GENERAL TERMS AND CONDITIONS OF SALE (GTC)
🌿 "Your data is treated with the same care as our rituals."
At Rituels d'Hadiya, the protection of your personal data is a priority. We are committed to processing your information with transparency, security, and respect, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).
The data controller is Madame Hadiatou Barry, reachable via our contact form.
Last updated: March 8, 2026. This policy may be updated based on regulatory changes.
📋 In short:
✔ We only collect what is necessary
✔ Your data is never sold
✔ You can request modification or deletion at any time
✔ 100% secure payments via Shopify Payments (SSL)
[ 1. Controller ] [ 2. Data collected ] [ 3. Purposes ] [ 4. Retention ] [ 5. Sharing ] [ 6. Security ] [ 7. Transfers outside the EU ] [ 8. Your rights ] [ 9. Cookies ] [ 10. Contact ]
Madame Hadiatou Barry — Rituels d'Hadiya
Individual Business — SIRET: 100 968 213 00015
Based in the Paris region, France
📬 Contact us via the contact form
We only collect data necessary for managing your business relationship.
Identity and contact data
• First and last name
• Email address
• Phone number
• Postal address (delivery and billing)
Order data
• Products purchased
• Amounts and order history
• Order numbers
• Invoices
Payment data
Card type only (Visa, Mastercard, etc.). Full bank details are never stored on our servers. They are processed directly by Shopify Payments, certified compliant with PCI DSS standards.
Browsing data
IP address, browser type and device, pages visited, acquisition source. This data is collected via cookies (see section 9).
Data from social networks
If you contact us via Instagram or other social networks, we may keep your username and the content of our exchanges.
🛒 Order fulfillment — legal basis: contract performance
Processing and tracking of your order, delivery, invoicing, management of returns and refunds.
💬 Communication — legal basis: contract performance / legitimate interest
Order confirmation email, delivery tracking number, response to your requests.
📣 Marketing and prospecting — legal basis: consent
Newsletters and promotional offers. We never send promotional emails without your prior consent. You can withdraw your consent at any time via the unsubscribe link in each email or via our contact form.
📊 Site improvement — legal basis: legitimate interest
Analysis of browsing data via Google Analytics to improve user experience.
⚖️ Legal obligations — legal basis: legal obligation
Retention of accounting and tax data, response to competent authorities.
• Customer and order data: 3 years from the last order.
• Marketing prospecting data: 3 years from the last contact.
• Accounting data and invoices: 10 years, in accordance with legal obligations.
• Analytical and marketing cookies: 13 months maximum.
At the end of these periods, your data is deleted or anonymized.
Your personal data is never sold or rented to third parties. It may only be shared with the following partners:
🛠️ Technical and logistical partners
• Shopify Inc. — site hosting and payment processing
• Colissimo / La Poste — delivery of your orders
• PayPal — secure payment processing
📱 Analytical and marketing partners (with your consent only)
• Google Analytics — site traffic analysis
• Meta (Facebook / Instagram) — Facebook Pixel — targeted advertising
• TikTok — TikTok Pixel — targeted advertising
⚖️ Competent authorities
In case of legal obligation or request from judicial or administrative authorities.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure.
These measures include:
✔ SSL encryption of all communications on the site
✔ PCI DSS certification for Shopify Payments for payment security
✔ Secure hosting by Shopify Inc., certified compliant with European standards
✔ Restricted access to personal data to authorized persons only
In the event of a data breach likely to pose a risk to your rights and freedoms, we commit to informing you as soon as possible, in accordance with Article 34 of the GDPR.
🌐 7. DATA TRANSFERS OUTSIDE THE EU
Certain partners (notably Shopify Inc.) may process your data outside the European Union. These transfers are governed by:
✔ Adequacy decision of the European Commission (Canada)
✔ Standard contractual clauses approved by the European Commission
These mechanisms ensure that your data benefits from a level of protection equivalent to that offered within the European Union.
In accordance with the GDPR and the French Data Protection Act, you have the following rights:
🔍 Right of access: obtain a copy of the data we hold about you.
✏️ Right to rectification: correct inaccurate or incomplete data.
🗑️ Right to erasure: request the deletion of your marketing data within 30 days.
🚫 Right to object: object to processing for marketing purposes.
⏸️ Right to restriction: request temporary suspension of processing.
📦 Right to data portability: receive your data in a structured and readable format.
📧 Right to unsubscribe: via the link in each marketing email.
To exercise these rights: contact form — response within a maximum of 30 days.
Complaint to the CNIL:
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr
Objection to telephone solicitation — Bloctel:
www.bloctel.gouv.fr
Our site uses cookies — small text files placed on your device when you visit.
✅ Essential cookies — no consent required
Cart management, login session, site security, memorization of your preferences.
📊 Analytical cookies — consent required
Google Analytics: audience measurement and analysis of visitor behavior (duration: 13 months).
📱 Marketing cookies — consent required
• Facebook Pixel / Meta: targeted advertising on Facebook and Instagram
• TikTok Pixel: targeted advertising on TikTok
• Google Ads: conversion tracking
(duration: 13 months)
⚙️ Managing your preferences
During your first visit, a consent banner allows you to accept or refuse non-essential cookies. You can change your preferences at any time via the banner on the site or from your browser settings:
• Google Chrome
• Mozilla Firefox
• Safari
For more details, consult our complete Cookie Policy.
For any questions regarding the protection of your personal data or to exercise your rights:
👉 Access the contact form — response within 24 to 48 business hours, Monday to Friday.
In case of unresolved dispute, you can free of charge contact the mediator:
CNPM - MEDIATION DE LA CONSOMMATION
23 rue d'Anjou — 75008 Paris
contact@cnpm-mediation-consommation.eu
https://cnpm-mediation-consommation.eu
🌿 For more information, consult our General Terms and Conditions of Sale, our Delivery and Returns page, and our complete FAQ.