Come back soon

Rêve Èclatant ("the house", "we", "us") operates this store. This policy explains what personal information we collect, why we collect it, how long we keep it, who we share it with, and what you can ask us to do about it.

What we collect

• Contact details you give us: name, email address, telephone number, delivery and billing addresses.
• Order details: what you bought, when, the amounts, and the delivery status.
• Marketing choices: whether you accepted email marketing, and whether you accepted text messages.
• Technical data: the pages requested, an approximate region derived from your IP address, browser and device type, and the referring page.
• Communications: messages you send us, including support and privacy requests.

We do not collect payment card numbers. Card details are entered on infrastructure operated by our payment provider and are tokenised there. They never reach our servers.

Why we collect it

• To take, process, dispatch and invoice your order, and to handle returns.
• To send order confirmations, dispatch notices and delivery updates.
• To answer your questions and honour your rights.
• To send marketing, but only where you have given the consent the law requires.
• To keep the store secure, prevent fraud and abuse, and understand in aggregate how the store is used.

Where the European Economic Area or United Kingdom rules apply to you, our lawful bases are: performance of a contract for orders, your consent for marketing and non-essential cookies, our legitimate interests for security and aggregate measurement, and legal obligation for tax, accounting and consent records.

Who we share it with

We do not sell your personal information. We share it only with the processors that run the store, each bound by contract to use it solely on our instructions:

• Shopify hosts the store, the customer records, the checkout and the payment tokenisation.
• Payment processors (for example Stripe, or Shopify Payments) authorise and settle payments.
• Delivery partners receive the name, address and contact details needed to bring your order to you.
• Email and messaging providers deliver our transactional and marketing messages.
• Analytics and advertising providers, but only where you allowed the analytics or marketing category.

We may also disclose information where the law compels it, or to protect the rights, property or safety of the house, our customers or others.

How long we keep it

• Order and tax records: kept for the period our accounting and tax obligations require, which is generally six to seven years, then deleted or anonymised.
• Customer account and marketing consent records: kept while the account is open or the consent stands, and for a short period afterwards as evidence of the consent.
• Server and security logs: kept for a limited window, then discarded.
• Support correspondence: kept while needed to resolve the matter and for a reasonable period afterwards.

Where it is stored

Our store infrastructure and our service providers may store and process information in the United States, the European Economic Area, the United Kingdom, Canada and elsewhere. Where information leaves the European Economic Area or the United Kingdom, we rely on the standard contractual clauses or another lawful transfer mechanism, together with the technical and organisational measures described below.

Security

Information is transmitted over encrypted connections and stored in access controlled systems. Access is limited to those who need it to run the house. Payment card data is never stored on this site and is handled exclusively by our tokenised payment provider, which maintains its own PCI-DSS obligations. No method of transmission or storage is completely secure, so we also limit what we collect in the first place.

Your rights

You may ask us to confirm what we hold about you, to give you a copy, to correct it, to delete it, to restrict how we use it, to transfer it to another provider, or to stop sending you marketing. You may also object to processing based on our legitimate interests, and withdraw consent at any time without affecting what we lawfully did before. Use the data request page or write to reve.eclatant@gmail.com.

California residents have the right to know, to delete, to correct, to limit the use of sensitive personal information, and to be free from discrimination for exercising these rights. We do not sell personal information and we do not share it for cross-context behavioural advertising. We treat a Global Privacy Control signal sent by your browser as a valid request to opt out of sale, sharing and targeted advertising, and honour it automatically without you having to ask. See Do Not Sell or Share My Personal Information.

If you are in the European Economic Area or the United Kingdom, you may also complain to your national supervisory authority. If you are in Canada, we collect and use personal information only for the purposes stated in this policy and with your consent, and you may withdraw that consent, subject to legal and contractual limits, by writing to us. We would rather you came to us first.

Children

This store is not directed at children. See children's privacy for the detail.

Changes

We will update this page when our practices change and change the date at the top. Where a change materially affects you, we will tell you directly if we are able to.

Contact

Rêve Èclatant
reve.eclatant@gmail.com