How Small Eden collects and protects your personal data.
Translation provided for information. The French version prevails.
1Data collected
- Order: name, delivery address, email, optional phone number, contents of the order. Legal basis: performance of the contract.
- Monthly newsletter: email address, with your explicit consent, which you can withdraw at any time.
- Audience measurement: only if you accept it in the cookie banner (details below, section "Basket and preferences").
2What we do not do
- We do not sell or rent out your data.
- We do not store any banking details: payment is processed by our payment provider.
3Basket and preferences
Your basket, your session, your language and your cookie choice are stored in your browser. They are necessary for the website and are not used for any advertising.
Without cookies and without anything that identifies you, we also count additions to the basket and arrivals on the checkout page: the product, its quantity, the language of the website and the delivery country chosen. These figures are used only to find out which products are of interest, and are deleted after 25 months.
Audience measurement is only enabled with your consent:
- Google Analytics 4 (Google Ireland Limited): cookies _ga and _ga_*, kept for no more than 13 months, IP address anonymised.
- Shopify (Shopify International Limited, Ireland), which also runs our checkout: cookies _shopify_y (1 year) and _shopify_s (30 minutes), to link your visit to your order.
- PostHog (servers in the European Union): cookie ph_*.
Your choice is kept for 6 months, after which we ask you again. You can change it at any time using the "Cookies" link at the bottom of every page, or the "Change my cookie choices" button below. If you withdraw your consent, the cookies of these tools are deleted.
4Retention periods
Order data: statutory retention period for accounting records (10 years). Newsletter: until you unsubscribe.
5Your rights
Access, rectification, erasure, objection and portability: write to bonjour@small-eden.bio. You may also lodge a complaint with the CNIL (French data protection authority).