Privacy Policy
🌿 "Your data is treated with the same care as our rituals."
At Rituels d'Hadiya, protecting your personal data is a priority. We are committed to processing your information with transparency, security, and respect, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).
The data controller is Madame Hadiatou Barry, reachable via our contact form.
Last updated: March 8, 2026. This policy may be updated according to regulatory changes.
📋 In brief:
✔ We only collect what is necessary
✔ Your data is never sold
✔ You can request modification or deletion at any time
✔ 100% secure payments via Shopify Payments (SSL)
[ 1. Controller ] [ 2. Data collected ] [ 3. Purposes ] [ 4. Retention ] [ 5. Sharing ] [ 6. Security ] [ 7. Transfers outside EU ] [ 8. Your rights ] [ 9. Cookies ] [ 10. Contact ]
Madame Hadiatou Barry — Rituels d'Hadiya
Individual Business — SIRET: 100 968 213 00015
Based in the Paris region, France
📬 Contact us via the contact form
We only collect data necessary for managing your business relationship.
Identity and contact data
• First name and last name
• Email address
• Phone number
• Postal address (delivery and billing)
Order data
• Products purchased
• Amounts and order history
• Order numbers
• Invoices
Payment data
Card type only (Visa, Mastercard, etc.). Full bank details are never stored on our servers. They are processed directly by Shopify Payments, certified PCI DSS compliant.
Navigation data
IP address, browser and device type, pages visited, acquisition source. This data is collected via cookies (see section 9).
Data from social networks
If you contact us via Instagram or other social networks, we may keep your username and the content of our exchanges.
🛒 Order fulfillment — legal basis: contract performance
Processing and tracking your order, delivery, invoicing, managing returns and refunds.
💬 Communication — legal basis: contract performance / legitimate interest
Order confirmation email, delivery tracking number, response to your requests.
📣 Marketing and prospecting — legal basis: consent
Newsletters and promotional offers. We never send promotional emails without your prior consent. You can withdraw your consent at any time via the unsubscribe link present in each email or via our contact form.
📊 Site improvement — legal basis: legitimate interest
Analysis of navigation data via Google Analytics to improve user experience.
⚖️ Legal obligations — legal basis: legal obligation
Retention of accounting and tax data, response to competent authorities.
• Customer and order data: 3 years from the last order.
• Marketing prospecting data: 3 years from the last contact.
• Accounting data and invoices: 10 years, in accordance with legal obligations.
• Analytical and marketing cookies: 13 months maximum.
At the end of these periods, your data is deleted or anonymized.
Your personal data is never sold or rented to third parties. It may only be shared with the following partners:
🛠️ Technical and logistics partners
• Shopify Inc. — site hosting and payment processing
• Colissimo / La Poste — delivery of your orders
• PayPal — secure payment processing
📱 Analytical and marketing partners (with your consent only)
• Google Analytics — audience measurement and site traffic analysis
• Meta (Facebook / Instagram) — Facebook Pixel — targeted advertising
• TikTok — TikTok Pixel — targeted advertising
⚖️ Competent authorities
In case of legal obligation or request from judicial or administrative authorities.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure.
These measures include:
✔ SSL encryption of all communications on the site
✔ PCI DSS certification of Shopify Payments for payment security
✔ Secure hosting by Shopify Inc., certified compliant with European standards
✔ Restricted access to personal data to authorized personnel only
In the event of a data breach likely to pose a risk to your rights and freedoms, we undertake to inform you as soon as possible, in accordance with Article 34 of the GDPR.
🌐 7. DATA TRANSFERS OUTSIDE THE EU
Some partners (especially Shopify Inc.) may process your data outside the European Union. These transfers are governed by:
✔ Adequacy decision of the European Commission (Canada)
✔ Standard contractual clauses approved by the European Commission
These mechanisms ensure that your data benefits from a level of protection equivalent to that offered within the European Union.
In accordance with the GDPR and the French Data Protection Act, you have the following rights:
🔍 Right of access: obtain a copy of the data we hold about you.
✏️ Right to rectification: correct inaccurate or incomplete data.
🗑️ Right to erasure: request the deletion of your marketing data within 30 days.
🚫 Right to object: object to processing for marketing prospecting purposes.
⏸️ Right to restriction: request temporary suspension of processing.
📦 Right to data portability: receive your data in a structured and readable format.
📧 Right to unsubscribe: via the link present in each marketing email.
To exercise these rights: contact form — response within a maximum of 30 days.
Complaint to the CNIL:
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr
Opposition to telephone canvassing — Bloctel:
www.bloctel.gouv.fr
Our site uses cookies — small text files placed on your device when you visit.
✅ Essential cookies — no consent required
Shopping cart management, login session, site security, remembering your preferences.
📊 Analytical cookies — consent required
Google Analytics: audience measurement and analysis of visitor behavior (duration: 13 months).
📱 Marketing cookies — consent required
• Facebook Pixel / Meta: targeted advertising on Facebook and Instagram
• TikTok Pixel: targeted advertising on TikTok
• Google Ads: conversion tracking
(duration: 13 months)
⚙️ Managing your preferences
Upon your first visit, a consent banner allows you to accept or refuse non-essential cookies. You can change your preferences at any time via the banner on the site or from your browser settings:
• Google Chrome
• Mozilla Firefox
• Safari
For more details, consult our complete Cookie Policy.
For any questions regarding the protection of your personal data or to exercise your rights:
👉 Access the contact form — response within 24 to 48 business hours, Monday to Friday.
In case of unresolved dispute, you can free of charge contact the mediator:
CNPM - MÉDIATION DE LA CONSOMMATION
23 rue d'Anjou — 75008 Paris
contact@cnpm-mediation-consommation.eu
https://cnpm-mediation-consommation.eu
🌿 For more information, consult our General Terms and Conditions of Sale, our Delivery and Returns page, and our complete FAQ.