Privacy policy
Last updated : 12 October 20261. Data controller
LouSheli Paris — contact@lousheli.com
2. Data collected and purposes
- Orders: name, email, phone, address or pickup point, items bought — to carry out the sale, delivery and after-sales service (contract).
- Customer account: identity, email, encrypted password, addresses — to order faster and follow your orders (contract).
- Contact form: name, email, message — to answer you (legitimate interest).
- Newsletter: email and first name, only if you opted in — to tell you about new pieces (consent, withdrawable at any time through the link in every email).
3. Recipients
Your data is never sold. It is only shared with the providers we need: PayPal (payment), La Poste Colissimo and Mondial Relay (delivery), Resend (emails), Vercel (site hosting) and Neon (database, hosted in the EU). Some of them may process data outside the EU, with the safeguards required by the GDPR (standard contractual clauses or the Data Privacy Framework).
4. Retention
- Orders and invoices: 10 years (accounting obligations).
- Customer account: until deleted, or 3 years without activity.
- Contact requests: 3 years after the last exchange.
- Newsletter: until you unsubscribe.
5. Your rights
You can access, correct, delete, restrict, object to or port your data by writing to contact@lousheli.com. If you believe your rights are not respected, you may complain to the CNIL (cnil.fr).
6. Cookies
The site uses no advertising or analytics cookies. Only strictly necessary items are used: the sign-in cookie for your account, and browser storage for your bag and language. At payment, PayPal sets its own cookies, required to secure the transaction. These do not require consent.