Privacy policy.

Emna Shop (hereinafter “Emna Shop”, “we” or “our”) attaches particular importance to the protection of your personal data. The purpose of this Privacy Policy is to inform you about how we collect, use, share and protect your personal data, in compliance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act of 6 January 1978 as amended.

This policy applies to all personal data processing carried out in connection with the use of our website www.emnashop.fr and our services.

1. Data controller

2. Data collected

We collect the following personal data:

2.1 — Data you provide directly

• Identification data: first name, last name, email address, phone number
• Delivery data: postal address, postcode, city, country
• Account data: identifier, password (hashed)
• Order data: order history, products purchased, amounts
• Communication data: messages sent through our contact form, exchanged emails

2.2 — Data collected automatically

• Connection data: IP address, browser type and version, operating system
• Browsing data: pages visited, time on site, actions taken on the Site
• Cookie data: session identifiers, display preferences

3. Purposes and legal basis

Your personal data is processed for the following purposes:

4. Data retention

We keep your personal data only for the time necessary for the purposes for which it was collected:

• Active customer data: for the entire duration of the commercial relationship, then 3 years after the last interaction
• Order data: 10 years from the order (accounting and tax obligations)
• Prospect data: 3 years from the last contact
• Cookies: up to 13 months in line with CNIL recommendations
• Connection data: 1 year in accordance with applicable regulations

5. Data sharing

Your personal data may be shared with the following recipients, exclusively for the purposes described above:

• Payment providers: Stripe, for secure processing of card transactions
• Carriers: for shipping and tracking orders
• Hosting provider: for secure storage of Site data
• Analytics providers: for service improvement (anonymised data)

We never sell, rent or transfer your personal data to third parties for commercial purposes without your explicit consent.

In the event of a transfer of data outside the European Union, we ensure that appropriate safeguards are in place (standard contractual clauses, European Commission adequacy decisions).

6. Cookies

Our Site uses cookies to improve your browsing experience. A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit the Site.

6.1 — Types of cookies used

• Strictly necessary cookies: required for the Site to function (session, cart, authentication)
• Performance cookies: allow us to analyse use of the Site and improve its performance
• Functionality cookies: remember your preferences (language, region, etc.)
• Advertising and audience-measurement cookies: set by our marketing partners (notably Snap Inc. via the Snap Pixel) to measure the effectiveness of our Snapchat Ads campaigns, attribute conversions and build custom audiences. These cookies are only set after your explicit consent.

6.2 — Third-party partners setting cookies

• Snap Inc. (Snapchat Pixel) — audience measurement and advertising attribution. Data processed: pages visited, products viewed, add-to-cart, purchases. More information: Snap privacy policy.
• Tawk.to — live chat with customer service. Technical cookies necessary for the messaging widget to function.
• OpenPanel — self-hosted audience analytics, CNIL-compliant (consent-exempt measurement).

6.3 — Managing cookies

On your first visit, a banner allows you to accept or decline non-essential cookies. You can change your preferences at any time via the “Manage cookies” link at the bottom of every page, or directly from your browser settings. Refusing audience-measurement and advertising cookies has no impact on the Site's functionality. In line with CNIL regulations, these cookies are only set after your consent has been obtained.

7. Data security

We implement all appropriate technical and organisational measures to ensure the security and confidentiality of your personal data, including:

• SSL/TLS encryption for all data transmissions
• Secure password hashing
• Restricted access to personal data, limited to authorised personnel
• Regular and secure backups
• Payment processing via Stripe, PCI-DSS certified (we do not store any bank details)

8. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

• Right of access: obtain confirmation that your data is being processed and obtain a copy
• Right of rectification: have inaccurate or incomplete data corrected
• Right to erasure: request deletion of your data in the cases provided for by regulation
• Right to restriction: request restriction of the processing of your data
• Right to portability: receive your data in a structured format and transmit it to another controller
• Right to object: object to the processing of your data, in particular for direct marketing purposes
• Right to withdraw consent: withdraw your consent at any time for processing based on consent
• Right to set post-mortem instructions: set instructions for the storage and communication of your data after your death

To exercise any of these rights, you can contact us at: contact@emnashop.fr. We commit to responding to your request within one month.

In the event of an ongoing disagreement regarding the processing of your data, you have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr

9. Minors

Our Site is not intended for people under 16. We do not knowingly collect personal data from minors. If we discover that a minor's data has been collected, we will delete it as soon as possible.

10. Changes to this policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be published on this page with an updated date. In the event of a substantial change, we will notify you by email or by a visible notice on our Site.

11. Contact

For any question regarding this Privacy Policy or to exercise your rights, you can contact us: