforms process the data according to their own privacy policies.

7.3. Affiliates and internal partners (if applicable)

Chamini may share certain data with its subsidiaries or partners solely for operational, administrative or legal reasons, in strict compliance with applicable legislation.

7.4. Legal obligations and protection of rights

Personal data may be shared for:

to comply with legal or regulatory obligations;
enforce the general terms and conditions, protect the rights, safety and interests of Chamini, its users or third parties;
in the context of legal transactions such as a merger, acquisition or disposal of assets.

7.5. Security and confidentiality

Personal data may be shared with service providers and partners located in France or the European Union. In the event of a transfer outside the EU, Chamini ensures that this transfer is governed by the rules of the GDPR, in particular through the use of standard contractual clauses approved by the European Commission or any other appropriate legal safeguards.

8. Third-party websites and links

The Services may contain links to websites or online platforms operated by third parties. These third-party sites have their own privacy policies and terms of use, over which Chamini has no control.

Chamini cannot be held responsible for the privacy, security, content or operation practices of these third-party sites or platforms, nor for the accuracy, completeness or reliability of the information offered therein.

Information that users choose to share in public or semi-public spaces, including on third-party social media platforms, may be visible to other users and used by those platforms in accordance with their own policies. Chamini has no control over how third parties use this information.

The presence of links to third-party sites or platforms does not constitute an endorsement of their content, services, or practices by Chamini, unless expressly stated otherwise. Users are encouraged to review the privacy and security policies of these third-party sites when interacting with them to understand how their information may be used.

9. Retention period for personal data

CHAMINI retains Users' personal data only for the period necessary for the purposes for which it was collected, in compliance with applicable legislation and legal obligations.

9.1. Order and payment data

Information necessary for order processing and invoicing is kept for 10 years, in accordance with legal and tax obligations in France.

9.2. Customer account data

Customer account information is retained as long as the account is active.

In case of prolonged inactivity, the account and associated data will be deleted or anonymized 3 years after the last login.

9.3. Communications with customer service

Information exchanged with customer service is kept for 2 years after the request is resolved, then deleted or anonymized.

9.4. Navigation and technical data

Information collected automatically via the site (technical cookies, IP address, browsing information) is kept for a maximum of 13 months, in accordance with the recommendations of the CNIL.

9.5 Data retained for legal obligations or protection of rights

Some data may be kept longer only to comply with legal, regulatory or accounting obligations, or to protect CHAMINI's rights in the event of a dispute.

10. User Rights

In accordance with Regulation (EU) 2016/679 (GDPR) and applicable French legislation, users have the following rights regarding their personal data.

10.1. Right of access

You have the right to request from Chamini access to your personal data and to receive a copy of it.

10.2. Right of rectification

You can request the correction or updating of your personal data when it is inaccurate or incomplete.

10.3. Right to erasure (right to be forgotten)

You can request the deletion of your personal data when:

they are no longer necessary for the purposes for which they were collected
you withdraw your consent and no other legal basis justifies their processing
you object to their processing and no legal obligation prevents it

10.4. Right to restriction of processing

You can request the restriction of the processing of your personal data in certain cases, including:

when you dispute the accuracy of the data
when you object to the processing during the examination of your application
when the data is no longer needed by Chamini, except for the exercise or defense of legal rights.

10.5. Right to portability

Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you may request to receive your data in a structured, commonly used and machine-readable format, or to transmit it to another controller where technically feasible.

10.6. Right to object

You can object at any time to the processing of your personal data based on Chamini's legitimate interest, except where such processing is justified by a legal or contractual obligation.

10.7. Withdrawal of consent

When processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before this withdrawal.

10.8. Exercising your rights

To exercise your rights, you can contact Chamini:

by email: chaminiparis@outlook.com
By mail: CHAMINI GROUP SARL – 231 rue Saint-Honoré, 75001 Paris, France

Chamini undertakes to respond to any request relating to the exercise of the rights of the persons concerned within one (1) month of receipt of the request.

This period may be extended by two (2) additional months in the event of a complex request or a high volume of requests, in accordance with applicable regulations. In this case, the user will be informed of this extension and the reasons for the delay.

10.9. Right to lodge a complaint

If you believe that your rights are not being respected, you can file a complaint with the National Commission for Information Technology and Freedoms (CNIL) or the competent data protection authority in your country of residence.

11. Security of personal data

Chamini implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of Regulation (EU) 2016/679 (GDPR).

The personal data collected within the framework of the Services is hosted by third-party technical providers selected for their guarantees in terms of security and regulatory compliance, in particular in the context of the use of the Shopify platform as well as the services associated with the operation of the site (hosting, domain name, network infrastructure).

Chamini ensures that access to personal data is strictly limited to authorized personnel and service providers only to the extent necessary for the provision of the Services. Appropriate security measures (such as encryption, access control, and system protection) are implemented by the relevant technical service providers to protect personal data against loss, alteration, unauthorized access, or unlawful disclosure.

Unfortunately, no electronic transmission or storage system is completely secure. Chamini therefore cannot guarantee absolute security, but is committed to acting diligently and in accordance with legal requirements in the event of a personal data breach.

Security measures are applied in accordance with French and European legislation, even for users located outside the European Union.

12. Changes to the Privacy Policy

Chamini reserves the right to modify or update this Privacy Policy at any time, including to reflect:

legal or regulatory changes
changes in its practices or its Services
the implementation of new features or tools (for example, marketing or advertising campaigns)

The version in effect is the one published on the website at the time of consultation.

In the event of a substantial change, Chamini may inform users by any appropriate means.

Users are advised to regularly review this Privacy Policy to stay informed of any updates.

Country/region

Language