Privacy policy
Last updated: 3 November 2026
This policy explains what personal data we collect when you visit our shop or place an order, why we use it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
Snc HAIRI (sole proprietorship / EI), trading as HAIRI HAIRI BIJOUX
25 Bd des Dames, 13002 Marseille, France
Email: hairihairibijoux [at] gmail.com
2. Data we collect
- Orders: first and last name, delivery and billing addresses, email address, phone number (if you give it), items ordered, order history. Your card details are processed directly by the payment provider: we never have access to them.
- Contact and return forms: name, email address, order number, pieces concerned, the tracking number of your return and the content of your message.
- Newsletter: your email address, if you sign up.
- Customer account: your account information, if you create one.
- Browsing: technical data (IP address, device and browser type, pages viewed) collected through cookies, see section 8.
3. Why we use it
- Processing your order, payment, delivery, returns and customer service: performance of the contract.
- Answering your messages and return requests: performance of the contract or pre-contractual steps.
- Meeting our accounting and tax obligations: legal obligation.
- Preventing fraud and keeping the website secure: legitimate interest.
- Sending you our newsletter: consent, which you can withdraw at any time with the unsubscribe link in every email.
- Measuring audience and, where applicable, personalising advertising with non-essential cookies: consent.
4. Recipients
Your data is intended for HAIRI HAIRI BIJOUX. We only share it with the service providers we need to run our shop:
- Shopify (shop hosting, order and payment management);
- the payment providers for the payment method you choose;
- La Poste, which receives the information needed for delivery;
- Google, which provides our email service;
- public authorities, only when required by law.
We never sell your personal data.
5. Transfers outside the European Union
Some of our service providers (in particular Shopify and Google) may process data in Canada or the United States. These transfers are covered by an adequacy decision of the European Commission (Canada, EU–US Data Privacy Framework) or by standard contractual clauses.
6. How long we keep it
- Customer data: for the duration of our relationship, then 3 years after your last purchase.
- Invoices and accounting documents: 10 years (legal obligation).
- Messages and return requests: while we handle your request, then 3 years.
- Newsletter: until you unsubscribe, or 3 years without any interaction from you.
- Cookies: 13 months at most; your cookie choice is kept for 6 months.
7. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing (including for marketing) and to data portability. You can withdraw your consent at any time and set instructions for what happens to your data after your death.
To exercise your rights, write to us through our contact form or by email at the address given in section 1. We reply within one month. If we have reasonable doubts about your identity, we may ask you for proof.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
8. Cookies
A cookie is a small file stored on your device when you visit a website.
- Strictly necessary cookies: they make the shop work (cart, checkout, security, language, remembering your cookie choice). They do not require your consent.
- Analytics, preference and advertising cookies: they are only set with your consent, given through the cookie banner shown on your first visit. You can accept or refuse them just as easily.
You can change your mind at any time with the cookie preferences link at the bottom of every page. You can also delete cookies in your browser settings. The list of cookies used by Shopify is available at https://www.shopify.com/legal/cookies.
9. Security
The shop is hosted by Shopify, which uses an encrypted connection (HTTPS) and complies with the PCI-DSS payment security standard.
10. Changes
We may update this policy. The date of the last update is shown at the top of the page.