Privacy Policy

Privacy Policy

Version compliant with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

Lirnova
Publisher: Marine Philippo
Status: Sole proprietor — micro-business regime
SIREN: 810 180 885
SIRET: 810 180 885 00024
Registered office: 30 boulevard de Sébastopol, 75004 Paris, France
Contact email address: contact.lirnova@gmail.com

Marine Philippo, operating under the Lirnova brand, is responsible for the processing of personal data carried out from the lirnova.com website.

2. Data Collected

Depending on the context, Lirnova may process the following categories of data:

  • Identity and contact details: name, first name, postal address, email address, phone number when provided.
  • Order data: products, size, design, quantity, amount, history.
  • Payment data: processed directly by payment service providers; Lirnova does not store full banking data.
  • Customer account data when the Customer creates one.
  • Customer service data: content of exchanged messages.
  • Browsing data: IP address, device and browser type, pages viewed, under the conditions described in the Cookie Policy.

3. Purposes and Legal Bases

  • Contract performance (Article 6.1.b GDPR): order management, preparation, delivery, after-sales service, exercise of withdrawal rights and guarantees.
  • Legal obligations (Article 6.1.c): retention of accounting and tax documents, compliance with consumer obligations.
  • Consent (Article 6.1.a): sending optional commercial emails, depositing non-essential trackers.
  • Legitimate interest (Article 6.1.f): site security, fraud prevention, service improvement.

4. Recipients

The data is intended for Lirnova and its subcontractors acting on instruction, including:

  • Shopify International Limited — e-commerce platform and website hosting;
  • the payment service providers enabling secure transaction processing;
  • the carrier responsible for delivery;
  • the audience measurement and marketing tools when actually installed; the Cookie Policy precisely details the active trackers.

No data is sold to third parties.

5. Transfers outside the European Economic Area

Some subcontractors may, within the framework of their infrastructure, carry out transfers outside the European Union. In such cases, these transfers are governed by appropriate safeguards provided for by the GDPR, notably the European Commission's Standard Contractual Clauses.

6. Retention Periods

  • Order data: duration necessary for the performance of the contract and the commercial relationship, then intermediate archiving for the legal retention period of accounting documents (10 years).
  • Customer account data: until the account is deleted by the Customer or in the absence of activity for 3 years.
  • Commercial prospecting: 3 years from the Customer's last contact.
  • Cookies and trackers: durations specified in the Cookie Policy.

7. Security

Lirnova implements appropriate technical and organizational measures to protect personal data against any loss, alteration, disclosure or unauthorized access, including via HTTPS encryption, the selection of recognized service providers, and restricted access to data.

8. Your Rights

In accordance with the GDPR, you have, in particular, the following rights:

  • right of access to your data;
  • right to rectification of inaccurate data;
  • right to erasure ("right to be forgotten") under certain conditions;
  • right to restriction of processing;
  • right to object to processing based on legitimate interest or to commercial prospecting;
  • right to data portability of data you have provided to us;
  • right to withdraw your consent at any time when processing depends on it;
  • right to lodge a complaint with the CNIL (French National Commission for Data Protection — 3 place de Fontenoy, 75007 Paris — www.cnil.fr).

You can exercise these rights by contacting Lirnova via the Contact page or at the email address indicated in the Legal Notice. Proof of identity may be requested in case of reasonable doubt about the applicant's identity.

9. Modification of this policy

This policy may be modified to reflect regulatory, technical, or commercial developments. The applicable version is the one displayed on the website on the day of consultation.