Privacy Policy

Article 1 – Data controller

The controller of the personal data collected on the Shoppiva website is CPM Consulting FZ LLC, whose registered office is located at the following address: A1-1210A Building no. A1 Al Hamra Industrial Zone-FZ, Ras Al Khaimah, AE.

We attach great importance to protecting your privacy. We process your data in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Law No. 78-17 of 6 January 1978, known as the “Informatique et Libertés” Act.

For any question about your data, you can contact our dedicated data protection contact by email at contact@shoppiva.com, or by post at the registered office address given above.

Article 2 – Data we collect

We collect the data you provide to us directly, in particular when you place an order or contact us:

• your first and last name;
• your delivery address and, where applicable, your billing address;
• your email address;
• your phone number, if you provide it;
• details of your orders and of your exchanges with our customer service team.

When you browse the website, we also automatically receive certain technical data: IP address, browser and operating system type, time zone, pages viewed, and the source of your visit (for example, the ad you clicked on). This data is collected using cookies (see Article 9) and log files (technical records kept automatically by our server).

Your payment data, such as your card number, is entered directly with our payment provider. We never have access to it and we do not store it.

Article 3 – Why we use your data (purposes and legal bases)

We use your data for the following reasons. For each one, we give its legal basis in brackets, meaning what entitles us to do so under the GDPR:

• to process, ship and track your orders, and to handle returns, refunds and warranty claims (performance of the contract);
• to send you emails relating to your order: confirmation, shipping, tracking (performance of the contract);
• to respond to your requests to customer service (performance of the contract or legitimate interest);
• to prevent fraud and secure the website and payments (legitimate interest);
• to comply with our accounting, tax and legal obligations (legal obligation);
• to measure where our visits come from and how effective our advertisements are (consent, where required);
• where applicable, to send you marketing communications about our products (consent or legitimate interest, depending on the applicable regulations).

Where processing is based on your consent, you can withdraw it at any time, without affecting processing carried out before, which remains lawful.

You can unsubscribe from our marketing communications at any time using the unsubscribe link in every email.

Article 4 – Recipients of the data

Your data is intended for the CPM Consulting FZ LLC teams authorised to process it. It is also shared, strictly to the extent necessary for their tasks, with our service providers:

• our payment provider (Stripe);
• our email delivery provider (Resend);
• our website hosting provider (Vercel) and database hosting provider (Supabase);
• our logistics partners and the carriers responsible for delivery;
• the advertising networks we work with (the platforms that show our ads), in order to measure how effective our ads are.

These providers act on our instructions or have their own privacy policies, which we invite you to read.

We do not sell or rent your personal data. We may disclose it where required by law, at the request of an authorised authority, or to enforce our rights.

If our business is sold or merged, your data may be transferred to the acquirer, who would be required to comply with this policy.

Article 5 – Transfers outside the European Union

Some recipients of your data are located outside the European Union, in particular in the United Arab Emirates and the United States.

These transfers are covered by appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR. These include, for example, the standard contractual clauses adopted by the European Commission (model contracts that require the recipient to protect your data) or, where applicable, an adequacy decision (a decision by the European Commission recognising that a country protects data to an equivalent standard).

You can obtain a copy of these safeguards by writing to us at contact@shoppiva.com.

Article 6 – Retention periods

Your data is kept for a period appropriate to the purposes for which it is processed and in accordance with the regulations in force:

• customer data: for the entire duration of the contractual relationship, then for up to ten (10) years after it ends, in order to comply with our accounting and tax obligations;
• prospect data (people who have contacted us without placing an order): for a maximum of three (3) years from their last contact with us;
• cookie-related data: for a maximum of thirteen (13) months.

At the end of these periods, your data is deleted or anonymised.

Article 7 – Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure, alteration or destruction.

Communications with the website are encrypted. Payments are processed by our provider Stripe, which complies with the PCI-DSS security standard (the international standard for protecting card data).

No method of transmission or storage is completely infallible, so we cannot guarantee absolute security. However, we undertake to inform you of any data breach likely to result in a high risk to your rights, under the conditions laid down by the GDPR.

Article 8 – Your rights

Under the GDPR, you have the following rights over your personal data:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing (having the use of your data temporarily suspended);
• right to data portability (receiving your data in a reusable format, to pass it on to another service);
• right to object, in particular to direct marketing;
• right to withdraw your consent at any time;
• right to set instructions on what happens to your data after your death, in accordance with French Law No. 2016-1321 of 7 October 2016.

To exercise these rights, write to us at contact@shoppiva.com, specifying your request. We may ask you to prove your identity. We will reply within one month, which may be extended under the conditions laid down by the GDPR.

If you believe your rights have not been respected, you can lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL, the French data protection authority), www.cnil.fr, or with the supervisory authority of your country of residence.

Article 9 – Cookies

A cookie is a small text file placed on your device (computer, phone or tablet) when you visit a website. It allows the website to recognise your browser for a limited time and to store certain information, such as the contents of your basket.

The Shoppiva website uses two categories of cookies:

• cookies necessary for the website to work: they manage your basket, your session and the security of your orders;
• visit-source measurement cookies: set by our website itself (known as “first-party” cookies), they record the ad click identifier, that is, a code added to the link of the ad you clicked on to reach us. They tell us which ad led to a visit or an order, and allow us to measure how effective our ads are with the advertising networks we work with (the platforms that show our ads).

You can delete cookies already placed or block them from being placed in your browser settings. These settings are generally found in the following sections:

• Google Chrome: Settings, then Privacy and security;
• Mozilla Firefox: Settings, then Privacy & Security;
• Safari: Settings or Preferences, then Privacy;
• Microsoft Edge: Settings, then Cookies and site permissions.

On phones and tablets, these settings are found in your mobile browser's settings.

Please note: blocking necessary cookies may prevent certain features of the website from working, such as the basket or order confirmation.

Article 10 – Links to other websites

The website may contain links to third-party websites. When you leave our website, this policy no longer applies. We are not responsible for the privacy practices of these websites and invite you to read their own policies.

Article 11 – Age

The website is intended for adults. By using it, you declare that you have reached the age of majority in your country of residence. You are responsible for the use of the website by any minor in your care.

Article 12 – Changes to this policy

We may change this policy to reflect changes to our services or to the regulations. The version in force is the one published on this page. If we make a material change, we will inform you by appropriate means.

Article 13 – Contact

For any question about your data or to exercise your rights:

• Email: contact@shoppiva.com
• Post: CPM Consulting FZ LLC, A1-1210A Building no. A1 Al Hamra Industrial Zone-FZ, Ras Al Khaimah, AE