Privacy policy

Last updated: 10 May 2026

Charmsy operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a personalised shopping experience (the "Services"). Charmsy is a store powered by Shopify, which enables us to provide you with the Services. This Privacy Policy describes how we collect, use and disclose your personal information when you access or use the Services, make a purchase or any other transaction, or otherwise communicate with us. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall govern with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing and using our Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used and disclosed as described here.

Personal information we collect or process

When we use the term "personal information", we mean information that identifies you or could reasonably be linked to you or another person. Personal information does not include information collected anonymously or rendered non-identifiable. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from it:

• Contact details including your name, address, billing address, shipping address, phone number and email address.
• Financial information including credit card, debit card and bank account numbers, payment card information, bank account information, transaction details, payment method, payment confirmation and other payment details.
• Account information including your username, password, security questions, preferences and settings.
• Transaction information including the items you view, place in your basket, add to your wishlist, purchase, return, exchange or cancel, as well as your past transactions.
• Your communications with us including the information you include when you contact us, for example via a customer service enquiry.
• Device information including information about your device, browser or network connection, your IP address and other unique identifiers.
• Usage information including information about your interaction with the Services, such as how and when you access or interact with them.

Sources of personal information

We may collect personal information from the following sources: directly from you (e.g. when you create an account, use the Services, communicate with us or otherwise provide your information); automatically through the Services (e.g. from your device and through cookies and similar technologies); from our service providers (e.g. when they collect or process information on our behalf); and from our partners or other third parties.

How we use your personal information

Depending on how you interact with us and which Services you use, we may use your personal information to: provide, tailor and improve the Services (including performing our contract with you, processing payments and orders, remembering your preferences, sending account notifications, arranging shipping, handling returns and exchanges, enabling reviews, and creating a personalised shopping experience); for marketing and advertising (e.g. sending you marketing communications by email, SMS or post, and showing you online advertising); for security and fraud prevention; to communicate with you and provide customer service; and for legal reasons (to comply with applicable law or respond to valid legal process).

How we disclose personal information

In certain circumstances we may disclose your personal information to third parties for legitimate purposes, including: with Shopify and service providers who perform services on our behalf (e.g. IT, payment processing, data analytics, customer service, cloud storage, fulfilment and shipping); with business and marketing partners to provide marketing services and advertising; when you direct, request or otherwise consent to disclosure (e.g. to ship products); with our affiliates or within our group of companies; and in connection with a business transaction (such as a merger or insolvency), to comply with legal obligations, to enforce applicable terms or policies, and to protect our rights and those of our users or third parties.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit to the Services will be transmitted to and shared with Shopify, as well as with third parties that may be located in countries other than the one in which you reside. In addition, we use certain enhanced Shopify features that combine data from your interactions with our store, with other merchants and with Shopify. In these circumstances, Shopify is responsible for processing your personal information. To learn more about Shopify's use of your personal information and the rights available to you, see Shopify's consumer privacy policy.

Third-party websites and links

The Services may contain links to websites or other online platforms operated by third parties. We are not responsible for the privacy or security of such sites, nor for the accuracy, completeness or reliability of information found on them. We recommend you review their privacy and security policies and other terms of use. Including such links does not imply endorsement of those platforms.

Children's data

The Services are not intended for use by children, and we do not knowingly collect any personal information about children who have not reached the age of majority in their jurisdiction. If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the details below to request its deletion. As of the effective date of this Privacy Policy, we do not "share" or "sell" personal information about individuals under 16 years of age.

Security and retention of your information

Please note that no security measure is perfect or impenetrable, and we cannot guarantee "perfect security". Information you send us may not be secure during transmission; we recommend you do not use insecure channels to send us sensitive or confidential information. How long we retain your personal information depends on factors such as the need to maintain your account, provide the Services, comply with our legal obligations, resolve disputes, and enforce applicable agreements or policies.

Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute, may apply only in certain circumstances, and in some cases we may decline your request as permitted by law:

• Right of access / right to information — to request access to the personal information we hold about you.
• Right to erasure — to request deletion of the personal information we hold about you.
• Right to rectification — to request correction of inaccurate personal information.
• Right to portability — to receive a copy of your personal information and request its transfer to a third party, in certain circumstances and with certain exceptions.
• Managing communication preferences — we may send you promotional emails; you can opt out at any time using the unsubscribe link. Even if you unsubscribe, we may still send you non-promotional emails about your account or orders.

If you are located in the United Kingdom or the European Economic Area, and subject to local-law exceptions and limitations, you may also: object to or restrict our processing of your personal information for certain purposes; and withdraw your consent where we rely on it (withdrawal does not affect the lawfulness of processing before withdrawal).

You can exercise these rights where provided on the Services or by contacting us using the details below. We may need to verify your identity before processing your request. We will respond within the timeframe required by applicable law.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision by contacting us, or to lodge a complaint with the competent data protection authority. In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO) — ico.org.uk. In the EEA, you can find the relevant supervisory authorities via the European Data Protection Board.

International transfers

We may transfer, store and process your personal information outside the country in which you reside. Where we transfer your personal information outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms, such as the European Commission's Standard Contractual Clauses or, where applicable, an equivalent contract issued by the relevant UK authority, unless the transfer is to a country recognised as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised policy on this website, update the "Last updated" date, and provide notice as required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or wish to exercise any of your rights, please email us at contact@charmsy.fr or write to us at 47 rue Vivienne, 75002 Paris, France. For the purposes of applicable data protection law, Charmsy SASU (SIREN 104 088 950) is the controller of your personal information.