Privacy Policy

Last updated: October 20, 2025

1. Publisher & data controller

HANLOÉ Paris , brand operated under the Cosens incubator until 12/31/2025 – Headquarters: 2A Rue de Rome, 13001 Marseille, France – Email: contact@atelierhanloe.com

We process your personal data in accordance with the GDPR and applicable French laws. Some sections are compatible with the requirements of the CCPA (California, USA).

2. Data collected

• Account & orders: identity, contact details, addresses, purchase history, preferences, delivery methods.
• Payments: via providers (Shopify Payments/Stripe, PayPal, Apple Pay, Shop Pay). We do not store your bank details.
• Support: email exchanges, attachments useful to customer service.
• Navigation & analytics: cookies/trackers (see Cookies Policy), IP address, technical logs, performance.
• Marketing: newsletter consents, communication preferences.

3. Purposes & legal bases

• Contract execution: order, delivery, customer service, returns.
• Legitimate interest: fight against fraud/abuse, site improvement, aggregated statistics, security.
• Legal obligations: accounting, invoicing, guarantees, requests to authorities.
• Consent: newsletter, marketing/audience measurement cookies not exempt.

4. Retention periods

• Account & orders: duration of the relationship + legal obligations (up to 10 years for accounting documents).
• Prospecting (newsletter): until withdrawal of consent or 3 years after last contact.
• Cookies: see Cookies Policy.

5. Recipients & transfers

• Providers: Shopify (e-commerce hosting), payment processors (Shopify Payments/Stripe, PayPal, Apple Pay, Shop Pay), shipping (FedEx), email CRM, analytics (Google Analytics), marketing (Meta Pixel, Pinterest Tag), support.
• Transfers outside the EU are possible (e.g. Shopify hosting in Canada/USA). We ensure appropriate safeguards (standard contractual clauses, suitable countries).

6. GDPR rights & how to exercise them

You have the right to access, rectify, erase, limit, oppose, port, and define post-mortem directives. To exercise this right: contact@atelierhanloe.com . You can contact the CNIL in case of difficulty.

7. Security & Hosting

• SSL encryption on the site, proportionate technical and organizational measures.
• Banking data processed by our certified payment providers; we do not have access to them.

8. Cookies & trackers

See the Cookie Policy for the list, purposes and your choices (consent, withdrawal).

9. Minors

The Site is not intended for children under 16 years of age. If you believe that a minor has provided us with data, please contact us for deletion.

10. CCPA Information (USA)

• We do not sell your personal data.
• California residents may exercise their CCPA rights (access/deletion) by writing to us at contact@atelierhanloe.com .

11. Updates

We may modify this policy. The online version is authoritative.

12. Contact

For any questions regarding your data: contact@atelierhanloe.com