PRIVACY POLICY
Here's the English translation:
PRIVACY POLICY
Last updated: May 2026
1. Introduction Fylvena is committed to protecting the privacy of your personal data. This privacy policy explains how we collect, use, and protect your data.
2. Data Controller The party responsible for the data collected on fylvena.com is Fylvena. Contact: support@fylvena.com
3. Data We Collect
When you place an order:
- First and last name
- Shipping and billing address
- Email address
- Phone number
- Payment information (securely processed by Shopify Payments)
When you subscribe to our newsletter:
- Email address
While you browse:
- IP address
- Browser type
- Pages visited
- Visit duration
- On-site behavior data
4. Purposes of Processing Your data is collected for the following purposes:
- Processing and tracking your orders
- Managing the customer relationship
- Sending our newsletter and marketing communications (with your consent)
- Improving our site and services
- Analyzing visitor behavior
- Personalizing advertising
5. Third-Party Tools We Use We use the following tools, which may collect data about you:
Shopify — Our site is hosted on the Shopify platform. Shopify processes your data as part of order and site management. Privacy policy: shopify.com/legal/privacy
Facebook Pixel — We use the Facebook Pixel to measure the effectiveness of our ads and show you personalized ads on Facebook and Instagram. Meta may collect some of your browsing data. Privacy policy: facebook.com/privacy/policy
Google Analytics — We use Google Analytics to analyze our site traffic and understand visitor behavior. The data collected is anonymized. Privacy policy: policies.google.com/privacy
Klaviyo — We use Klaviyo to manage our newsletter and email communications. Klaviyo may collect data about email opens and your interactions with them. Privacy policy: klaviyo.com/legal/privacy-notice
6. Legal Basis for Processing We process your data on the following bases:
- Performance of a contract: processing your orders
- Consent: newsletter, cookies, and personalized ads
- Legitimate interest: improving our services and site security
7. Cookies Our site uses cookies to improve your browsing experience and measure our audience. The cookies used are:
- Essential cookies: required for the site to function and for order processing
- Analytics cookies: Google Analytics, to measure site traffic
- Advertising cookies: Facebook Pixel, to measure the effectiveness of our ads
You can manage your cookie preferences at any time through the cookie banner shown on your first visit, or by adjusting your browser settings.
8. Data Retention Your data is retained for the following periods:
- Order data: 10 years (legal requirement)
- Newsletter data: until you unsubscribe
- Browsing data: up to 13 months (Google Analytics)
- Advertising data: up to 180 days (Facebook Pixel)
9. Your Rights You have the following rights regarding your personal data:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your data
- Right to restriction: limit the processing of your data
- Right to portability: receive your data in a readable format
- Right to object: object to the processing of your data for marketing purposes
- Right to withdraw consent: at any time, without affecting the lawfulness of processing done before withdrawal
To exercise your rights, contact us at: support@fylvena.com
10. Data Security We implement all necessary technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. Payments are securely processed by Shopify Payments, which is PCI DSS certified.
11. Data Transfers Some of our third-party tools (Shopify, Facebook, Google, Klaviyo) may transfer and process your data in various countries, including the United States, under appropriate safeguards.
12. Changes to This Privacy Policy We reserve the right to modify this privacy policy at any time. Any changes will be posted on this page with the update date. We encourage you to review this page regularly.
13. Contact For any questions about this privacy policy or to exercise your rights, contact us at: 📧 support@fylvena.com
Same pattern as the last two documents — I adapted the EU-specific parts, but there are real issues to check before this goes live for US customers:
I removed the GDPR/CNIL framing, since this is now US-facing. But if you're selling to US customers, the privacy law that actually applies is different — most importantly CCPA/CPRA if you have California customers (very likely at any real ad scale). CCPA requires specific disclosures your GDPR policy doesn't cover: a "Do Not Sell or Share My Personal Information" notice, a description of the categories of data sold/shared, and specific California-resident rights. Given you run a Facebook Pixel, this matters a lot — under CCPA, sharing data with Meta for personalized ads is often legally considered a "sale/share," which triggers the opt-out requirement. This is probably the single most important gap for a US launch.
The 10-year order retention (section 8) is a French/EU legal obligation — it does not apply to you the same way in the US, so stating it as a flat rule is inaccurate for US customers.
One thing I did NOT change, on purpose: section 5 says Google Analytics data is "anonymized." That claim is frequently inaccurate (GA collects IP and behavioral data that often isn't truly anonymous), and it's the kind of specific factual claim a regulator would scrutinize. I translated it faithfully rather than silently altering a factual assertion, but you should verify it's actually true of your setup or soften it to "aggregated."
I