Privacy Policy

PRIVACY POLICY

LUMICORNE — lumicorne.com

Version effective April 21, 2026

This privacy policy describes how Lumicorne (PARANT Grégoire, hereinafter "Lumicorne") collects, uses, protects, and shares the personal data of users of the lumicorne.com website, in accordance with the General Data Protection Regulation (GDPR No. 2016/679) and the amended Data Protection Act.

1. Data Controller

The data controller for data collected via the lumicorne.com website is:

PARANT Grégoire — Individual Entrepreneur
SIRET: 912 930 898 00024
35 avenue du Val d'Erdre, 44300 Nantes, France
Email: contact@lumicorne.com
Phone: 07 83 49 94 68 (Mon–Fri, 9am–6pm)

2. Data Collected

In connection with the use of the site and the processing of orders, Lumicorne collects the following data:

Identity: last name, first name
Contact details: email address, phone number, shipping and billing postal address
Order data: purchase history, products ordered, amounts, customer service exchanges
Payment data: processed directly and exclusively by Shopify Payments and Klarna — Lumicorne does not have access to full banking details
Browsing data: IP address, browser type, pages visited, visit duration (via analytical cookies, with prior consent)
Marketing data: preferences, email opens and clicks (via marketing automation tools, with consent)

3. Purposes and Legal Basis of Processing

The collected data is processed for the following purposes:

Performance of the sales contract: order processing, manufacturing, delivery, invoicing — legal basis: contract performance (Art. 6.1.b GDPR)
After-sales service: management of returns, complaints, warranties — legal basis: contract performance
Legal obligations: retention of invoices and accounting data — legal basis: legal obligation (Art. 6.1.c GDPR)
Commercial communications and newsletter: only with explicit and prior customer consent — legal basis: consent (Art. 6.1.a GDPR)
Website improvement and audience analysis: traffic measurement via analytical cookies — legal basis: consent
Advertising targeting: display of personalized advertisements via advertising cookies — legal basis: consent
Legitimate interest: fraud prevention, website security, improvement of user experience — legal basis: legitimate interest (Art. 6.1.f GDPR)

4. Data Retention Period

Order and billing data: 10 years from the end of the accounting year (legal obligation Art. L.123-22 C. com.)
Customer data (account, history): 5 years from the last order or active contact
Commercial prospecting data: 3 years from the last contact from the prospect
Browsing data (cookies): maximum 13 months
Marketing data (opens, clicks): 3 years from the last contact

5. Recipients of Data

Personal data may be transmitted to the following recipients, strictly within the scope of their mission:

Shopify International Limited (site hosting, order processing, payment processing via Shopify Payments) — based in Ireland. Any transfers outside the EU (notably Canada, United States) are governed by standard contractual clauses adopted by the European Commission
Klarna Bank AB (split payment) — Sweden, subject to its own privacy policy
Carriers and logistics providers (DHL, Colissimo, Chronopost, UPS, etc.) — for order delivery
Partner manufacturers in Asia — for the production of customized products (data limited to strictly necessary: validated design, dimensions, delivery address)
Yotpo Ltd. — emailing and review collection tool, with prior consent for marketing communications
Google LLC (Google Analytics, Google Ads) — with prior consent, governed by EU standard contractual clauses
Meta Platforms Ireland (Meta Pixel, Facebook, Instagram Ads) — with prior consent
Partner Shopify applications necessary for site operation (Translate & Adapt, product customization tools)

Lumicorne does not sell, rent, or transfer any personal data to third parties for commercial purposes not provided for herein.

6. Your Rights

In accordance with the GDPR and the amended Data Protection Act, you have the following rights regarding your personal data:

Right of access: obtain a copy of your data
Right to rectification: correct inaccurate or incomplete data
Right to erasure: request the deletion of your data, subject to legal retention obligations
Right to restriction of processing: restrict processing in certain cases
Right to data portability: receive your data in a structured, commonly used, and machine-readable format
Right to object: object to processing for reasons related to your particular situation, or to processing for direct marketing purposes
Right to withdraw consent: at any time for processing based on consent (commercial communications, cookies)
Right to define guidelines regarding the fate of your data after your death

To exercise these rights, send your request by email to contact@lumicorne.com, accompanied by proof of identity when necessary to verify your identity. Lumicorne undertakes to respond within a maximum of 30 days.

In case of an unsatisfactory response, you may file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr.

7. Cookies

The lumicorne.com website uses cookies. A cookie is a small text file placed on your device when you visit a site.

7.1 Types of cookies used

Strictly necessary cookies: essential for the functioning of the site (cart, session, security, language preferences) — do not require consent
Analytical cookies (Google Analytics): audience measurement and analysis of visitor behavior — subject to your prior consent
Advertising cookies (Meta Pixel, Google Ads): advertising targeting and campaign effectiveness measurement — subject to your prior consent
Personalization cookies: adaptation of content to your preferences — subject to your prior consent

7.2 Consent Management

You can accept or refuse non-essential cookies via the consent banner displayed during your first visit. You can change your choices at any time by clicking on the "Manage cookies" button at the bottom of the page, or by modifying your browser settings.

Disabling strictly necessary cookies may affect the proper functioning of the site.

8. Data Security

Lumicorne implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure:

Secure connection via HTTPS protocol (SSL certificate)
Restricted access to personal data, limited to authorized personnel
Secure hosting via Shopify, PCI-DSS Level 1 certified platform
Strong authentication for access to administration areas
Regular data backups

Payment data is processed directly by our PCI-DSS Level 1 certified payment partners (Shopify Payments, Klarna), the highest security standard for payment data processing.

9. Data Transfers Outside the EU

Some of our service providers and partners may process your data outside the European Union (notably in Canada, the United States, or Asia for manufacturing partners). These transfers are governed by appropriate safeguards provided for by the GDPR:

Standard contractual clauses adopted by the European Commission
Adequacy decisions of the European Commission, where applicable
Other appropriate safeguards provided for in Article 46 of the GDPR

10. Policy Modifications

Lumicorne reserves the right to modify this privacy policy at any time to adapt it to legal, technical, or commercial developments. In the event of a substantial modification, users will be informed by email or via a visible notice on the site.

The current version is the one displayed on the site on the date of consultation, with mention of the update date.

11. Contact and Complaints

For any questions regarding this policy or to exercise your rights:

Email: contact@lumicorne.com
Mail: PARANT Grégoire — Lumicorne, 35 avenue du Val d'Erdre, 44300 Nantes

If you believe that the processing of your data does not comply with applicable regulations, you have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

Website: www.cnil.fr
Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Phone: 01 53 73 22 22

LUMICORNE — contact@lumicorne.com — 35 avenue du Val d'Erdre, 44300 Nantes — SIRET 912 930 898 00024