Preamble

naulleau operates this website and online boutique, including all associated content, features, tools, products, and services (together, the “Services”), with the sole purpose of offering you a refined and considered shopping experience.

The Services are supported by Shopify, our trusted technology partner, enabling us to deliver them seamlessly to you. This Privacy Policy sets out how we collect, use, and safeguard your personal information when you browse, interact with, or make a purchase through the Services, or otherwise engage with us. In the event of any inconsistency between our Terms of Service and this Privacy Policy, the terms of this Privacy Policy shall prevail with respect to the handling of your personal information.

We invite you to read this Privacy Policy with care. By choosing to access or use our Services, you acknowledge that you have reviewed and understood how your information is collected, used, and disclosed in accordance with this Policy.

1/ About the personal information we collect & process

When you make a purchase in our boutique, as part of the purchasing process, we collect the personal information you provide - such as your name, shipping address, and email.

Additionally, as you browse our boutique, we automatically receive your device’s IP address, which allows us to discern details about your browser and operating system.

With your permission, we may also send you marketing emails regarding our boutique, new arrivals, and other updates.

2/ About your consent

How do you obtain my consent?
When you provide us with personal information to complete a purchase - whether to process payment, deliver an order, or handle a return - we assume your consent to collect and use this information solely for that purpose. Should we wish to use your information for additional purposes (for example, marketing), we will explicitly ask your consent or offer the option to decline.

How can I withdraw my consent?
If you change your mind after granting consent, and no longer wish us to contact you or use or disclose your information, simply contact us by email at contact@naulleau.co or by post at : 21 rue au Maire, 75003 PARIS.

Remember that you may always have a right to request that we delete personal information we maintain about you, or the right to request that we correct inaccurate personal information we maintain about you. If you reside in the UK or European Economic Area, regarding the local law, you may exercise the right to ask us to stop or restrict our processing of personal information for certain purposes.

3/ Disclosure

We may disclose your personal information if required by law or in the event of a violation of our Terms of Sale and Use.

4/ Shopify

Our boutique is hosted on Shopify Inc., which provides us with the e-commerce platform enabling our Services and delivery. Your data is securely stored within Shopify's protected databases, safeguarded by robust firewalls.

Payments:
If you complete your purchase via a direct payment gateway, Shopify processes and stores your credit card information in compliance with the PCI-DSS (Payment Card Industry Data Security Standard). Transaction details are retained only as long as necessary to finalize your order. Once the order is complete, they are purged. All direct payment gateways strictly adhere to PCI-DSS, overseen by industry leaders such as Visa, MasterCard, American Express, and Discover.

5/ Third-party Services

Generally, our third-party service providers will collect, use, and disclose only the information necessary to provide their services to us. However, certain services - such as payment processors - maintain their own privacy policies regarding how they handle your data. We encourage you to review these before proceeding with any transaction involving third parties. Keep in mind that these providers may operate in jurisdictions with privacy laws that differ from yours or ours.

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

6/ Security

To preserve the integrity of your personal data, we implement industry-leading practices and reasonable safeguards against unauthorized access, alteration, or destruction. Should you provide your credit card details, they are encrypted using SSL and stored with AES-256 encryption. While no method of transmission over the internet or electronic storage is entirely infallible, we comply rigorously with PCI-DSS and employ additional security measures acknowledged across the industry for data protection.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security".

Cookies:

Below is an overview of the cookies we use and/or could use. You may choose whether to allow them:

> _session_id — Unique session identifier used by Shopify to keep track of session data (referrer, landing page, etc.).

> _shopify_visit — No personal data; persists for 30 minutes since the last visit; used internally for visit statistics.

> _shopify_uniq — No personal data; expires at midnight (visitor's local time) next day; tracks unique visits.

> cart — Unique identifier; persists for 2 weeks; retains cart information.

> _secure_session_id — Unique session identifier.

> storefront_digest — Unique identifier; relevant when the shop is password-protected; determines visitor access.

7/ Age of consent

By using this site, you affirm that you are of the age of majority in your province or state of residence, and that you have provided permission for any minor under your responsibility to use this website.

8/ Changes to this Privacy Policy Statement

We reserve the right to update this Privacy Policy at any time; please revisit it periodically. Changes take effect immediately upon posting. Should material updates occur, we will notify you here so that you are aware of what information we collect, how we use it, and under what circumstances it may be disclosed, if applicable.

Questions and contact

If you would like to access, correct, modify, or delete personal information we hold about you, raise a complaint or simply request more details. Please contact us directly at contact@naulleau.co or by post at 21 rue au Maire, 75003 PARIS.