🔒 PRIVACY POLICY

Last updated: April 2026

The SADJÉ store, operated by the sole proprietorship Les Fans de Winona, is committed to protecting your personal data. This policy explains how we collect, use and protect your information, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679).

1. DATA CONTROLLER

Les Fans de Winona — Sole proprietorship
Registered office: 60 Rue François 1er, 75008 Paris, France
Controller: Mr Hugues NOUVELLET
✉️ contact@shopsadje.com

2. DATA COLLECTED

We collect only the information necessary for order management and service improvement:

• Contact information: name, surname, email address, phone number
• Order information: delivery address, items ordered, payment methods
• Browsing information: cookies, IP address, pages visited, site interactions
• Delivery-related information: carrier, tracking number

3. PURPOSES OF PROCESSING

Your data is used to:

• Process your orders and deliveries
• Provide customer service and manage returns
• Improve our products and services
• Send marketing communications if you have consented
• Comply with legal and tax obligations
• Prevent fraud and ensure transaction security

4. LEGAL BASIS FOR PROCESSING

• Contract performance: order processing, delivery, customer service
• Consent: newsletter, promotional offers, marketing cookies
• Legal obligation: retention of accounting and tax data
• Legitimate interest: service improvement, fraud prevention, security

5. SHARING DATA WITH THIRD PARTIES

We share your data only with providers necessary for service delivery. Your data is never sold to third parties.

Provider	Role	Country	GDPR Safeguards
Shopify Inc.	Hosting and e-commerce platform	Canada / USA	Adequacy decision (Canada) — Standard Contractual Clauses (USA)
CJ Dropshipping	Logistics, fulfilment and order shipping	China	Standard Contractual Clauses (SCCs) — Transfer governed by data processing agreement
Partner carriers	Parcel delivery	International	Data limited to necessary (name, address, phone)
Payment providers	Secure transaction processing	Various	PCI-DSS compliance — Standard Contractual Clauses
Google LLC (Google Merchant Center, Google Analytics)	Traffic analysis, Shopping campaigns	USA	Standard Contractual Clauses — Google Ads Data Processing Terms

6. TRANSFERS OUTSIDE THE EUROPEAN UNION AND LOCAL REGULATIONS

Some of our providers are established outside the European Union (Shopify – USA, CJ Dropshipping – China, Google – USA). These transfers are governed by appropriate safeguards in accordance with Articles 46 et seq. of the GDPR, in particular Standard Contractual Clauses approved by the European Commission.

For customers located outside the European Union, local data protection regulations may also apply, in particular:

• Brazil: Lei Geral de Proteção de Dados (LGPD – Law No. 13.709/2018). Brazilian customers benefit from the rights provided by the LGPD, including the right of access, correction, erasure and portability of their data. The competent supervisory authority is the ANPD (Autoridade Nacional de Proteção de Dados).
• Middle East, Asia, Africa: other local regulations may apply depending on the customer's country of residence.

We are committed to processing your data with the same level of protection, regardless of your country of residence.

7. COOKIES AND TRACKING

The site uses the following types of cookies:

• Essential cookies: necessary for site operation (cart, session, security)
• Analytical cookies: Google Analytics — audience measurement and browsing behaviour
• Marketing cookies: Google Merchant Center — Shopping campaign tracking

You can refuse or manage cookies via your browser or our cookie preference management tool available on the site.

8. RETENTION PERIODS

• Order-related data: 10 years (legal and tax obligations)
• Marketing data: until consent is withdrawn
• Anonymised browsing data: maximum 24 months
• Logistics tracking data: 3 years after delivery

9. YOUR RIGHTS

Under the GDPR, you have the following rights:

• Access: obtain a copy of your data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Restriction: request restriction of processing
• Portability: receive your data in a structured format
• Objection: object to processing for marketing purposes

To exercise your rights: ✉️ contact@shopsadje.com

You may also lodge a complaint with the CNIL (French data protection authority): www.cnil.fr

10. SECURITY

We implement all appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration or destruction (SSL encryption, restricted access, secure Shopify hosting).

11. POLICY UPDATES

This policy may be updated to remain compliant with legal developments and site practices. The date of last update is always indicated at the top of the page. In the event of a material change, customers will be notified by email.