🔒 PRIVACY POLICY

Last updated: April 2026

Sadjé store, operated by the sole proprietorship Les Fans de Winona, places great importance on the protection of your personal data. This policy explains how we collect, use, and protect your information, in compliance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679).

1. DATA CONTROLLER

Les Fans de Winona — Sole Proprietorship
Registered office: 60 Rue François 1er, 75008 Paris, France
Manager: Mr. Hugues NOUVELLET
✉️ contact@shopsadje.com — 📞 +33 (0)7 66 38 41 58

2. DATA COLLECTED

We only collect the information necessary for managing your order and improving our services:

• Contact information: last name, first name, email address, phone number
• Order information: delivery address, items ordered, payment methods
• Browsing information: cookies, IP address, pages visited, interactions on the site
• Delivery-related information: carrier, tracking number

3. PURPOSES OF PROCESSING

Your data is used to:

• Process your orders and deliveries
• Provide customer service and manage returns
• Improve our products and services
• Send marketing communications if you have given your consent
• Comply with legal and tax obligations
• Prevent fraud and ensure transaction security

4. LEGAL BASIS FOR PROCESSING

• Contract performance: order processing, delivery, customer service
• Consent: newsletter, promotional offers, marketing cookies
• Legal obligation: retention of accounting and tax data
• Legitimate interest: service improvement, fraud prevention, security

5. SHARING DATA WITH THIRD PARTIES

We only share your data with providers necessary for the provision of the service. Your data is never sold to third parties.

Provider	Function	Country	GDPR Guarantees
Shopify Inc.	Hosting and e-commerce platform	Canada / USA	Adequacy Decision (Canada) — Standard Contractual Clauses (USA)
CJ Dropshipping	Logistics, fulfillment, and order shipping	China	Standard Contractual Clauses (SCCs) — Transfer governed by subcontracting agreement
Partner carriers	Package delivery	International	Data limited to what is necessary (name, address, phone)
Payment providers	Secure transaction processing	Variable	PCI-DSS compliant — Standard Contractual Clauses
Google LLC (Google Merchant Center, Google Analytics)	Traffic analysis, Shopping campaigns	USA	Standard Contractual Clauses — Google Ads Data Processing Terms

6. TRANSFERS OUTSIDE THE EUROPEAN UNION AND LOCAL REGULATIONS

Some of our providers are located outside the European Union (Shopify – USA, CJ Dropshipping – China, Google – USA). These transfers are governed by appropriate safeguards in accordance with Articles 46 et seq. of the GDPR, particularly through standard contractual clauses approved by the European Commission.

For customers located outside the European Union, local data protection regulations may also apply, notably:

• Brazil: Lei Geral de Proteção de Dados (LGPD – Law No. 13.709/2018). Brazilian customers benefit from the rights provided by the LGPD, particularly the right to access, correct, delete, and port their data. The competent supervisory authority is the ANPD (Autoridade Nacional de Proteção de Dados).
• Middle East, Asia, Africa: other local regulations may apply depending on the customer's country of residence.

We commit to treating your data with the same level of protection, regardless of your country of residence.

7. COOKIES AND TRACKING

The site uses the following types of cookies:

• Essential cookies: necessary for the site's operation (cart, session, security)
• Analytical cookies: Google Analytics — audience measurement and browsing behavior
• Marketing cookies: Google Merchant Center — tracking of Shopping campaigns

You can refuse or manage cookies via your browser or our cookie preference management tool available on the site.

8. RETENTION PERIODS

• Order-related data: 10 years (legal and tax obligations)
• Marketing data: until withdrawal of consent
• Anonymized browsing data: maximum 24 months
• Logistics tracking data: 3 years after delivery

9. YOUR RIGHTS

In accordance with the GDPR, you have the following rights:

• Access: obtain a copy of your data
• Rectification: correct inaccurate data
• Erasure: request the deletion of your data
• Restriction: request the limitation of processing
• Portability: receive your data in a structured format
• Objection: object to processing for marketing purposes

To exercise your rights:
✉️ contact@shopsadje.com — 📞 +33 (0)7 66 38 41 58

You can also lodge a complaint with the CNIL (French data protection authority): www.cnil.fr

10. SECURITY

We implement all appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction (SSL encryption, restricted access, secure Shopify hosting).

11. POLICY UPDATES

This policy may be updated to remain compliant with legal changes and site practices. The date of the last update is always indicated at the top of the page. In the event of a substantial modification, customers will be informed by email.