Privacy policy
Effective from May 6, 2026.
1. Preamble
PETTY LEMON places fundamental importance on the privacy of its customers and visitors. This Privacy Policy describes how personal data is collected, processed, and stored when using pettylemon.com.
It complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act, as amended.
2. Data Controller
The data controller is:
Emilie COILLOT, operating under the trade name PETTY LEMON, as Individual Entrepreneur under the French micro-entreprise regime.
Address: 22 Allée des Oliviers, 06330 Roquefort-les-Pins, France French Business ID (SIRET): 10431861300015 Email: contact@pettylemon.com
3. Data Collected
PETTY LEMON collects the following categories of data:
When placing an order:
- Identity: first and last name
- Contact details: email, postal address, phone number (optional)
- Payment data: processed directly by our payment provider (Shopify Payments / Stripe). PETTY LEMON does not store your bank details.
- Order history
When subscribing to the newsletter:
- Subscription date
- Optional preferences (language, interests if provided)
When browsing the site:
- IP address
- Browser type and device
- Pages viewed, time spent, browsing path
- Cookies and similar identifiers (details in the Cookie Policy)
When contacting us:
- Message content
4. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Order management and delivery | Performance of contract |
| Customer service (questions, returns) | Performance of contract / Legitimate interest |
| Newsletter | Consent |
| Customer account management (if applicable) | Performance of contract |
| Audience measurement and statistics | Consent |
| Targeted advertising (Meta, Google) | Consent |
| Fraud prevention | Legitimate interest |
| Legal obligations (accounting, taxation) | Legal obligation |
5. Processors
To operate the service, PETTY LEMON uses the following processors. Each has signed a GDPR-compliant data processing agreement:
| Processor | Purpose | Location |
|---|---|---|
| Shopify International Limited | Site hosting, e-commerce infrastructure | Ireland / Canada |
| Shopify Payments / Stripe | Payment processing | EU / United States |
| Partner print atelier | Product printing and shipping | Outside EU |
| Klaviyo Inc. | Newsletter delivery, email automation | United States |
| Meta Platforms Inc. | Facebook/Instagram Pixel for advertising measurement | United States |
| Google LLC | Google Analytics 4 for audience measurement | United States |
6. Data Transfers Outside the European Union
Some data may be transferred to countries outside the European Union, particularly to the United States (Klaviyo, Meta, Google).
These transfers are governed by Standard Contractual Clauses approved by the European Commission and, where applicable, by the Data Privacy Framework (EU-US framework adopted in 2023). These mechanisms ensure a level of data protection equivalent to that of the GDPR.
7. Data Retention Periods
| Data type | Retention period |
|---|---|
| Customer data (orders) | 5 years after last order, then archived 5 years for accounting obligations |
| Newsletter email | Until unsubscription, then deleted within 30 days |
| Browsing data (analytics cookies) | Maximum 13 months |
| Prospecting data (Meta, Google) | Maximum 13 months |
| Customer service exchanges | 3 years after last contact |
| Payment data | Not stored by PETTY LEMON (handled by Shopify Payments) |
8. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access: obtain a copy of your data
- Right to rectification: correct inaccurate data
- Right to erasure ("right to be forgotten"): have your data deleted
- Right to restriction of processing
- Right to data portability: retrieve your data in a structured format
- Right to object to processing (including profiling and direct marketing)
- Right to withdraw consent at any time
- Right to define post-mortem directives regarding your data
To exercise these rights, write to contact@pettylemon.com specifying the nature of your request. We respond within 30 days maximum.
In case of unsatisfactory response, you may file a complaint with the CNIL (French Data Protection Authority):
- Online: www.cnil.fr/fr/plaintes
- Mail: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
9. Security
PETTY LEMON implements appropriate technical and organisational measures to protect your data against loss, alteration, or unauthorised access. This includes:
- HTTPS/TLS encryption for all communications
- Hosting on Shopify infrastructure certified PCI-DSS and ISO 27001
- Access to data limited to authorised persons
- Strong passwords and two-factor authentication
10. Cookies
The use of cookies is detailed in our dedicated Cookie Policy, accessible from the site footer.
11. Policy Modifications
PETTY LEMON reserves the right to modify this Privacy Policy. Modifications take effect upon publication. The date of last update is shown at the top of the document.
12. Contact
For any question regarding this policy:
Email: contact@pettylemon.com Address: 22 Allée des Oliviers, 06330 Roquefort-les-Pins, France