Privacy Policy

Who is responsible

Diaw Younouss Fadel, sole trader, Appartement 327, 129 boulevard Davout, 75020 Paris, France, SIRET 994 531 994 00014, is the controller of the personal data collected through darmivault.com. For any question, or to exercise the rights below: younoussdiaw@darmivault.com.

What we collect, why, and for how long

Data Why Legal basis Kept for
Name, email, delivery and billing address, order contents To take, produce and deliver your order, and to handle returns Performance of the contract 10 years (accounting obligation)
Email and password To run your account, if you create one Consent Until you delete the account
Email address To send you drops and journal entries, if you sign up Consent Until you unsubscribe
Browsing and device data Audience measurement and advertising Consent (cookie banner) 13 months maximum

We never sell your data, and we do not use it for automated decision-making or profiling that produces legal effects for you.

Who processes data on our behalf

  • Payments — Stripe (WooCommerce Payments) and PayPal. They receive what is needed to take and secure the payment. We never see or store your card number.
  • Email — Klaviyo, for the mailing list and order-related messages.
  • Audience measurement — Google Analytics, via Google Site Kit.
  • Advertising measurement — Snapchat and Reddit, only if you accept advertising cookies.
  • Hosting and site services — Namecheap, Inc. (hosting) and Automattic (Jetpack).

Some of these providers are based outside the European Union. Transfers are covered by the European Commission’s standard contractual clauses or by an adequacy decision.

Your rights

Under the GDPR you may request access to your data, its correction or erasure, restriction of processing, and portability. You may object to processing based on our legitimate interest, and withdraw consent at any time where processing is based on it. Write to younoussdiaw@darmivault.com and we answer within one month.

You may also lodge a complaint with the CNIL, the French data protection authority: cnil.fr.

Security

The site runs entirely over HTTPS. Passwords are stored hashed. Access to order data is limited to what is needed to run the shop.

Cookies

Detailed in our cookie policy.