Politique de confidentialité

DUCEE SASU, publisher of the website barerituals.fr, is committed to protecting the privacy of its users in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and the French Data Protection Act (Loi Informatique et Libertés).

DATA CONTROLLER

DUCEE SASU
128 rue de la Boétie, 75008 Paris, France
SIRET: 98537816500015
Email: hello@barerituals.fr

DATA COLLECTED

During your browsing and purchases on barerituals.fr, we collect the following data:

Order data

— First and last name
— Email address
— Shipping and billing address
— Payment data (processed by Shopify Payments — we do not store your bank details)

Browsing data

— IP address
— Pages visited and duration of visit (via Google Analytics 4)
— Purchasing behavior data

Communication data

— Emails sent to hello@barerituals.fr
— Interactions with our marketing emails (via Klaviyo)

PURPOSES OF PROCESSING

Your data is used to:
— Process and deliver your orders
— Manage your customer account and subscriptions
— Send you order and delivery confirmations
— Send you our marketing communications (only with your consent)
— Improve our website and our offer via anonymized statistical data
— Comply with our legal and accounting obligations

LEGAL BASIS

— Performance of contract: processing of orders and deliveries
— Consent: marketing emails, non-essential cookies
— Legitimate interest: improvement of our services, fraud prevention
— Legal obligation: retention of accounting data

RETENTION PERIOD

— Order data: 10 years (legal accounting obligation)
— Customer account data: lifetime of the account + 3 years
— Marketing data: until unsubscribed or 3 years of inactivity
— Browsing data (cookies): 13 months maximum

DATA RECIPIENTS

Your data may be shared with:
— Shopify Inc. (hosting and payment) — shopify.com/legal/privacy
— Suplify (order preparation and shipping)
— Klaviyo (marketing emails) — klaviyo.com/legal/privacy-notice
— Google Analytics (browsing statistics) — policies.google.com/privacy
— Meta (advertising and retargeting, with your consent)

None of your data is sold to third parties.

YOUR RIGHTS

In accordance with the GDPR, you have the following rights:
— Right of access: obtain a copy of your data
— Right of rectification: correct your inaccurate data
— Right to erasure: request the deletion of your data
— Right to portability: receive your data in a structured format
— Right to object: object to the processing of your data
— Right to restriction: limit the processing of your data

To exercise your rights, contact us at hello@barerituals.fr. We will respond within 30 days. You may also lodge a complaint with the CNIL: cnil.fr.

SECURITY

We implement appropriate technical and organizational measures to protect your data against any unauthorized access, loss, or disclosure. Payments are secured by SSL encryption and processed by Shopify Payments (PCI DSS Level 1 certified).

COOKIES

To learn more about our use of cookies, consult our Cookie Policy at barerituals.fr/pages/cookies.

CHANGES

We reserve the right to modify this policy at any time. The date of the last update is indicated at the bottom of the page. We will notify you of any significant changes by email.

Last update: September 2026