Privacy Policy

Last updated: 21 June 2026

Data controller

NINA Boutique — Lucio Della Rocca, 12 Rue Venizelos, 06400 Cannes. Contact: nina.boutique@orange.fr.

Data collected

  • Identity and contact details (name, email, phone, shipping address);
  • Order data (items, amounts, history);
  • Payment data: processed exclusively by Stripe (we store no card data);
  • Browsing and account data (login credentials, preferences).

Purposes and legal bases

  • Order and account management — performance of the contract;
  • Responding to enquiries — legitimate interest / consent;
  • Accounting and tax obligations — legal obligation;
  • Security and fraud prevention — legitimate interest.

Recipients and processors

Your data is intended for the Seller and strictly necessary processors: Stripe (payment), Resend (email), Vercel (hosting) and Neon (database, EU). No data is sold.

Transfers outside the EU

Some providers (Stripe, Vercel) may process data in the United States, subject to appropriate safeguards (EU Standard Contractual Clauses).

Retention periods

  • Order / invoicing data: 10 years (accounting obligation);
  • Customer account: until account deletion;
  • Contact messages: 3 years from the last exchange.

Your rights

Under the GDPR, you have rights of access, rectification, erasure, portability, objection and restriction. Exercise them from your "My data" area (export and deletion) or by writing to nina.boutique@orange.fr. You may lodge a complaint with the CNIL (cnil.fr).

Cookies

See our Cookie Policy.