Privacy policy

Privacy policy

Last updated: 7 October 2026

This policy explains which personal data we collect when you visit doucepatte.fr or place an order, why we use it, who we share it with and what your rights are. It applies in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

The data controller is Douce Patte, sole proprietorship, SIREN 881 876 007, 46 avenue des Coccinelles, 13012 Marseille, France. For any question about your data: bonjour@doucepatte.fr.

2. Data we collect

  • Order data: first and last name, delivery and billing address, email address, phone number, items ordered, amount and history of your orders.
  • Payment data: payment is processed directly by our secure payment providers (Shopify Payments, PayPal, Apple Pay). We never have access to your full card number.
  • Account and contact data: information you give us when you create an account, write to us, use the chat or leave a review.
  • Newsletter data: your email address if you sign up for our offers and tips.
  • Browsing data: IP address, device and browser type, pages viewed, products added to the cart, where the visit came from. Analytics and advertising data are only collected with your consent (see section 6).

3. Why we use your data

  • To process and deliver your orders, handle returns, refunds and customer service (legal basis: performance of the contract).
  • To meet our legal obligations, in particular accounting and tax obligations (legal basis: legal obligation).
  • To prevent fraud and secure the site and payments (legal basis: legitimate interest).
  • To send you our offers and tips by email, including a reminder if you left items in your cart (legal basis: consent, or legitimate interest for products similar to those already purchased). Every email contains an unsubscribe link.
  • To measure site traffic and the performance of our ads, and show you relevant ads (legal basis: consent).

4. Who we share your data with

We never sell your data. We only pass it on to the service providers our business needs, who process it on our behalf:

  • Shopify: website hosting, order and payment management;
  • Payment providers: Shopify Payments, PayPal, Apple Pay;
  • Suppliers and carriers: your name, delivery address and, where necessary, your phone number, to prepare and deliver your parcel;
  • Klaviyo and Shopify Email: sending the newsletter and follow-up emails;
  • Google (Google Ads, Google Merchant Center) and Meta (Facebook, Instagram): analytics and advertising, only with your consent;
  • Our business email service: handling your emails to customer service;
  • authorities where the law requires it.

5. Transfers outside the European Union

Some of our service providers (in particular Shopify, Google, Meta and Klaviyo) or suppliers may process data outside the European Union, for example in Canada or the United States. These transfers are covered by an adequacy decision of the European Commission (including the EU–US Data Privacy Framework) or by the European Commission's standard contractual clauses.

6. Cookies

On your first visit, a banner lets you accept or refuse non-essential cookies. Strictly necessary cookies (cart, login, security, remembering your choice) are always active. Analytics and advertising cookies (Google, Meta) are only set with your agreement. You can change your choice at any time by deleting the doucepatte.fr cookies in your browser settings: the banner will then be shown to you again. Cookies are kept for a maximum of 13 months.

7. Retention period

  • Order data and invoices: 10 years, in accordance with our accounting obligations.
  • Customer data used for the business relationship: 3 years after your last purchase or last contact.
  • Newsletter: until you unsubscribe, or 3 years without any interaction from you.
  • Cookies: 13 months maximum.

8. Your rights

You have the right to access, rectify, erase, restrict and port your data, as well as the right to object, in particular to direct marketing. You can withdraw your consent at any time and set instructions for what happens to your data after your death. To exercise these rights, write to us at bonjour@doucepatte.fr; we will reply within one month.

If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr).

9. Security

The site is fully encrypted (HTTPS) and payment is processed by PCI DSS-certified providers. Access to your data is limited to the people and service providers who need it to process your order.

10. Minors

Our shop is intended for adults. We do not knowingly collect data about minors under 15.

11. Internal tools and Google APIs

To manage our own advertising campaigns, we use an internal tool that connects to Google APIs (including the Google Ads API) with our own business accounts only. This tool is not offered to the public: it does not request access to the Google account of our customers or visitors and does not collect any personal data through these APIs. The advertising performance data obtained is used only to run our campaigns, is neither sold nor passed on to third parties, and complies with the Google API Services User Data Policy.

12. Changes

We may update this policy to reflect changes in our services or in the regulations. The date of the last update is shown at the top of this page.

13. Contact

Douce Patte — 46 avenue des Coccinelles, 13012 Marseille, France — bonjour@doucepatte.fr