Privacy Policy

Privacy Policy

Last updated: 23 August 2026

Data controller

Lilia Gellyni EI — 154 Boulevard Gallieni, 92390 Villeneuve-la-Garenne, France — SIRET 881 506 984 00031
Contact for any data-related question: leybusiness92@gmail.com

Data we collect

  • Identity and contact details: first name, surname, email, phone — provided by you.
  • Addresses: billing and delivery — provided by you.
  • Orders: products, amounts, order history, customer service exchanges.
  • Payment: card type, last four digits, transaction status. We never store full card details.
  • Browsing: IP address, pages viewed, device, cookies — collected automatically.
  • Marketing: newsletter sign-up, interactions with our ads.

Purposes and legal bases

  • Processing and delivering your orders, customer service — performance of the contract (Art. 6.1.b GDPR).
  • Invoicing and accounting — legal obligation (Art. 6.1.c).
  • Newsletter and offers — consent, or legitimate interest for existing customers on similar products (Art. 6.1.a / 6.1.f).
  • Audience measurement and targeted advertising — consent (Art. 6.1.a).
  • Fraud prevention and site security — legitimate interest (Art. 6.1.f).
  • Managing customer reviews — consent / legitimate interest.

Recipients

Your data is accessible to Lilia Gellyni and, within the limits of their assignments, to our processors: Shopify (store hosting and order processing), our payment provider, our carriers, our email and marketing tools, and advertising and measurement platforms — the latter only after your consent. Data may also be shared with our accountant or public authorities where legally required.

Your data is never sold.

Transfers outside the European Union

Some providers are established outside the EU (notably in the United States and Canada). These transfers are covered either by a European Commission adequacy decision or by the Commission’s Standard Contractual Clauses, together with additional security measures.

Retention periods

  • Customer account: 3 years after the last contact.
  • Orders and invoices: 10 years (accounting obligation, Article L.123-22 of the French Commercial Code).
  • Prospects (non-customers): 3 years after the last contact.
  • Non-essential cookies: 13 months maximum; consent stored for 6 months.
  • Fraud data: strictly as long as necessary.

Your rights

Under the GDPR and the French Data Protection Act, you have the right of access, rectification, erasure, restriction, objection and portability, the right to withdraw consent at any time, and the right to give instructions on what happens to your data after your death.

To exercise these rights: leybusiness92@gmail.com. We reply within one month; proof of identity may be requested where there is reasonable doubt.

You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr

Unsubscribing

Every marketing email contains an unsubscribe link. Unsubscribing does not affect transactional emails relating to your orders.

Security

The site is protected by an SSL/TLS certificate. Access to data is restricted and password-protected. In the event of a data breach likely to result in a high risk to your rights, you will be informed in accordance with Article 34 GDPR.

Minors

As our products require a UV/LED lamp, this site is not intended for people under 18 without parental agreement. We do not knowingly collect data from children under 15 without the consent of the holder of parental responsibility.