Privacy Policy

Last updated: July 14, 2026

This Privacy Policy explains how Lounelle Paris collects, uses, stores, and protects the personal data of visitors, customers, and users of the website www.lounelle.com, hereinafter referred to as the "Site."

It applies, in particular, when you:

• browse the Site;
• create a customer account;
• place an order;
• make a payment;
• request delivery;
• contact customer service;
• make a return or exchange;
• subscribe to the newsletter;
• participate in a promotional operation;
• interact with Lounelle Paris on social networks.

1. Data Controller

The data controller for personal data collected on the Site is:

KAMD MEDIA LIMITED
Registered office: FLAT/RM 1618A 16/F PIONEER, CTR 750 NATHAN RD MONG KOK, HONG KONG

The company operates the Site and the trademark Lounelle Paris.

For any questions regarding your personal data, you can contact us at:

Email: contact@lounelle.com

Postal address: FLAT/RM 1618A 16/F PIONEER, CTR 750 NATHAN RD MONG KOK, HONG KONG

2. What is personal data?

Personal data is any information that allows you to be identified directly or indirectly.

This may include your name, email address, postal address, phone number, IP address, order number, or information related to your browsing on the Site.

3. Data we may collect

Depending on your use of the Site, we may collect the following categories of data.

Identity data

• surname;
• first name;
• title, when requested;
• date of birth, only when necessary.

Contact details

• email address;
• phone number;
• billing address;
• delivery address;
• country of residence or delivery.

Customer account information

• account ID;
• order history;
• saved addresses;
• preferences;
• wish lists, when offered;
• account status and history.

Order information

• order number;
• items ordered;
• selected sizes and colors;
• order amount;
• discounts applied;
• delivery method;
• preparation and delivery status;
• refund, return, and exchange history.

Payment information

We may receive or store limited payment-related information, including:

• payment method used;
• payment status;
• amount;
• transaction date;
• last four digits of the card, when provided by the service provider;
• transaction reference.

Lounelle Paris does not directly receive or store the full number of your credit card or its security code.

This information is processed by our secure payment providers.

Delivery information

• delivery address;
• phone number;
• tracking number;
• delivery status;
• proof or confirmation of delivery;
• instructions provided to the carrier;
• information needed to process a lost or undelivered package.

Return and complaint information

• returned items;
• reason for return, when provided;
• requested solution;
• photographs of items or packages;
• comments and exchanges with customer service;
• proof of deposit;
• certificate of non-receipt;
• identification document when reasonably necessary for a carrier investigation or fraud prevention.

The reason for withdrawal due to a change of mind remains optional.

Communications with Lounelle Paris

We may retain exchanges made:

• by email;
• via contact form;
• by phone;
• on the return portal;
• via instant messaging;
• on social networks.

Technical and browsing data

We may automatically collect certain data, including:

• IP address;
• device type;
• operating system;
• browser;
• language;
• technical identifiers;
• pages visited;
• date and time of connection;
• source of the visit;
• actions performed on the Site;
• error and security-related information.

Commercial preferences

• newsletter subscription;
• date and source of consent;
• communication preferences;
• opens and clicks in messages;
• unsubscribe requests;
• objection to commercial prospecting.

Reviews, content, and social networks

When this feature is offered, we may process:

• product reviews;
• assigned rating;
• transmitted photograph or video;
• pseudonym;
• comment;
• content mentioning Lounelle Paris on social networks.

We will ask for your permission when necessary before reusing content for commercial purposes.

4. Data sources

Data can be collected:

• directly from you;
• automatically during your browsing;
• from Shopify, which hosts and operates the Site's e-commerce infrastructure;
• from payment providers;
• from carriers and logistics partners;
• from our customer service and return management tools;
• from advertising or analytical partners, when you have given your consent;
• from social networks when you interact with our accounts.

5. Purposes and legal bases

We process your data only when we have a valid legal basis.

Order management

We use your data to:

• record your order;
• verify payment;
• prepare items;
• organize shipping;
• ensure delivery;
• send confirmations and tracking information.

Legal basis: performance of the contract concluded with you.

Payment management

We use the necessary data to:

• process payment;
• confirm the transaction;
• manage refunds;
• handle disputes;
• secure transactions.

Legal bases: performance of the contract, compliance with our legal obligations, and legitimate interest in preventing fraud.

Management of returns, exchanges, and refunds

We use your data to:

• record a return request;
• process a withdrawal;
• organize an exchange;
• verify returned items;
• issue a refund or credit note;
• retain proof of the request and its processing.

Legal bases: performance of the contract, compliance with our legal obligations, and legitimate interest in ensuring the follow-up of requests.

Customer service

We use your data to:

• answer your questions;
• process complaints;
• resolve delivery incidents;
• monitor your order;
• improve service quality.

Legal bases: performance of the contract or pre-contractual measures, legal obligations, and legitimate interest in ensuring customer satisfaction.

Creation and management of customer accounts

We use your data to:

• create your account;
• record your preferences;
• display your history;
• facilitate your future orders;
• secure account access.

Legal bases: performance of the contract and legitimate interest in facilitating the use of the Site.

Accounting and legal obligations

We may process and store certain data to:

• establish invoices;
• comply with accounting and tax obligations;
• respond to requests from authorities;
• retain legally required evidence.

Legal basis: compliance with a legal obligation.

Fraud prevention and security

We may process certain data to:

• detect fraudulent orders;
• prevent unauthorized payments;
• detect abuse of the return service;
• secure accounts;
• ensure Site security;
• protect our rights and those of our customers.

Legal basis: legitimate interest of Lounelle Paris in ensuring the security of its services and preventing fraud.

Newsletter and commercial offers

When you subscribe to our newsletter, we use your email address to send you:

• news;
• promotional offers;
• collection launches;
• advice and content related to Lounelle Paris.

Legal basis: your consent.

You can withdraw this consent at any time by clicking on the unsubscribe link present in each message.

Where regulations permit, we may also inform our customers about products similar to those already purchased. You can object to this at any time and free of charge.

Personalization and recommendations

Subject to your cookie choices, we may use your browsing and purchase history to:

• personalize the Site;
• recommend products;
• adapt content;
• measure the relevance of offers.

Legal bases: consent for trackers that require it and, in some limited cases, legitimate interest.

Statistics and Site improvement

We may analyze Site usage to:

• measure performance;
• identify errors;
• improve ergonomics;
• understand purchasing journeys;
• develop new features.

Legal bases: consent when non-essential cookies or trackers are used, or legitimate interest when measures are strictly necessary and exempt from consent.

Personalized advertising

With your consent, certain data may be used to:

• measure advertising performance;
• display tailored advertisements;
• limit ad repetition;
• create advertising audiences;
• measure conversions.

Legal basis: your consent.

6. Mandatory or optional nature of data

Fields identified as mandatory are necessary to process your request or fulfill your order.

Without this information, we may be unable to:

• create your order;
• process your payment;
• perform delivery;
• respond to your request;
• process a return or refund.

Fields not marked as mandatory are optional.

7. Data recipients

Your data is only accessible to individuals who need it for their job functions.

It may be transmitted to the following categories of recipients:

• authorized Lounelle Paris teams;
• e-commerce platform and host;
• payment providers;
• logistics partners and warehouses;
• carriers;
• customer service tools;
• return management providers;
• email and newsletter sending providers;
• IT, maintenance, and cybersecurity providers;
• statistics and audience measurement tools;
• advertising platforms, when you have consented;
• accountants, legal advisors, and insurers;
• administrative, tax, judicial, or police authorities when required by law.

These recipients receive only the data necessary for their missions.

8. Shopify

The Site is hosted and operated using the Shopify platform.

Shopify processes certain data to:

• host the Site;
• enable order creation and management;
• ensure platform security;
• provide payment, customer account, and sales management tools;
• maintain and improve its services.

Depending on the features and settings used, Shopify may act as a sub-processor for Lounelle Paris or process certain data for its own purposes in accordance with its documentation and privacy policy.

9. Payment providers

Payments are processed by specialized providers.

These providers may directly collect:

• card number;
• expiration date;
• cryptogram;
• authentication data;
• information related to the payment method holder;
• technical data necessary for fraud prevention.

Lounelle Paris does not control all processing performed directly by banks, card networks, or payment providers acting for their own legal and security obligations.

10. Logistics partners and shipping from China

Lounelle Paris orders are currently prepared and shipped from a partner logistics center located in China.

Data strictly necessary for preparation and shipping may be transmitted to this partner, including:

• surname and first name;
• delivery address;
• phone number;
• order content;
• delivery instructions;
• order number or reference.

This information is communicated solely to fulfill your order and arrange its delivery.

Contractual and organizational measures are implemented to govern this processing and any international data transfers.

11. Returns Portal

When you use our returns portal, it processes the necessary data to:

• locate your order;
• verify your identity using your email;
• display eligible items;
• record your desired solution;
• create the return request;
• send you an acknowledgment of receipt;
• inform our customer service.

Data entered on the portal is linked to your order and stored in accordance with the durations indicated in this policy.

12. Cookies and similar technologies

The Site uses cookies and similar technologies.

Some cookies are strictly necessary to:

• display the Site;
• remember your shopping cart;
• maintain your session;
• secure payment;
• prevent fraud;
• save your privacy choices.

These cookies can be used without your consent when they are strictly necessary for the requested service.

Cookies used for advertising, personalization, or certain audience measurements are placed only after your consent, when required.

During your first visit, a cookie management tool allows you to:

• accept all;
• refuse all;
• customize your choices.

You can withdraw or modify your consent at any time by using the link or the button Manage my cookies available on the Site.

Additional information is presented in our Cookie Policy.

13. Social Networks

The Site may contain links to Instagram, TikTok, Facebook, Pinterest, or other platforms.

When you click on these links or interact with the corresponding features, the platforms concerned may process your data in accordance with their own privacy policies.

Lounelle Paris does not control all processing carried out independently by these platforms.

14. No Sale of Personal Data

Lounelle Paris does not sell your personal data to third parties for remuneration.

However, certain transmissions to advertising or technology providers may be qualified differently depending on the applicable laws in certain countries.

Where required by law, these transmissions are subject to your consent or an opt-out mechanism.

15. Data Transfers Outside the European Economic Area

Some of our service providers, particularly Shopify, logistics partners, technology or advertising providers, may process data outside the European Economic Area.

These transfers may notably concern Canada, the United States, China, or other countries where our providers operate.

When the country concerned does not benefit from an adequacy decision by the European Commission, we seek to frame transfers using appropriate safeguards, including:

• standard contractual clauses adopted by the European Commission;
• binding corporate rules;
• certification mechanisms or recognized frameworks;
• additional technical and organizational measures;
• derogations provided for by regulations when strictly applicable.

You can contact us to obtain additional information on the safeguards used for a specific transfer.

16. Retention Periods

We retain data only for the period necessary to achieve the relevant purpose, and then, when necessary, in an intermediate archive to comply with our legal obligations or defend our rights.

Customer Account Data

Account data is retained during its use, then may be deleted or anonymized after a prolonged period of inactivity.

As an indication, the commercial data of an inactive customer may be retained for three years from the end of the commercial relationship, unless a longer legal obligation or need for proof exists.

Order-Related Data

Data necessary for active order management is retained during its processing.

Certain contractual information may then be retained for the period necessary for the establishment, exercise, or defense of legal rights.

Invoices and Accounting Documents

Invoices and accounting supporting documents are retained for the applicable legal period, generally ten years from the close of the relevant fiscal year.

Payment Data

Lounelle Paris does not directly retain complete banking data.

Limited payment references are retained for the period necessary for the transaction, refund, dispute resolution, and compliance with legal obligations.

Payment providers apply their own retention periods.

Customer Service, Returns, and Complaints

Exchanges are retained for the period necessary to process the request.

They may then be archived for the period necessary to establish proof of processing, prevent fraud, or defend our rights.

Newsletter and Prospecting

Prospect data may be retained until consent is withdrawn or for three years from its collection or the last active contact.

Customer data used for prospecting purposes may be retained during the commercial relationship, then for three years from its end or the last active contact, subject to applicable regulations.

Opposition List

When you unsubscribe, your address may be retained in an opposition list to ensure that you no longer receive the relevant communications.

Technical and Security Data

Technical logs are retained for a period proportionate to security, maintenance, and fraud prevention objectives.

They may be retained longer when necessary for incident analysis.

Cookies

The applicable periods for cookies and consent choices are indicated in our Cookie Policy and in the preference management tool.

After the applicable periods, data is deleted, anonymized, or archived when required by law.

17. Data Security

Lounelle Paris and its service providers implement technical and organizational measures aimed at protecting personal data against:

• unauthorized access;
• loss;
• destruction;
• alteration;
• disclosure;
• fraudulent use.

These measures may notably include:

• encryption of communications;
• access control;
• authentication;
• backups;
• logging;
• limitation of access rights;
• security monitoring;
• incident management procedures;
• contractual commitments with service providers.

However, no computer system can guarantee absolute security.

18. Data Breach

In the event of a breach likely to pose a risk to the rights and freedoms of individuals, Lounelle Paris will take appropriate measures to:

• contain the incident;
• assess its consequences;
• correct the vulnerability;
• notify the competent authority when required;
• inform affected individuals when required by law.

19. Automated Decisions and Fraud Prevention

Some transactions may be subject to automated checks performed by our payment providers or fraud prevention tools.

These checks may notably analyze:

• inconsistencies in the information provided;
• transaction characteristics;
• IP address;
• order history;
• security signals;
• risk associated with the payment method.

An order may be suspended for further verification.

When a fully automated decision produces a legal effect or significantly affects an individual and regulations permit, the individual may request human intervention, present their observations, and challenge the decision.

20. Your Rights

Subject to the conditions provided by regulations, you can exercise the following rights.

Right of Access

You can ask if we are processing data about you and obtain a copy.

Right to Rectification

You can request the correction of inaccurate or incomplete data.

Right to Erasure

You can request the deletion of certain data when no legal obligation or legitimate reason justifies their retention.

Right to Restriction of Processing

You can request the temporary suspension of certain processing activities.

Right to Object

You can object to processing based on our legitimate interest for reasons related to your particular situation.

You can object to commercial prospecting at any time and without justification.

Right to Data Portability

For processing based on your consent or a contract and carried out automatically, you can request to receive the data provided in a structured and commonly used format.

Withdrawal of Consent

Where processing is based on your consent, you can withdraw it at any time.

Withdrawal does not affect the lawfulness of processing carried out before this withdrawal.

Right to Define Directives After Your Death

When French law applies, you can define directives relating to the retention, erasure, and communication of your data after your death.

21. How to Exercise Your Rights?

You can send your request to:

contact@lounelle.com

Suggested subject:

Request regarding my personal data

Your request must specify the right you wish to exercise and the information allowing us to identify you.

We may request proof of identity only when we have reasonable doubt about your identity. In this case, we will only request the information necessary for verification.

We will respond as soon as possible and, in principle, within a maximum of one month from the receipt of the complete request.

This period may be extended by two months when the request is complex or when the number of requests justifies it. You will be informed of this extension and its reasons within the initial one-month period.

The exercise of your rights is free, except for requests that are manifestly unfounded or excessive under the conditions provided by law.

22. Complaint to the CNIL

If you believe that your data is not being processed in accordance with regulations, you can lodge a complaint with the Commission nationale de l’informatique et des libertés, the CNIL.

However, we invite you to contact us beforehand to allow us to examine your request.

23. Data Relating to Minors

The Site is not intended to voluntarily collect personal data from young children.

Individuals who do not have the necessary legal capacity must use the Site under the responsibility of their legal representative.

When parental consent is legally required for a particular processing activity, Lounelle Paris may request the necessary elements to verify it.

24. Links to Third-Party Sites

The Site may contain links to sites or services operated by third parties.

This Privacy Policy does not apply to processing carried out independently by these third parties.

We invite you to consult their own policies before transmitting your information to them.

25. Modification of the Privacy Policy

This Policy may be modified to take into account, in particular:

• a legal or regulatory evolution;
• a new feature;
• a change of service provider;
• an evolution of our practices;
• a modification of our activities.

The last update date is indicated at the top of the page.

In the event of significant modification, information may be displayed on the Site or sent by email when appropriate.

26. Contact

For any questions regarding this Policy or the processing of your personal data:

Lounelle Paris
Email: contact@lounelle.com