Privacy Policy

1. Who we are

[***] ("Domoluce"), registered address at [***], is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at [***] (data protection contact email).

2. Data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identification data — name, surname, email address, billing and shipping address, phone number.
• Transaction data — purchase history, payment method details (processed securely by our payment provider — we do not store card numbers), order and returns information.
• Account data — login credentials and preferences if you create an account on our website.
• Communication data — messages you send us via contact forms, email or customer service.
• Marketing preferences — your subscription status to our newsletter and communication preferences.
• Browsing and technical data — IP address, browser type, pages visited, time spent on site, referring URLs (collected via cookies and analytics tools — see Section 8).

We only collect data that is necessary for the purposes described in this Policy. Fields marked as mandatory in our forms are required to provide you with the relevant service.

3. Why we use your data

3.1 — Managing your account

If you register as a user, we process your data to identify you, give you access to your account, and manage your registration. You may delete your account at any time by contacting us.

3.2 — Processing your orders

We use your data to process and fulfil your purchases, manage payments, organise delivery, handle returns or exchanges, issue invoices, and communicate with you about your order status.

3.3 — Customer service

When you contact us, we process only the data strictly necessary to respond to and resolve your query.

3.4 — Newsletter and marketing

If you subscribe to our newsletter, we will send you information about our collections, new products, and events. We may personalise these communications based on your purchase history and browsing behaviour. You can unsubscribe at any time, free of charge, via the link included in every email or by contacting us directly.

3.5 — Website analytics

We analyse how visitors use our website in order to improve its design, content and functionality. This processing uses anonymised or aggregated data wherever possible.

3.6 — Fraud prevention

We may process certain data to detect and prevent fraudulent transactions, in order to protect both our customers and Domoluce.

4. Legal basis for processing

We process your personal data on the following legal bases, depending on the purpose:

• Performance of a contract — processing necessary to fulfil your order, manage your account, or provide a service you have requested.
• Consent — when you subscribe to our newsletter or agree to non-essential cookies. You may withdraw your consent at any time.
• Legitimate interest — for website analytics, fraud prevention, and responding to enquiries, where our legitimate business interest does not override your fundamental rights.
• Legal obligation — where processing is required by applicable law (e.g. tax and accounting records).

5. How long we keep your data

• Account data — retained for as long as your account remains active. Deleted upon your request.
• Order and transaction data — kept for the period required by applicable commercial and tax legislation (generally 6 years in France).
• Customer service communications — retained for the time necessary to resolve your query, plus any applicable limitation period.
• Newsletter subscription — until you unsubscribe.
• Analytics data — anonymised or deleted after [***] months.

After the applicable retention period, your data will be securely deleted or irreversibly anonymised.

6. Who we share your data with

We do not sell your personal data. We may share your data with trusted third-party service providers who assist us in operating our business, including:

• E-commerce platform — Shopify Inc. (our website and store are hosted on Shopify; see Shopify's privacy policy at shopify.com/legal/privacy).
• Payment processors — to handle transactions securely. Card details are never stored by Domoluce.
• Logistics and delivery partners — to fulfil and ship your orders.
• Marketing and email platforms — to manage newsletter subscriptions and send communications.
• Analytics providers — to help us understand how our website is used (e.g. Google Analytics).
• Legal or regulatory authorities — where required by law or to protect our legal rights.

All third parties with whom we share your data are bound by contractual obligations to keep your information secure and to use it only for the purposes we specify.

Some service providers may be located outside the European Economic Area. In such cases, we ensure adequate safeguards are in place (e.g. Standard Contractual Clauses approved by the European Commission).

7. Your rights

Under the General Data Protection Regulation (GDPR) and applicable national law, you have the following rights in relation to your personal data:

• Right of access — to obtain a copy of the personal data we hold about you.
• Right of rectification — to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
• Right to restriction — to request that we limit the processing of your data in certain circumstances.
• Right to data portability — to receive your data in a structured, commonly used and machine-readable format, where processing is based on consent or contract.
• Right to object — to object to processing based on legitimate interest, including profiling for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [***]. We will respond within 30 days. We may ask you to verify your identity before processing your request.

You also have the right to lodge a complaint with the relevant data protection supervisory authority. In France: Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr.

8. Cookies

What are cookies?

Cookies are small text files stored on your device when you visit a website. They allow the site to remember your actions and preferences over time, and help us understand how visitors interact with our content.

Types of cookies we use

• Strictly necessary cookies — essential for the website to function. They enable core features such as adding items to your cart, the checkout process, and your session security. These cookies cannot be disabled.
• Preference cookies — remember your choices (language, currency, region) to provide a more personalised experience.
• Analytics cookies — help us understand how visitors use our site (pages visited, time spent, errors encountered). Data is aggregated and used to improve our website. These require your consent.
• Marketing cookies — used to track visits across websites and show relevant advertising. These require your consent.

Managing cookies

When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can change your preferences at any time via the cookie settings panel accessible in the footer of our website.

You may also manage cookies directly in your browser settings. Note that disabling certain cookies may affect the functionality of the website.

Third-party cookies

Some cookies are set by third-party services we use (e.g. analytics or advertising platforms). We do not control these cookies — please refer to the relevant third party's privacy policy for more information.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make significant changes, we will notify you by posting a notice on our website or, where appropriate, by email.

We encourage you to review this page periodically. The date at the top of this page indicates when the policy was last updated.

10. Contact

For any questions about this Privacy Policy, to exercise your rights, or to make a complaint, please contact us: