Privacy Policy

Croustly places great importance on the protection of your personal data. This Privacy Policy informs you about how we collect, use, and protect your data, in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and the French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

Daniel Sloian — Croustly

34 Rue du Tire-Pesseau, 21000 Dijon, France

Email: croustly.contact@gmail.com

2. Data Collected

When you browse and make purchases on the site, we may collect the following data:

Identification data: last name, first name, email address
Delivery data: postal address, city, postal code, country
Payment data: processed directly by our secure payment providers (Shopify Payments, PayPal, Klarna) — Croustly never stores your bank details
Browsing data: IP address, browser type, pages visited, via cookies
Communication data: messages sent via the contact form or by email

3. Purposes of Processing

Your data is used to:

Process and manage your orders
Ensure the delivery of your products
Manage your after-sales service and return requests
Send you order confirmations and information related to your purchase
Improve our site and services (anonymized statistics)
Comply with our legal and accounting obligations

4. Legal Basis for Processing

Contract performance: processing your order and delivery
Legitimate interest: improving our services, combating fraud
Consent: sending marketing emails (if you have consented)
Legal obligation: retention of billing data

5. Data Retention Period

Order and billing data: 10 years (accounting and tax obligations)
Customer account data: duration of the commercial relationship + 3 years
Browsing data (cookies): maximum 13 months
Marketing data: until consent is withdrawn

6. Recipients of the Data

Your data is transmitted only to the following recipients, to the extent strictly necessary:

Shopify Inc.: hosting and managing the online store
Payment providers: Visa, Mastercard, PayPal, Klarna, Apple Pay
Carriers: to ensure the delivery of your order

Croustly does not sell or rent your personal data to third parties.

7. Transfer Outside the EU

Some of our providers (notably Shopify) are based outside the European Union (Canada, United States). These transfers are governed by appropriate safeguards (standard contractual clauses, adequacy decision) in accordance with the GDPR.

8. Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

Right of access: obtain a copy of your data
Right to rectification: correct inaccurate data
Right to erasure: request the deletion of your data
Right to object: oppose certain processing
Right to data portability: receive your data in a structured format
Right to restriction of processing: request temporary suspension of processing

To exercise your rights, contact us at: croustly.contact@gmail.com

In case of an unsatisfactory response, you can lodge a complaint with the CNIL: www.cnil.fr

9. Cookies

Our site uses cookies to:

Ensure the proper functioning of the site (technical, essential cookies)
Measure audience and improve our services (analytical cookies)
Personalize your experience (preference cookies)

During your first visit, a banner will inform you about the use of cookies and allow you to set your choices. You can also configure your browser to refuse all or part of the cookies.

10. Data Security

Croustly implements appropriate technical and organizational measures to protect your data against any loss, unauthorized access, disclosure, or alteration. Payments are secured via SSL/TLS protocol.

11. Policy Changes

Croustly reserves the right to modify this Privacy Policy at any time. The date of the last update is indicated at the top of the document. We encourage you to consult it regularly.

12. Contact

For any questions regarding this Privacy Policy, please contact us: