PRIVACY POLICY

AKALYA

Last updated: 21/02/2026

1. DATA CONTROLLER IDENTITY
This Privacy Policy describes how personal data is collected, used, and protected when you use the AKALYA website.

The data controller is:

Sole trader – business currently being registered
Trading name: AKALYA
Email: akaliya.contact@gmail.com

Hereinafter referred to as "the Data Controller".

2. APPLICABLE LEGAL FRAMEWORK
Personal data processing is carried out in accordance with: the General Data Protection Regulation (GDPR), the French Data Protection Act, and the provisions of the French Consumer Code where applicable.

3. PERSONAL DATA COLLECTED
AKALYA may collect the following categories of data:

  • 3.1 Identification data
    Last name
  • First name
  • Postal address
  • Email address
  • Phone number

3.2 Order-related data
Purchase history

  • Details of products ordered
  • Transaction amounts
  • Delivery information

3.3 Payment data
Payments are processed via the Shopify Inc. platform and its service providers.

AKALYA never has access to full credit card numbers.

3.4 Browsing data

  • IP address
  • Browser type
  • Device used
  • Pages viewed
  • Time spent on the site
  • Cookies and trackers

4. PURPOSES OF PROCESSING
Data is collected for:

  • Order management and processing
  • Execution of the sales contract
  • Customer service management
  • Payment management
  • Fraud prevention
  • Improving user experience
  • Sending commercial information (subject to consent)
  • Compliance with legal and accounting obligations

5. LEGAL BASES FOR PROCESSING
Processing is based on:

  • Performance of the contract (order)
  • Consent (newsletter, marketing cookies)
  • Legitimate interest (security, fraud prevention)
  • Legal obligations (accounting, taxation)

6. DATA RECIPIENTS
Data may only be transferred to the following recipients:

Shopify Inc. (e-commerce hosting and infrastructure)

Payment service providers

Logistics service providers and carriers

Technical service providers (maintenance, email marketing)

No personal data is sold, rented, or transferred to third parties for commercial purposes.

7. TRANSFERS OUTSIDE THE EUROPEAN UNION
As part of the use of Shopify and certain technical tools, data may be transferred outside the European Union.

These transfers are governed by: standard contractual clauses approved by the European Commission, or any other mechanism compliant with the GDPR.

8. RETENTION PERIOD
Data is retained as follows:

Customer data: for the duration of the contractual relationship + legal obligations (up to 10 years for accounting obligations)

Marketing data: until consent is withdrawn

Browsing data: maximum period of 13 months

9. DATA SECURITY
AKALYA implements appropriate technical and organizational measures to ensure:

  • confidentiality,
  • integrity,
  • availability of data,
  • protection against unauthorized access.
  • Payments are secured using SSL encryption protocols.


10. USER RIGHTS
In accordance with the GDPR, you have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to object
  • Right to restriction of processing
  • Right to data portability
  • Right to withdraw your consent at any time

Any request must be sent to:
akaliya.contact@gmail.com

A response will be provided within a maximum period of one month. In the event of a dispute, you may file a complaint with the CNIL.

11. COOKIES
The website uses several categories of cookies:

11.1 Strictly necessary cookies
Essential for the operation of the website (shopping cart, user session).

11.2 Analytical cookies
Used to measure audience and improve the website.

11.3 Marketing cookies
Used to offer personalized advertising.

A cookie management banner allows users to accept, refuse, or configure cookies.

Users can also change their settings via their browser.

12. NEWSLETTER AND COMMERCIAL COMMUNICATIONS
The sending of commercial communications is subject to the user's prior consent. The user can unsubscribe at any time via the link provided in each email.

13. MINORS
The website is not intended for persons under 18 years of age. If data concerning a minor is collected by mistake, it will be deleted as soon as possible.

14. POLICY AMENDMENTS
AKALYA reserves the right to amend this Privacy Policy at any time.

The applicable version is the one published on the website at the time of consultation.