Privacy policy

PRIVACY POLICY

Updated on 09/06/2026

1. Data Controller

CACHE CŒUR SARL, whose registered office is located at ZI de Kerscao – Rue Jean Fourastié, 29480 Le Relecq-Kerhuon – France, acts as the data controller for personal data collected through the website www.cachecoeur.com.

For any questions regarding the protection of personal data:
Email: contact@cachecoeur.com
Phone: +33 (0)2 98 80 12 95

2. Data Collected

As part of the use of the website and the management of orders, CACHE CŒUR may collect the following categories of data:

  • Identity data: first name, last name;
  • Contact details: postal address, email address, telephone number;
  • Order and billing information;
  • Delivery information;
  • Purchase history;
  • Browsing and website usage data;
  • Data relating to requests submitted to customer service;
  • Consent data relating to cookies and marketing communications.

3. Purposes of Processing

Personal data is collected for the following purposes:

  • Creation and management of customer accounts;
  • Processing and monitoring of orders;
  • Payment management;
  • Organization of deliveries;
  • Management of returns and refunds;
  • After-sales service;
  • Fraud prevention;
  • Improvement of the website and user experience;
  • Audience measurement and analytics;
  • Sending newsletters and marketing communications where consent is required or where permitted by applicable regulations.

4. Legal Bases for Processing

The processing activities carried out by CACHE CŒUR are based on one of the following legal grounds:

  • Performance of the sales contract;
  • Compliance with legal obligations;
  • CACHE CŒUR's legitimate interest in improving its services and preventing fraud;
  • The user's consent where required.

5. Data Recipients

Personal data is accessible only to authorized personnel within CACHE CŒUR and to certain service providers acting on its behalf for the purposes described above.

The data may notably be transferred to the following categories of service providers:

  • E-commerce and hosting provider (Shopify);
  • Payment service providers (PayPal, Alma, and banking partners);
  • Logistics providers and carriers;
  • Marketing and email service providers (Klaviyo);
  • Analytics and online advertising providers (Google, Meta);
  • Consent management platform provider (Didomi).

These service providers act in accordance with their contractual and regulatory obligations regarding the protection of personal data.

6. Data Retention Periods

Personal data is retained only for the period strictly necessary to achieve the purposes pursued and in accordance with applicable legal obligations.

  • Customer data: for the duration of the commercial relationship and subsequently archived in accordance with legal obligations;
  • Billing data: 10 years;
  • Marketing prospect data: until consent is withdrawn or in accordance with applicable regulations;
  • Browsing data: in accordance with the retention periods provided by the tools used and applicable regulations.

7. International Transfers

Some service providers used by CACHE CŒUR may be located outside the European Union.

Where such transfers take place, CACHE CŒUR ensures that they are based on a mechanism recognized by applicable regulations, including the Standard Contractual Clauses adopted by the European Commission or any other appropriate safeguard.

8. Rights of Data Subjects

In accordance with applicable regulations, each data subject has:

  • The right of access;
  • The right to rectification;
  • The right to erasure;
  • The right to restriction of processing;
  • The right to object;
  • The right to data portability;
  • The right to withdraw consent at any time where processing is based on consent.

These rights may be exercised by sending a request to: contact@cachecoeur.com

In order to protect personal data, CACHE CŒUR may request proof of identity where there is reasonable doubt regarding the identity of the requester.

9. Complaint to the CNIL

Any data subject has the right to lodge a complaint with the French Data Protection Authority (CNIL).

CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07 – France
Website: www.cnil.fr

10. Cookies and Similar Technologies

The website uses cookies and similar technologies to ensure its proper functioning, measure audience and website performance, personalize the user experience and, subject to the user's consent where required, provide tailored content and advertisements.

Cookie preferences may be managed at any time through the consent management tool available on the website.

11. Security

CACHE CŒUR implements appropriate technical and organizational measures to ensure a level of security appropriate to the risks and to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

12. Changes to this Policy

CACHE CŒUR reserves the right to modify this Privacy Policy at any time in order to reflect legal, regulatory, or technical developments.

The version in force is the version published on the website on the date it is consulted.