Privacy Policy

Neovia takes the protection of your personal data seriously. This policy explains what data we collect when you browse our site or place an order, how we use it, who we share it with and the rights you have, in accordance with Regulation (EU) 2016/679 (“GDPR”) and the French Data Protection Act.

1. Data controller

[TO BE COMPLETED: registered company name], [TO BE COMPLETED: registered office address], registered with the RCS of [TO BE COMPLETED] under no. [TO BE COMPLETED].
Privacy contact: privacy@neovia.com
Data Protection Officer: [TO BE COMPLETED if a DPO is appointed — otherwise delete this line]

2. Data we collect

• Identity and contact: first and last name, e-mail address, phone number, billing and delivery addresses.
• Order: products purchased, sizes and colours, amounts, order history, exchanges with customer service.
• Payment: processed exclusively by our provider Stripe. Neovia never receives or stores your card number; we only receive the transaction status and the last four digits.
• Customer account: login, password (hashed), preferences.
• Browsing: IP address, device and browser type, pages viewed, chosen language, audience-measurement data (see section 8).
• Newsletter: e-mail address and date of consent.

3. Purposes and legal bases

4. Recipients and transfers outside the European Union

Your data is accessible to authorised Neovia staff and is shared, strictly to the extent necessary, with the following providers:

• Stripe (secure payment);
• Our partner warehouse located outside the European Union, which prepares and ships orders and receives your name, delivery address, phone number and the list of items ordered;
• Carriers and postal services that deliver your order;
• Our hosting provider and technical providers (e-mailing, audience measurement — see section 8).

Transfers outside the EU: shipping from a third country involves transferring your delivery data to a country outside the European Union that does not benefit from an adequacy decision of the European Commission. This transfer is governed by the Standard Contractual Clauses adopted by the European Commission, signed with our logistics partner, and is limited to the data strictly necessary for delivery. Audience-measurement and advertising tools (Google, Meta) may transfer data to the United States under the EU–US Data Privacy Framework or Standard Contractual Clauses.

Neovia never sells or rents your personal data.

5. Retention periods

• Order data and invoices: 10 years from the end of the financial year (accounting and tax obligations).
• Customer account: until you delete it, or after 3 years of inactivity.
• Prospects and newsletter: 3 years from the last contact, or until consent is withdrawn.
• Customer-service exchanges: 3 years from the closure of the request.
• Cookies and trackers: 13 months maximum; proof of consent kept for 6 months.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, objection and portability of your data, as well as the right to set directives on the fate of your data after your death. You may withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, write to privacy@neovia.com or to the postal address given in section 1, enclosing proof of identity if necessary. We reply within one month.

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr). Residents of Canada may also contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

7. Security

We implement appropriate technical and organisational measures: encrypted connections (HTTPS/TLS), payment delegated to a PCI-DSS-certified provider, hashed passwords, access to data restricted to authorised persons, regular backups.

8. Cookies and trackers

Our site uses strictly necessary cookies (cart, account login, chosen language, security, your cookie choices) and, subject to your consent, audience-measurement (Google Analytics 4) and advertising (Meta Pixel) trackers. Full details, including how to change your choices at any time, are on our Cookie Policy page.

9. Minors

The site is intended for persons aged 16 and over. If you believe a minor has provided us with data without the authorisation of a holder of parental responsibility, please contact us so that we can delete it.

10. Changes

This policy may be updated to reflect changes in our practices or in the law. The date of the last update is shown at the top of this page. In the event of a substantial change, we will inform you by any appropriate means.

11. Contact

For any question about your personal data: privacy@neovia.com.