PRIVACY POLICY

PRIVACY POLICY

PRIVACY POLICY

Last updated: 16 September 2026

This Privacy Policy explains how EXVEGA processes personal data when you visit EXVEGA.EU, place an order or contact us.

1. Who Is Responsible for Your Data?

The controller responsible for the processing described in this policy is:

EXVEGA
58 Rue de Monceau
75008 Paris
France

Email: support@exvega.eu
Telephone: +90 850 532 36 86

For privacy enquiries or requests concerning your personal data, please contact the email address above with the subject “Privacy Request”.

2. Information We Process

Depending on how you interact with us, the information concerned may include:

  • Identity and contact information: your name, email address, telephone number and billing or delivery address.

  • Order information: products purchased, order references, delivery instructions, invoices, returns and refunds.

  • Payment and transaction information: payment status, transaction references and information made available by the payment provider.

  • Customer service information: messages, correspondence and photographs or videos you provide when requesting assistance.

  • Account information: information associated with a customer account, if you create or use one.

  • Technical information: IP address, browser and device information, access logs and information necessary to operate and secure the website.

  • Preferences: language, privacy choices and marketing preferences where applicable.

Please do not send payment card security codes, passwords or unnecessary sensitive information in customer service messages.

3. Sources of Information

We receive information directly from you when you place an order, contact us or enter information on our website.

We also receive information from service providers involved in your transaction, such as payment confirmations and delivery status updates.

Some technical information is generated when you access the website. Optional tracking is subject to the applicable consent requirements.

4. Purposes and Legal Bases

We process personal data for the following purposes:

Orders and delivery — performance of a contract

To take and fulfil orders, administer payments, arrange delivery and communicate with you about your purchase.

Pre-purchase enquiries — steps requested before entering a contract

To answer questions necessary to help you decide whether to purchase a product.

Returns, guarantees and legal obligations — performance of a contract and compliance with legal obligations, as applicable

To administer returns, refunds and statutory guarantees, maintain required records and respond to lawful requests.

Security and fraud prevention — legitimate interests

To protect customers, prevent misuse and maintain the security of our store. These interests are balanced against your rights and freedoms.

General correspondence and legal claims — legitimate interests

To respond to general enquiries and establish, exercise or defend legal claims.

Optional marketing and tracking — consent where required

Where these activities are enabled, the applicable tools, purposes and legal bases are described in the additional-services section below and in our Cookie Policy.

Accepting this Privacy Policy does not itself constitute consent to optional marketing or tracking.

5. Required and Optional Information

Information marked as required during checkout is needed to process the order, comply with legal requirements or arrange delivery.

If you do not provide necessary information, we may be unable to complete the transaction or provide the requested assistance.

Optional information is identified where collected. You do not have to consent to optional marketing to make a purchase.

6. Who Receives Your Information?

Access is limited to people and organisations that need the information for the relevant purpose. Depending on your interaction, these may include:

  • Authorised personnel handling orders and customer support;

  • Shopify, which provides our e-commerce platform;

  • Payment providers involved in your chosen payment method;

  • Warehousing, fulfilment and delivery providers;

  • IT and communications service providers;

  • Accountants, legal advisers and other professional advisers;

  • Authorities where disclosure is legally required.

Providers may act on our instructions or as independent controllers for particular activities. Their role depends on the service concerned.

7. Shopify

Our store uses Shopify to support website operation and online transactions.

Shopify processes certain information on our behalf. For particular services and purposes, Shopify may also act as an independent controller.

For information about Shopify’s own processing and the rights available in relation to it, please read the Shopify Consumer Privacy Policy.

This does not replace EXVEGA’s responsibility for the processing for which EXVEGA is the controller.

8. Additional Services and Integrations

[COMPLETE BEFORE PUBLICATION: Identify the additional services actually enabled, including payment, customer support, email marketing, reviews, analytics, advertising pixels and Shopify enhanced services where applicable. For each relevant activity, specify the provider, information shared, purpose, legal basis and a link to its privacy information. Remove activities that are not used.]

9. International Transfers

Some service providers may process personal data outside the European Economic Area.

Where a transfer requires safeguards under the GDPR, the applicable mechanism may include an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary measures where necessary.

Shopify’s contractual arrangements concerning processing and transfers are described in its Data Processing Addendum.

[COMPLETE BEFORE PUBLICATION: Identify the actual non-EEA recipients, countries and transfer safeguards for EXVEGA’s other arrangements. Specifically confirm whether a separate EXVEGA group company or service provider in Türkiye accesses EU customer information and document the applicable arrangement.]

You may contact support@exvega.eu for information about applicable transfer safeguards and how to obtain a copy, subject to lawful redactions.

10. How Long We Keep Information

Personal data is retained according to the purpose for which it was collected, applicable legal obligations and any need to establish or defend legal claims.

Records retained for legal reasons should be separated from routine operational use, with access restricted appropriately.

[COMPLETE BEFORE PUBLICATION: Insert the actual retention periods or precise criteria for order and invoice records, customer accounts, support requests, warranty files, security logs, marketing contacts and consent records. Confirm the periods required by French accounting and contract-archiving rules and align the store’s deletion settings accordingly.]

Cookie and tracker lifetimes are described separately in our Cookie Policy.

11. Cookies and Similar Technologies

The website uses technologies necessary for functions such as checkout, security and remembering relevant choices.

Optional analytics, advertising or similar technologies require consent where applicable.

Our Cookie Policy explains the technologies actually used, their providers, purposes, lifetimes and the controls available to you.

[COMPLETE BEFORE PUBLICATION: Add the working link or instructions for reopening the store’s cookie preferences and verify that optional trackers are blocked until the required consent is obtained.]

12. Your Rights

Subject to the conditions established by applicable law, you may request access, correction, deletion, restriction or portability of your personal data.

You may object to processing based on legitimate interests. You may object to direct marketing at any time.

Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Contact support@exvega.eu to exercise your rights. We may request proportionate information to verify your identity where necessary.

We normally respond within one month. Where a lawful extension is needed, we will inform you within that month and explain why.

13. Automated Decisions

[COMPLETE BEFORE PUBLICATION: Verify whether fraud checks or other tools make solely automated decisions with legal or similarly significant effects. If they do, describe the purpose, legal basis, meaningful information about the logic, likely consequences and applicable rights to human intervention and contesting the decision. If they do not, replace this instruction with an accurate statement to that effect.]

14. Security

We apply technical and organisational measures appropriate to the risks associated with the personal data concerned.

Please protect access to your email and customer account, and notify us if you suspect unauthorised activity involving your order or account.

15. Complaints

You may lodge a complaint with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), through cnil.fr.

You may also contact the competent supervisory authority in your country of habitual residence, workplace or the location of the alleged infringement.

You do not have to contact EXVEGA before exercising that right.

16. Changes to This Policy

We may update this policy to reflect changes in our services or data processing.

The date above identifies the latest version. Where required, we will provide additional notice or seek consent before introducing a new processing activity.

17. Contact

EXVEGA
58 Rue de Monceau
75008 Paris
France

Privacy enquiries: support@exvega.eu
Telephone: +90 850 532 36 86