PRIVACY POLICY

PRIVACY POLICY

Last updated: May 2026

1. Introduction

Fylvena is committed to protecting the privacy of your personal data. This privacy policy informs you of how we collect, use, and protect your data, in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller for data collected on the fylvena.com website is Fylvena.

Contact: support@fylvena.com

3. Data Collected

We collect the following data:

When placing an order:

  • First and last name
  • Shipping and billing address
  • Email address
  • Phone number
  • Payment information (processed securely by Shopify Payments)

When subscribing to our newsletter:

  • Email address

When browsing:

  • IP address
  • Browser type
  • Pages visited
  • Duration of visit
  • Website behavior data

4. Purposes of Processing

Your data is collected for the following purposes:

  • Processing and tracking your orders
  • Customer relationship management
  • Sending our newsletter and marketing communications (with your consent)
  • Improving our website and services
  • Analyzing visitor behavior
  • Personalizing advertising

5. Third-Party Tools Used

We use the following tools, which may collect data about you:

Shopify Our site is hosted on the Shopify platform. Shopify processes your data for order and site management. Shopify Privacy Policy: shopify.com/legal/privacy

Facebook Pixel We use the Facebook Pixel to measure the effectiveness of our ads and to provide you with personalized ads on Facebook and Instagram. Meta may collect certain browsing data from you. Meta Privacy Policy: facebook.com/privacy/policy

Google Analytics We use Google Analytics to analyze our site traffic and understand our visitors' behavior. The data collected is anonymized. Google Privacy Policy: policies.google.com/privacy

Klaviyo We use Klaviyo to manage our newsletter and email communications. Klaviyo may collect data related to the opening of our emails and your interactions with them. Klaviyo Privacy Policy: klaviyo.com/legal/privacy-notice

6. Legal Basis for Processing

We process your data on the following legal bases:

  • Contract performance: processing your orders
  • Consent: newsletter, cookies, and personalized ads
  • Legitimate interest: improving our services and site security

7. Cookies

Our site uses cookies to enhance your browsing experience and measure our audience.

The cookies used are as follows:

  • Essential cookies: necessary for the proper functioning of the site and order processing
  • Analytical cookies: Google Analytics, to measure site audience
  • Advertising cookies: Facebook Pixel, to measure the effectiveness of our ads

You can manage your cookie preferences at any time via the cookie banner displayed during your first visit to our site, or by changing your browser settings.

8. Retention Period

Your data is retained for the following periods:

  • Order data: 10 years (legal obligation)
  • Newsletter data: until you unsubscribe
  • Browsing data: maximum 13 months (Google Analytics)
  • Advertising data: maximum 180 days (Facebook Pixel)

9. Your Rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate data
  • Right to erasure: request deletion of your data
  • Right to restriction of processing: limit the processing of your data
  • Right to data portability: receive your data in a readable format
  • Right to object: object to the processing of your data for marketing purposes
  • Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out before the withdrawal

To exercise your rights, contact us at: support@fylvena.com

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): cnil.fr

10. Data Security

We implement all necessary technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. Payments are processed securely by Shopify Payments, which is PCI DSS certified.

11. Data Transfer Outside the European Union

Some of our third-party tools (Shopify, Facebook, Google, Klaviyo) may transfer your data outside the European Union, particularly to the United States. These transfers are governed by appropriate safeguards in accordance with the GDPR, including standard contractual clauses approved by the European Commission.

12. Changes to the Privacy Policy

We reserve the right to modify this privacy policy at any time. Any changes will be published on this page with the update date. We encourage you to review this page regularly.

13. Contact

For any questions regarding this privacy policy or the exercise of your rights, please contact us at:

📧 support@fylvena.com