Privacy and cookie policy

Privacy and Cookies Policy

Last updated: September 30, 2026.

This policy explains how GAÉVÉLIE collects and processes your personal data when you visit gaevelie.fr, create an account, place an order, contact customer service, sign up for communications, or use the shop's features.

1. Data Controller

The data controller is RGB, operating under the trade name GAÉVÉLIE, 8 Lotissement du Lavoir, 38790 Diémoz, France. Email: rgbusinesscontact07@gmail.com. Phone: +33 4 72 15 40 99.

2. Data that may be collected

Depending on your use of the site, we may process, in particular: your surname and first name, billing and delivery address, email address, phone number, information relating to orders and customer service, payment status, purchase history, marketing preferences, reviews or messages sent, as well as technical data such as IP address, device type, browser, security logs, and information generated by cookies and similar technologies.

Bank card data is processed by payment providers; GAÉVÉLIE generally does not receive your full card number.

3. Why we use this data

We process the data necessary to: fulfill and deliver orders; ensure payment, fraud prevention, and security; manage returns, refunds, warranties, and customer requests; comply with our accounting, tax, and legal obligations; administer and improve the shop; measure its operation; personalize certain features; and, with your consent when required, send you marketing communications or use non-essential cookies.

Depending on the processing, our legal bases are the performance of the contract, compliance with a legal obligation, our legitimate interest in securing and improving business activities, or your consent.

4. Recipients and processors

We do not sell your personal data. It may be communicated, to the extent necessary for their tasks, to our technical and commercial partners, including:

  • Shopify, which provides the e-commerce platform and certain services related to the shop;
  • our payment providers;
  • our manufacturing and order fulfillment partner, Selfnamed, when an order needs to be produced, prepared, or shipped;
  • carriers and delivery providers;
  • applications and service providers used for customer reviews, analytics, security, or customer service;
  • government agencies or authorities when required by law.

Only the data necessary for the intended purpose is communicated.

5. International transfers

Some providers may process data outside of France or the European Economic Area. When required by regulation, these transfers are governed by a mechanism recognized by applicable law, such as an adequacy decision or appropriate contractual safeguards.

6. Data retention periods

We only store data for the time necessary for the purposes described and to comply with legal obligations. Documents related to orders and accounting may, in particular, be kept for the duration required by accounting and tax legislation, which can be up to 10 years. Data used for marketing purposes is deleted or reviewed when no longer needed or when you withdraw your consent, subject to proof or objection obligations.

7. Cookies and similar technologies

The site uses cookies or similar technologies necessary for its operation, security, the shopping cart, and the checkout process. Other cookies, particularly those for audience measurement, personalization, or marketing, may be used when your consent is required.

You can accept, refuse, or modify your choices via the banner or the privacy settings available on the site. Refusing non-essential cookies should not prevent access to the essential functions of the shop.

8. Your rights

Under the conditions provided by the GDPR and applicable legislation, you may request access to your data, its rectification, erasure, restriction of processing, object to certain processing, request portability where applicable, and withdraw your consent at any time for processing based on it.

To exercise your rights, write to rgbusinesscontact07@gmail.com, specifying your request. Proportionate identity verification may be requested when necessary to protect your data.

You may also file a complaint with the CNIL if you believe your rights are not being respected.

9. Minors

The shop is not intended to knowingly collect data from children who do not have the capacity required to contract or consent to the processing concerned. If you believe that a minor has submitted data to us inappropriately, please contact us.

10. Security

Together with our service providers, we implement technical and organizational measures intended to protect data against unauthorized access, alteration, loss, or disclosure. As no system is entirely risk-free, we invite you to also protect your login credentials and devices.

11. Policy updates

We may update this policy to reflect changes in our services, our providers, or regulations. The date of the last update appears at the top of the page.

12. Contact

GAÉVÉLIE / RGB — 8 Lotissement du Lavoir, 38790 Diémoz, France — rgbusinesscontact07@gmail.com — +33 4 72 15 40 99.