Last updated: 5 October 2026
Who is responsible for your data?
Raphael Meslem, sole trader trading as Popelote, 129 chemin de Roumagoua, 13600 La Ciotat, France. Contact: contact@popelote.com.
What data, why, and on what basis?
| Data | Use | Legal basis | Retention |
|---|---|---|---|
| Name, addresses, email, phone, order contents | Processing, shipping and tracking your order, customer service | Performance of the contract | Length of the business relationship, then 3 years |
| Invoices and accounting data | Accounting and tax obligations | Legal obligation | 10 years |
| Email (newsletter) | Telling you when a new kit arrives | Your consent | Until you unsubscribe, or 3 years without opening |
| Browsing data (cookies, pages viewed) | Running the site, cart, audience measurement and advertising | Legitimate interest (necessary cookies); consent (others) | 13 months maximum |
| Messages sent to customer service | Answering your requests | Legitimate interest | 3 years after the last exchange |
We never see your bank details: payment is processed by Shopify Payments and its partners.
Who receives your data?
Only the service providers needed, each for its own task:
- Shopify: website hosting, order management and payment;
- our manufacturer, who prepares and ships your kit: it only receives your name, delivery address and, if needed, your phone number for the carrier;
- the carriers in charge of delivery;
- only with your consent: our audience measurement and advertising tools (for example Meta for Facebook and Instagram).
We do not sell your data.
Transfers outside the European Union
As your kit is shipped from China, your name and delivery address are passed on to our manufacturer, based in China, to fulfil your order. Some providers, including Shopify, may also process data outside the European Union (notably in Canada and the United States). These transfers are limited to what is necessary and covered by a European Commission adequacy decision or by standard contractual clauses.
Cookies
Cookies needed to run the site (cart, language, security) are set without consent. Others (audience measurement, advertising) are only set with your consent, collected through the banner shown on your first visit. You can change your choice at any time from this banner.
Your rights
You can ask to access, correct, delete or port your data, restrict its processing, or object to its use. You can withdraw your consent at any time, for example by unsubscribing from the newsletter in one click.
Write to contact@popelote.com; we reply within one month. If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr) or your local data protection authority.