Privacy Policy

Last updated: May 2026

This policy complies with the GDPR (EU Regulation 2016/679) and the French Data Protection Act.

1. Data Controller

LPP SAS, 15 avenue de l'Étoile, 44500 La Baule, France. Contact: info@palett.fr.

2. Data Collected

Identification: name, surname, address, email, phone number (optional)
Transactions: orders, payment methods (banking details are not stored by LPP SAS)
Browsing: functional cookies, audience measurement
Marketing: newsletter sign-up (subject to consent)

3. Purposes

Order management, shipping, invoicing
Customer service
Marketing communications (subject to consent)
Fraud prevention
Legal obligations (accounting, tax)

4. Data Retention

Customer account: duration of relationship + 3 years
Transactions: 10 years (accounting requirement)
Newsletter: until unsubscribed
Cookies: 6 to 13 months maximum

5. Recipients

LPP SAS teams and service providers: Shopify (hosting and payment), La Poste / Colissimo / Mondial Relay (delivery), Shopify Messaging (email). Your data is never sold.

6. Your Rights

Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. These rights can be exercised at info@palett.fr. Complaints can be filed with the CNIL (the French data protection authority): www.cnil.fr.

7. Cookies

A consent banner appears on first visit. Preferences can be changed anytime via Cookie Settings in the footer.

8. Security

Hosted by Shopify, PCI DSS Level 1 certified.