Privacy policy
Last updated: February 2026
At Darksails, we are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR), the French Data Protection Act (Loi Informatique et Libertés), and applicable European data protection laws.
1. Data controller
DARKSAILS — French micro-entreprise (sole trader)
Jérémy Dubé
27 avenue Edouard Bourlaux, 33140 Villenave d'Ornon, France
SIRET: 517 418 133 00024 — VAT not applicable (Art. 293 B CGI)
Contact: admin@darksails.fr
2. Data we collect
When you place an order: name, postal address, email address, phone number, payment information (processed exclusively by Shopify Payments, PCI DSS certified — we never store your card details).
When you browse: IP address, browser type, pages visited, on-site behaviour — collected via cookies and tracking pixels.
When you contact us: any message or feedback you send us.
3. Legal basis and purposes
| Purpose | Legal basis |
|---|---|
| Processing and delivering orders | Contract performance |
| Customer service, returns, refunds | Contract performance |
| Accounting and tax compliance | Legal obligation |
| Site security and fraud prevention | Legitimate interest |
| Marketing emails and newsletters | Consent |
| Analytics and advertising cookies | Consent |
4. Data recipient
We share your data only with service providers necessary to run our business:
- Shopify — hosting and payments (servers in Canada and the United States)
- Carriers (La Poste / Colissimo) — name, address, phone number for delivery
- Google & YouTube — traffic analytics and targeted advertising (with consent)
- Pinterest — targeted advertising and remarketing (with consent)
- Judge.me — product review management
We never sell your data to third parties.
5. International transfers
Shopify stores data in Canada and the United States. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, in compliance with GDPR.
6. Data retention
- Order data: 3 years after the last interaction
- Accounting records: 10 years (French legal requirement)
- Marketing data: until you unsubscribe
- Analytics (Google): 26 months
7. Cookies
We use two categories of cookies:
Essential cookies (always active) — required for the site to function: cart, session, security. Legal basis: contract performance.
Analytics and advertising cookies (subject to consent) — Google Analytics, Pinterest. You can manage your preferences at any time via our consent banner or through the following links:
- Google: https://tools.google.com/dlpage/gaoptout
- Pinterest: https://help.pinterest.com/en/article/personalization-and-data
8. Marketing communications
We send promotional emails only with your consent. To unsubscribe, click "Unsubscribe" at the bottom of any email or contact us at admin@darksails.fr.
Even after unsubscribing, you will still receive order confirmations and shipping updates.
9. Your rights
Under GDPR, you have the following rights: access, rectification, erasure, restriction, portability, and objection.
To exercise your rights: admin@darksails.fr — we respond within one month.
If you are not satisfied, you may lodge a complaint with the CNIL:
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr — +33 1 53 73 22 22
10. Security
We implement appropriate technical and organisational measures to protect your data: SSL/TLS encryption, PCI DSS-certified payment processing, and access controls. In the event of a data breach posing a risk to your rights, we will notify the CNIL within 72 hours.
11. Changes
We reserve the right to update this policy at any time. The date at the top of this page will reflect any changes. Your continued use of the Site constitutes acceptance of the current policy.
