Privacy policy

Last updated: 13 October 2026

Data controller

BYREN, a French SARL with a share capital of €8,000, Centre CIFA, Lot 3011, 5 rue de Saint-Gobain, 93300 Aubervilliers, France, Bobigny RCS 931 080 378, which operates the ÉLINE L'ATELIER website ("we"). Contact: eline.latelier@gmail.com – +33 9 56 29 89 38.

Our website is intended exclusively for professionals. The data of your contact persons (name, email, phone, etc.) is still personal data, protected by the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data we collect

  • Identity and business contact details: first and last name, email, phone number, delivery and billing addresses.
  • Company information: company name, registration number (SIRET or equivalent), EU VAT number.
  • Account: login details, preferences.
  • Orders: products ordered, amounts, invoices, returns, communications with us.
  • Payment: payments are processed by our payment provider; we do not have access to your full card numbers.
  • Browsing: IP address, device and browser type, pages visited, cookies (see below).

Purposes and legal bases

  • Creating, verifying and managing your business account; processing, delivering and invoicing your orders; customer service and returns – performance of the contract.
  • Verifying your business status and VAT number (VIES); accounting and tax obligations – legal obligation.
  • Sending commercial information about our products (new arrivals, offers) by email, SMS or WhatsApp, related to your business – legitimate interest; you may object at any time, free of charge.
  • Website security and fraud prevention – legitimate interest.
  • Audience measurement and non-essential cookies – consent.

Recipients

Your data is accessed by our authorised staff and shared, only as far as necessary, with our service providers: Shopify (website platform and hosting), payment providers, carriers, invoicing and accounting software, and our chartered accountant. It may be disclosed to authorities when legally required. We do not sell your data.

Shopify also processes certain data to provide and improve its services; for some features, Shopify acts as a separate data controller: see Shopify's privacy policy. You can opt out of the sharing of your data for targeted advertising here.

Transfers outside the European Union

Some providers, including Shopify, may process data outside the European Union (in particular in Canada and the United States). These transfers are covered by European Commission adequacy decisions or standard contractual clauses.

Retention periods

  • Account and customer data: for the duration of the business relationship, then 3 years after the last order or contact.
  • Account applications not approved: 1 year.
  • Invoices and accounting records: 10 years (Article L123-22 of the French Commercial Code).
  • Marketing: 3 years after the last contact.
  • Cookies: 13 months maximum.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to object (including, without giving reasons, to direct marketing) and to data portability, as well as the right to give instructions on what happens to your data after your death. Where processing is based on your consent, you may withdraw it at any time. To exercise your rights: eline.latelier@gmail.com. We reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr – 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France), or with the supervisory authority of your country.

Cookies

Strictly necessary cookies (cart, account login, security, remembering your choices) are set without consent. Audience measurement or marketing cookies are only set with your consent, collected through the cookie banner. You can change your choices at any time via this banner or your browser settings.

Security

We implement appropriate technical and organisational measures to protect your data. The website is hosted on Shopify's secure infrastructure (encrypted HTTPS connection).

Changes

We may update this policy; the date of the last update appears at the top of this page.