Politique de confidentialité

Data Controller & Store Information

Store Name: Fancytin 

 Official Website: www.fancytin.com

Contact Email: hello@fancytin.com

Contact Phone: +33-87598279

Registered Business Address: 60 Rte de la Vallée, 86180 Buxerolles, France

Applicable Legislation: EU General Data Protection Regulation (GDPR/RGPD 2016/679), French Data Protection Act (Informatique et Libertés) of 6 January 1978, French Consumer Code

Supervisory Authority: Commission Nationale de l'Informatique et des Libertés (CNIL), France’s official data protection authority

Last Updated: July 2026

1. Scope & Acceptance

This Privacy Policy governs the collection, storage, processing, usage, disclosure and protection of personal data of all visitors, registered users and customers who access and purchase women’s apparel products on the website www.fancytin.com. It explains your legal data rights and our data management practices in full compliance with French and EU data protection laws.

By browsing the website, creating an account, placing orders or subscribing to our services, you acknowledge that you have read, understood and fully agreed to the terms of this Privacy Policy. This policy applies solely to our official website and excludes third-party linked platforms, partner websites and third-party service providers.

2. Personal Data We Collect & Legal Basis

We strictly follow the GDPR data minimisation principle and only collect data necessary for business operation, order fulfillment and customer service. All data processing is based on the following legal grounds: contract performance, legal obligation, legitimate interest, or user explicit consent.

2.1 Order & Account Data

We collect personal information submitted by you during account registration and checkout:

· 

Personal identification: full name, gender

· 

· 

Contact information: email address, mobile/landline phone number

· 

· 

Logistics information: billing address, delivery address, postal code, city

· 

· 

Transaction records: order number, purchased items, order amount, payment records, shipping and return records

· 

Legal Basis: Performance of sales contract (GDPR Art.6(1)(b)) and legal compliance with French fiscal and commercial laws (GDPR Art.6(1)(c)).

2.2 Customer Support Data

When you contact us via email or phone for order consultation, return applications, warranty claims or dispute resolution, we retain your communication content, defect product photos, enquiry records and related order information to provide after-sales support.

Legal Basis: Contract performance and legitimate business interest.

2.3 Voluntary Marketing Data

If you explicitly subscribe to our newsletter and fashion update services, we will record your subscription preferences and email information to send promotional information, new product launches and discount activities.

Legal Basis: Your explicit, revocable consent (GDPR Art.6(1)(a)).

2.4 Automatic Technical Data

Our website automatically collects anonymous technical data through cookies and tracking tools during your browsing, including IP address, device model, browser type, operating system, page browsing records, click behavior and website access duration.

Legal Basis: Legitimate interest for website operation optimization, traffic analysis and fraud prevention; user consent for non-essential cookies.

3. Purposes of Data Processing

We only use your personal data for the following legitimate purposes:

· 

Process, verify and fulfill your orders, including payment confirmation, product packaging, logistics delivery and order tracking updates

· 

· 

Handle after-sales services, including returns, refunds, exchanges and 2-year statutory warranty services required by French consumer law

· 

· 

Reply to customer enquiries, resolve service disputes and maintain customer communication

· 

· 

Send mandatory transactional notifications, including order confirmation, shipping alerts, payment reminders and after-sales status updates

· 

· 

Deliver fashion newsletters and exclusive promotions only to subscribed users

· 

· 

Optimize website functions, product display and user shopping experience through data analysis

· 

· 

Prevent fraudulent transactions, unauthorized account access and malicious order behaviors

· 

· 

Comply with French tax, accounting and legal filing obligations

· 

· 

Defend legitimate rights and interests in commercial disputes and legal proceedings

· 

4. Data Retention Periods

We retain personal data only for the shortest period necessary to fulfill processing purposes and legal obligations, in line with CNIL and French fiscal regulations:

· 

Order & fiscal data: Retained for 10 full years after order completion, complying with French statutory accounting and tax retention requirements

· 

· 

Customer account data: Stored until you submit a formal account deletion request

· 

· 

Marketing subscription data: Retained until you unsubscribe or withdraw consent

· 

· 

Customer service records: Reserved for 24 months after enquiry closure for follow-up dispute handling

· 

· 

Website technical logs: Automatically cleared within 12 months

· 

After the retention period expires, all personal data will be permanently deleted or completely anonymized.

5. Third-Party Data Sharing & Processing

Fancytin does not sell, rent or trade your personal data for commercial marketing purposes. We only share necessary user data with compliant third-party service providers essential for website operation, all bound by GDPR-compliant data processing agreements:

· 

E-commerce platform: Shopify, for website hosting, order management and system operation

· 

· 

Payment service providers: Process secure online transactions and verify payment legitimacy

· 

· 

Logistics & courier providers: Deliver ordered goods based on your delivery information

· 

· 

Analytics tools: Anonymous website traffic and user behavior analysis

· 

· 

Legal & tax service providers: Data disclosure required by statutory compliance obligations

· 

For cross-border data transfers outside the EEA, we adopt EU Standard Contractual Clauses (SCCs) to ensure equivalent data protection levels as required by GDPR.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking tools to optimize user experience, divided into three categories in compliance with French electronic communication regulations:

· 

Necessary Cookies: Mandatory for basic website functions, including shopping cart storage, login verification and normal checkout processes, cannot be disabled

· 

· 

Analytical Cookies: Used to analyze website traffic and optimize page layout, enabled only with your explicit consent

· 

· 

Marketing Cookies: For targeted fashion product recommendation and retargeting advertising, enabled only with your explicit consent

· 

You can adjust cookie preferences via the website pop-up consent banner or manually clear browser cookies at any time. Disabling non-essential cookies will not affect normal shopping and checkout functions.

7. Your GDPR Data Subject Rights

As a resident of the European Economic Area and user of our services, you hold the following enforceable legal rights under GDPR and French local law, free of charge:

· 

Right of Access: Request a full copy of all personal data we store about you

· 

· 

Right of Rectification: Correct inaccurate or outdated personal and order information

· 

· 

Right of Erasure (Right to be Forgotten): Request permanent deletion of your personal data (excluding data retained for legal fiscal obligations)

· 

· 

Right of Restriction of Processing: Suspend data processing during data accuracy verification or dispute settlement

· 

· 

Right of Data Portability: Obtain your personal data in machine-readable format for transmission to other data controllers

· 

· 

Right of Objection: Object to data processing for legitimate interest purposes and unsubscribe from marketing emails at any time

· 

· 

Right to Withdraw Consent: Revoke any previously granted data processing consent with immediate effect

· 

· 

Right to Lodge a Complaint: File a formal complaint with CNIL (France’s data protection authority) if you believe our data processing violates relevant laws

· 

To exercise your data rights, please send a written request to hello@fancytin.com with your full name and registered email for identity verification. We will respond to all valid requests within 30 calendar days as required by GDPR.

8. Data Security Protection

We implement strict technical and organizational security measures to protect your personal data from unauthorized access, leakage, tampering and loss:

· 

Adopt end-to-end SSL/TLS encryption for all website browsing and checkout transaction data

· 

· 

Comply with PCI DSS security standards, do not permanently store complete credit card and payment sensitive information

· 

· 

Implement staff access permission management, restrict internal access to user personal data

· 

· 

Regularly conduct system security audits and risk detection

· 

In the event of a personal data breach that may risk your privacy, we will complete official notification to users and CNIL within 72 hours in accordance with GDPR mandatory provisions.

9. Minors Protection

Our women’s fashion products and website services are oriented to adult users aged 18 and above. We do not knowingly collect personal data of minors under 16 years old. If you are a guardian and find that we have obtained minor’s personal information without parental consent, please contact us immediately, and we will completely delete the relevant data in a timely manner.

10. Policy Updates & Amendments

Fancytin reserves the right to update this Privacy Policy to adapt to changes in French and EU data protection laws, platform rules and business operations. The updated policy will be published on the official website with a new update date. Material changes that affect user rights will be notified to registered users via email in advance. Your continued use of the website after policy updates constitutes acceptance of the revised terms.

11. Privacy Contact Information

For all data rights requests, privacy consultations, cookie enquiries and related complaints:

Email: hello@fancytin.com

Phone: +33-87598279

Business Address: 60 Rte de la Vallée, 86180 Buxerolles, France

Supervisory Authority (France): Commission Nationale de l'Informatique et des Libertés (CNIL)