In force as of 4 October 2026. This English translation is provided for convenience only; in the event of any discrepancy, the French version prevails.
COCONID attaches great importance to protecting your personal data. This policy explains what data we collect, why, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
1. Data controller
The data controller is COCONID, which can be reached via the contact form on the “Our story” page or by email at petitot.timothee@live.fr.
2. Data collected
- Orders: surname, first name, delivery and billing addresses, email, phone number where applicable, products ordered, amount.
- Payment: bank details are processed directly by Shopify's payment providers; we do not have access to them.
- Contact: name, email and the content of your message when you use the contact form.
- Newsletter: your email address if you sign up.
- Browsing: technical data (IP address, device type, pages viewed) collected by cookies, according to your choices.
3. Purposes and legal bases
- Processing, shipping and tracking your order, handling returns, exchanges and complaints: performance of the contract.
- Replying to your messages: legitimate interest in replying to you, or pre-contractual measures.
- Sending you the newsletter: your consent, which you can withdraw at any time using the unsubscribe link in every email.
- Complying with our accounting and tax obligations: legal obligation.
- Measuring audience and improving the website: your consent to the cookies concerned.
- Preventing fraud and securing payments: legitimate interest.
4. Recipients
Your data is accessible only to authorised COCONID staff and to the service providers who help us fulfil your order:
- Shopify, which hosts the shop and processes payments;
- our supplier and our order management tool, which prepare and ship your parcel: they receive your name, delivery address and phone number where applicable;
- the carriers responsible for delivery.
We never sell or rent your data.
5. Transfers outside the European Union
Some service providers, in particular Shopify and our supplier, which ships orders from abroad, may process your data outside the European Union. These transfers are covered by appropriate safeguards provided for by the GDPR, such as the European Commission's standard contractual clauses, and are limited to the data needed for delivery.
6. Retention periods
- Order data: for the duration of the business relationship, then 10 years for accounting records.
- Contact form messages: 3 years from the last exchange.
- Newsletter: until you unsubscribe, or 3 years without any interaction from you.
- Cookies: 13 months maximum; your consent choices are kept for 6 months.
7. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to set instructions for what happens to your data after your death. To exercise these rights, write to us via the contact form or at petitot.timothee@live.fr; we will reply within one month. If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
8. Cookies
The website uses cookies that are necessary for it to work (cart, payment, security), which do not require your consent. Audience measurement or advertising cookies are only placed with your agreement, collected through the banner shown on your first visit. You can change your choices at any time from this banner or in your browser settings.
9. Security
The website is served over HTTPS and payments are encrypted. We limit access to your data to the people who need it.
10. Changes
This policy may change. The version in force is always the one published on this page, with its update date.