1. About ORMAIN
ORMAIN attaches great importance to protecting your privacy, the confidentiality of your personal data, and its processing in compliance with current standards. This policy aims to inform you about how we collect, use, and protect your personal data in accordance with the GDPR and the French Data Protection Act.
2. Data Controller
The data controller is:
Mr. Romain GEA, co-manager, limited liability company (SARL) registered with the Toulouse Trade and Companies Register under number 989 855 069 000 13, 14 Rue Saint-Antoine du T, 31000 Toulouse, France.
3. Data Collected
We may collect all or part of the following data: first name, last name, email, phone number, date of birth, identity document, addresses, IP address, browsing data, order history, banking data.
4. Purposes and Legal Bases
| Purpose | Legal Basis |
|---|---|
| Order management and delivery | Performance of a contract (Art. 6.1.b GDPR) |
| User account management | Performance of a contract |
| Sending newsletters | Consent (Art. 6.1.a GDPR) |
| Fraud prevention | Legitimate interest (Art. 6.1.f GDPR) |
| Tax and accounting obligations | Legal obligation (Art. 6.1.c GDPR) |
5. Data Recipients
Your data may be transmitted to our technical service providers: Shopify (host), Alma/PayPal (payment), carriers (Chronopost), email services.
6. Transfers Outside the EU
Some data may be processed outside the European Union, particularly by Shopify Inc. based in Canada. Canada benefits from an adequacy decision by the European Commission, guaranteeing an adequate level of protection.
7. Retention Period
Data is retained for the duration necessary for the commercial relationship, then archived for 5 years for legal purposes. Invoicing data is retained for 10 years.
8. Your Rights
You have the following rights: access, rectification, erasure, objection, restriction, data portability.
To exercise your rights: contact@ormain.com
Complaints can be made to the CNIL: www.cnil.fr
9. Cookies
Cookies may be used to improve your experience, analyze traffic, and facilitate ordering. You can refuse or configure them via the consent banner displayed during your first visit.
10. Security
Your data is stored on secure servers and protected by adequate technical and organizational measures.