1. Who is the data controller?
IGR (SAS au capital de 776 860 €), trading as Les Clémences workshop Espace Neodev, 1 Rue Sainte Elisabeth, 71300 Montceau-les-Mines, France SIREN: 379 285 349 · RCS Chalon-sur-Saône Contact: contact@icones-chretiennes.fr
2. What data we collect
When you buy from us or sign up to our newsletter, we collect:
- Identity: name, email, postal address, phone number (if provided).
- Order data: items ordered, amount, payment method, date.
- Technical data: IP address, browser, device, pages visited (via cookies, see §6).
3. Why we collect it (legal basis)
| Purpose | Legal basis |
|---|---|
| Process and ship your order | Contract (Art. 6.1.b GDPR) |
| Customer support | Contract (Art. 6.1.b GDPR) |
| Send marketing emails after a purchase or signup | Consent (Art. 6.1.a GDPR) or legitimate interest (existing customers, Art. 6.1.f GDPR) |
| Comply with accounting and tax law | Legal obligation (Art. 6.1.c GDPR) |
| Improve the site (analytics, ads) | Consent (cookies banner) |
4. Who we share data with
- Shopify (hosting, checkout, fulfilment), Canada / United States (Standard Contractual Clauses).
- Payment providers (Shopify Payments, Stripe, PayPal as applicable), for the strict purpose of payment.
- Carriers (DHL, UPS, La Poste / Colissimo), name, address, phone for delivery.
- Klaviyo (email marketing), United States (SCCs).
- Google, Meta, TikTok, Pinterest, anonymised event data through their tags, only if you accept the corresponding cookies.
We never sell your personal data.
5. How long we keep it
- Order data: 10 years (accounting obligation in France).
- Marketing data: 3 years from your last interaction.
- Cookies and analytics: 13 months maximum.
6. Cookies
We use:
- Strictly necessary cookies (cart, login, security), no consent needed.
- Analytics / advertising cookies (Google Analytics 4, Meta Pixel, TikTok Pixel, Pinterest Tag), only after you accept them in the banner.
You can change your cookie preferences at any time via the "Cookie settings" link at the bottom of every page.
7. Your rights (GDPR + CCPA equivalents)
You can ask us at any time, by writing to contact@icones-chretiennes.fr, to:
- Access the data we hold on you.
- Correct it.
- Delete it (right to be forgotten).
- Receive it in a portable format.
- Object to direct marketing.
- Withdraw your consent for cookies / marketing.
We answer within 1 month. If you are not satisfied, you can lodge a complaint with the CNIL (French data protection authority) at cnil.fr.
For California residents (CCPA): you have the same set of rights, access, deletion, opt-out of "sale" of personal information. We do not sell personal information.
8. Children
Our site is not intended for children under 16. We do not knowingly collect data from children.
9. Changes to this policy
We will indicate the date of the last update at the top of this page. Significant changes will be notified by email to subscribers.