Privacy Policy

KIMAIAN (sole trader registered in France, SIREN: 951 199 744, Girancourt, France) is committed to protecting the privacy of its customers. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have.

It applies to all information collected via kimaian.com, by email, or through any interaction with our customer service.

Data you provide directly:

• Name, email address, postal address, phone number
• Order history and preferences
• Messages sent via our contact form or by email
• Reviews and comments submitted on the site

Data collected automatically:

• IP address, browser type, operating system
• Pages visited, visit duration, traffic source
• Cookie data — see our Cookie Policy

Payment information is processed exclusively by our certified payment providers and is never stored by KIMAIAN.

We use your data for the following purposes:

• Order fulfilment — processing, preparing, shipping and tracking your purchases
• Customer service — responding to your enquiries and managing returns
• Communication — order confirmations, shipping notifications, newsletters (with your consent)
• Site improvement — analysing navigation behaviour to optimise your experience
• Legal compliance — meeting our accounting, tax and regulatory obligations
• Fraud prevention — detecting and preventing fraudulent transactions

In accordance with the General Data Protection Regulation (GDPR), the processing of your data is based on the following legal grounds:

• Performance of contract — processing necessary to fulfil your order
• Consent — newsletters and marketing communications (withdrawable at any time)
• Legitimate interest — fraud prevention and service improvement
• Legal obligation — retention of accounting and tax records

We never sell your personal data. Your information may only be shared with the following trusted service providers, strictly within the scope of our operations:

• Shopify Inc. — online store hosting and order management
• PayPal, Klarna, Shop Pay, Apple Pay — secure payment processing
• Carriers — your delivery address, solely for the purpose of shipping your order
• Analytics tools — audience measurement and site performance (GDPR-compliant)

All processors are contractually bound to protect your data and use it only for the purposes for which it is shared.

We retain your data only for as long as necessary for the purposes for which it was collected:

• Order data — 10 years (legal accounting obligation)
• Customer account data — duration of the commercial relationship + 3 years
• Navigation data — maximum 13 months
• Newsletter subscriptions — until unsubscription or 3 years of inactivity

If you reside in the European Union, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at contact@kimaian.com. We will respond within one month.

You also have the right to lodge a complaint with the CNIL (French data protection authority): www.cnil.fr

KIMAIAN implements appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. All transactions are encrypted via SSL. Your banking details never pass through our servers.

In the event of a data breach likely to affect your rights, we will notify you within the timeframe required by applicable regulations.

Some of our service providers — including Shopify (based in Canada) and PayPal (based in the United States) — may process your data outside the European Union. These transfers are governed by appropriate safeguards, including standard contractual clauses, in accordance with Articles 46 et seq. of the GDPR.

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or applicable regulations. The version in force is the one displayed on this page. In the event of a material change, we will notify you by email or via a notice on the site.

For any questions relating to the protection of your personal data, please contact us at contact@kimaian.com.