Data Protection (GDPR)

Last updated: September 30, 2026

At TYORA, your personal data is used for one thing only: to process your orders and respond to you. This page summarizes, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés), what we collect, why, for how long, and how to exercise your rights. Full details are available in our privacy policy.

Data Controller

TYORA. To contact us, please use our contact form.

Data we collect

  • Orders and delivery: name, addresses, email, phone number, items ordered. Bank card details are processed by our payment provider and are never stored by TYORA.
  • Customer account (optional): login details and order history.
  • Contact form: name, email, order number, and your message.
  • Newsletter: your email, only if you subscribe.
  • Browsing: cookies and technical data (device, browser, pages viewed), according to your choices in the cookie banner.

Why, and on what legal basis

  • Processing and delivering your orders, managing after-sales service: performance of the contract.
  • Maintaining our accounting and meeting tax obligations: legal obligation.
  • Responding to your messages: legitimate interest to assist you.
  • Sending you our newsletter: your consent, which can be withdrawn at any time.
  • Audience measurement and advertising: your consent, given or refused via the cookie banner.
  • Site security and fraud prevention: legitimate interest.

How long we keep your data

  • Invoices and accounting documents: 10 years (French Commercial Code).
  • Order data useful for warranty and after-sales service: for the duration of the legal warranties.
  • Contact form messages: up to 3 years after our last exchange.
  • Newsletter: until you unsubscribe, or 3 years without opening our emails.
  • Cookies: 13 months maximum; your choice will be requested again after 6 months at the latest.

Who has access to it

Only TYORA and the service providers necessary for the shop to function: Shopify (hosting the site and the store), our payment providers, and carriers for delivery. We do not sell or rent your data.

Some providers, including Shopify, may process data outside the European Union. These transfers are governed by the European Commission's standard contractual clauses or an adequacy decision.

Your rights

At any time, you can:

  • access your data and obtain a copy;
  • have it corrected or erased;
  • restrict its use or object to it, particularly for marketing purposes;
  • retrieve the data you provided to us in a readable format (portability);
  • withdraw your consent (newsletter, cookies), without affecting processing carried out prior to withdrawal;
  • define instructions regarding the fate of your data after your death.

To exercise these rights, please write to us via our contact form. We will respond within one month at most. We may ask you to confirm your identity.

If you believe your rights are not being respected, you may file a complaint with the CNIL: www.cnil.fr/fr/plaintes, or by mail at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

Cookies

Upon your first visit, a banner allows you to accept or refuse non-essential cookies (audience measurement, advertising). Refusing is as easy as accepting, and your choice is respected. Strictly necessary cookies (shopping cart, security, payment) cannot be disabled, as the shop would no longer function.

You can change your mind at any time using the "Cookie preferences" link at the bottom of every page.