Privacy Policy

Privacy Policy

At Ninaya, the protection of your personal data is a priority. This policy explains how we collect, use, and protect your information, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

The data controller is Ninaya, a micro-enterprise based in France.

2. Data Collected

We collect the following data during your purchases or browsing:

  • First name and last name
  • Email address
  • Shipping and billing address
  • Payment information (securely processed by Shopify Payments)
  • Browsing data (cookies, IP address)

3. Purposes of Processing

Your data is used to:

  • Process and ship your orders
  • Send you order confirmations and updates
  • Improve our store and your shopping experience
  • Comply with our legal and accounting obligations
  • Send you marketing communications (only with your consent)

4. Legal Basis

The processing of your data is based on: the performance of the sales contract, your consent (for marketing), and our legal obligations.

5. Data Retention

Your data is retained for the period necessary to fulfill the order and in accordance with French legal obligations (generally 5 years for accounting data).

6. Data Sharing

Your data may be shared with:

  • Shopify Inc. (hosting and payment processing)
  • Our carriers (for delivery)
  • Legal authorities if required by law

We never sell your data to third parties.

7. Your Rights

In accordance with the GDPR, you have the following rights:

  • Right to access your data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to object to processing

To exercise your rights, please contact us by email. You can also lodge a complaint with the CNIL (www.cnil.fr).

8. Cookies

Our site uses cookies to improve your browsing experience and analyze traffic. You can manage your cookie preferences via your browser settings.

9. Security

We implement all necessary technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.

10. Contact

For any questions regarding this policy or your personal data, please contact us via our Contact page.

Last updated: June 2026