🔒 PRIVACY POLICY

Last updated: April 2026

The SADJÉ store, operated by the sole proprietorship Les Fans de Winona, places great importance on the protection of your personal data. This policy explains how we collect, use, and protect your information, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679).

1. DATA CONTROLLER

Les Fans de Winona — Sole proprietorship
Registered office: 60 Rue François 1er, 75008 Paris, France
Manager: Mr. Hugues NOUVELLET
✉️ contact@shopsadje.com — 📞 +33 (0)7 66 38 41 58

2. DATA COLLECTED

We only collect information necessary for managing your order and improving our services:

• Contact information: last name, first name, email address, phone number
• Order information: delivery address, items ordered, payment methods
• Browsing information: cookies, IP address, pages visited, site interactions
• Delivery-related information: carrier, tracking number

3. PURPOSES OF PROCESSING

Your data is used to:

• Process your orders and deliveries
• Provide customer service and manage returns
• Improve our products and services
• Send marketing communications if you have consented
• Comply with legal and tax obligations
• Prevent fraud and ensure transaction security

4. LEGAL BASIS FOR PROCESSING

• Contract performance: order processing, delivery, customer service
• Consent: newsletter, promotional offers, marketing cookies
• Legal obligation: retention of accounting and tax data
• Legitimate interest: service improvement, fraud prevention, security

5. DATA SHARING WITH THIRD PARTIES

We only share your data with service providers necessary for the performance of the service. Your data is never sold to third parties.

Provider	Role	Country	GDPR Guarantees
Shopify Inc.	Hosting and e-commerce platform	Canada / USA	Adequacy Decision (Canada) — Standard Contractual Clauses (USA)
CJ Dropshipping	Logistics, fulfillment, and order shipping	China	Standard Contractual Clauses (SCCs) — Transfer governed by subcontracting agreement
Partner Carriers	Package delivery	International	Data limited to what is necessary (name, address, phone)
Payment Providers	Secure transaction processing	Variable	PCI-DSS compliance — Standard Contractual Clauses
Google LLC (Google Merchant Center, Google Analytics)	Traffic analysis, Shopping campaigns	USA	Standard Contractual Clauses — Google Ads Data Processing Terms

6. TRANSFERS OUTSIDE THE EUROPEAN UNION AND LOCAL REGULATIONS

Some of our providers are located outside the European Union (Shopify – USA, CJ Dropshipping – China, Google – USA). These transfers are governed by appropriate safeguards in accordance with Articles 46 et seq. of the GDPR, particularly by standard contractual clauses approved by the European Commission.

For customers located outside the European Union, local data protection regulations may also apply, including:

• Brazil: Lei Geral de Proteção de Dados (LGPD – Law No. 13.709/2018). Brazilian customers benefit from the rights provided by the LGPD, including the right to access, correct, erase, and portability of their data. The competent supervisory authority is the ANPD (Autoridade Nacional de Proteção de Dados).
• Middle East, Asia, Africa: other local regulations may apply depending on the customer's country of residence.

We commit to processing your data with the same level of protection, regardless of your country of residence.

7. COOKIES AND TRACKING

The site uses the following types of cookies:

• Essential cookies: necessary for the site's operation (cart, session, security)
• Analytical cookies: Google Analytics — audience measurement and browsing behavior
• Marketing cookies: Google Merchant Center — tracking of Shopping campaigns

You can refuse or manage cookies via your browser or our cookie preference management tool available on the site.

8. RETENTION PERIOD

• Order-related data: 10 years (legal and tax obligations)
• Marketing data: until consent withdrawal
• Anonymized browsing data: 24 months maximum
• Logistics tracking data: 3 years after delivery

9. YOUR RIGHTS

In accordance with the GDPR, you have the following rights:

• Access: obtain a copy of your data
• Rectification: correct your inaccurate data
• Erasure: request the deletion of your data
• Restriction: request restriction of processing
• Portability: receive your data in a structured format
• Objection: object to processing for marketing purposes

To exercise your rights:
✉️ contact@shopsadje.com — 📞 +33 (0)7 66 38 41 58

You can also file a complaint with the CNIL: www.cnil.fr

10. SECURITY

We implement all appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction (SSL encryption, restricted access, secure Shopify hosting).

11. POLICY CHANGES

This policy may be updated to remain compliant with legal developments and site practices. The last update date is always indicated at the top of the page. In case of substantial changes, customers will be informed by email.