Skip to content

Service

Privacy Policy

This policy explains what personal data we collect, why, how long we keep it and how you exercise your rights under the General Data Protection Regulation (GDPR) and the French data protection act.

Who is responsible

  • Controller: JAAB VENTURES LLC
  • Registered office: 8206 Louisiana Blvd NE, Ste A #10751, 87113 Albuquerque, NM, United States
  • Contact for privacy requests: [email protected]

What we collect, why, and on what basis

  • Order data (name, delivery and billing address, email, telephone, pieces ordered, amounts, order history): to take, deliver and invoice your order, and to answer you about it. Basis: performance of the contract. Invoices are also kept to meet our accounting and tax obligations. Basis: legal obligation.
  • Account data (the same, plus your password stored as a hash, your saved addresses and your wishlist): to give you an account. Basis: performance of the contract.
  • Messages you send us and our replies: to handle your request. Basis: legitimate interest in answering our customers.
  • Payment data: the card number is entered on Stripe systems and never reaches ours. We keep the payment reference, the amount, the result and the last four digits. Basis: performance of the contract and legal obligation.
  • Technical and security data (connection logs, failed sign-in counters, anti-fraud signals): to keep accounts and the shop safe. Basis: legitimate interest in security.
  • Audience measurement and advertising cookies: only if you accept them in the cookie banner. Basis: consent.

We do not sell personal data and we do not take decisions about you by automated means alone.

How long we keep it

  • Orders and invoices: 10 years from the end of the accounting year, as French commercial law requires.
  • Customer account: until you delete it, or 3 years after your last activity, after which we ask you whether to keep it.
  • Messages: 3 years from the last exchange.
  • Security and connection logs: 12 months.
  • Cookie consent and the cookies you accepted: 6 months.

Who else processes it

We use a small number of processors, each bound by a contract under article 28 GDPR:

  • Stripe: card payments and fraud prevention when card payment is offered.
  • Cloudflare, Inc. (United States): delivery, caching and protection of the storefront.
  • Our transactional email service: order, account and service messages. Contact us for the current provider and its processing terms.
  • Google Ireland Ltd.: Google Tag Manager and Google Analytics, loaded only after you accept analytics cookies.
  • Our print-on-demand partner: production and shipping of the pieces printed to order for us. It receives the order lines, your name, delivery address, email and telephone, so the piece can be printed and delivered, and keeps the order record for the time its own tax law requires.
  • Our carriers: the delivery address and a contact detail, so the parcel can be delivered.
  • Our hosting provider: Hostinger International Ltd
  • Hosting provider address: 61 Lordou Vironos Street, 6023 Larnaca, Cyprus

Transfers outside the European Union

Some service providers process data outside the European Union, including in the United States. Production and dispatch locations depend on the garment and fulfilment partner. Contact us for the providers and transfer safeguards applicable to your order.

Your rights

You may ask for access to your data, correct it, have it deleted, object to or restrict its processing, receive it in a portable format, withdraw a consent you have given, and give instructions about what happens to your data after your death.

Write to [email protected], and we answer within one month, asking for proof of identity only where there is a real doubt about who is asking.

If you are not satisfied with our answer you may complain to the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr, or to the supervisory authority of the country where you live.

Cookies

The site sets the cookies it needs to work, and, with your consent, cookies for audience measurement and advertising. What each one does, how long it lasts and how to change your choice are set out on the Cookies page.