Privacy Policy
Last updated: October 27, 2026
This policy describes how personal data is processed in connection with browsing the Kipli website, placing orders, delivery, after-sales requests, and marketing communications. It supplements the information provided at the time of collection and applies subject to any specific information provided in the relevant forms.
1. Data Controller and Contact Information
The data controller is KIPLI SAS, a simplified joint-stock company registered with the Paris Trade and Companies Register under number 841 674 302, with its principal place of business located at 200 rue de la Croix Nivert, 75015 Paris, France.
If you have any questions regarding the protection of your personal data or wish to exercise your rights, please contact us at help@kipli.com or by mail at the registered office address listed above. Customer service phone number: +33 (0)1 76 42 11 72.
For questions regarding data protection, you can contact KIPLI at help@kipli.com. The contact information for any Data Protection Officer (DPO) will be provided upon request, if the company has appointed one.
2. Categories of Data Collected
- Identification and contact information: last name, first name, mailing and email addresses, phone number, billing and shipping addresses.
- Orders and Customer Service: products viewed or ordered, purchase amount and history, delivery information, returns, refunds, complaints, and warranties.
- Payment: payment method, transaction status, and information required for billing; complete credit card information is normally processed by payment service providers and is not intended to be retained by KIPLI.
- Customer account and preferences: login credentials, account information, stated preferences, and marketing and privacy choices, if applicable.
- Communication with KIPLI: customer service requests, correspondence, and voluntarily submitted reviews or ratings.
- Browsing and Technical Data: IP address, browser and device information, technical logs, audience measurement data, and cookie identifiers, depending on the choices you have made.
The data actually collected depends on the features used. KIPLI is committed to limiting data collection to what is necessary for the intended purposes.
3. Purposes and Legal Bases
| Purpose | Primary Legal Basis |
|---|---|
| Management of the shopping cart, order, payment, delivery, returns, and customer service | Performance of the Contract or Precontractual Measures |
| Invoice management, accounting and tax obligations, legal requirements | Legal Requirement |
| Management of Guarantees, Disputes, Collections, and Transaction Documentation | Performance of the contract, legal obligation, or legitimate interest in the protection of rights, as applicable |
| Fraud Prevention, Website and System Security | Legitimate interest in protecting transactions and services, subject to a balancing of interests; legal obligation, where applicable |
| Responding to inquiries and managing customer relationships, excluding the direct performance of the contract | Legitimate interest in following up on requests |
| Marketing via email or text message | Consent when required; legal exception applicable to similar products or services for customers, with the right to object |
| Ad Personalization and Non-Essential Cookies | Consent When Required |
| Audience Measurement | Consent, except for trackers that may be eligible for a legal exemption under the applicable conditions |
When processing is based on a legitimate interest, the data subject may object to it under the conditions set forth in the GDPR. Consent may be withdrawn at any time, without retroactive effect.
4. Source of Data
The data comes directly from you when you browse our site, create an account, make a purchase, or contact us; from your device through authorized technologies; or, when necessary and lawful, from service providers involved in fulfilling your order (such as payment or delivery providers).
5. Recipients and Service Providers
Depending on the specific operations involved, the data may be accessible to authorized KIPLI teams as well as to necessary service providers: Shopify (store and network features), payment service providers including Alma when this payment method is selected, banks for wire transfers, carriers and delivery service providers, customer service, hosting and security providers, audience analytics and advertising tools such as Google Analytics 4 and Google Advertising Products, and the consent management provider Axeptio. The exact list of activated applications is subject to verification of the technical configuration. Each service provider receives only the data necessary to perform its tasks. Depending on the processing activity, certain parties may act as KIPLI’s data processors or as separate data controllers; in such cases, their own privacy policies apply to their independent operations. KIPLI does not directly sell customer data. However, certain data processing or sharing for the purpose of personalized advertising may occur through Shopify services and activated marketing tools, subject to the applicable privacy choices and the roles of the various data controllers.
6. Shopify’s Specific Role
The site is operated on the Shopifyplatform. Shopify collects and processes certain data to provide the e-commerce infrastructure, secure transactions, and ensure the proper functioning of services. Shopify may also perform certain processing activities as a separate data controller, depending on the enabled features and its own terms and conditions. Shopify Network Intelligence is enabled for the KIPLI store. This feature may allow Shopify to process information related to user interactions with the store, in combination with data from other stores and Shopify services, in order to improve certain services, personalization, and advertising. For these independent processing activities, Shopify may act as a separate data controller. Consent choices expressed by visitors must be transmitted to Shopify through proper integration with its Customer Privacy API, when required. For Shopify’s independent processing activities, please refer to its consumer privacy policy: https://www.shopify.com/legal/privacy/app-users and its privacy tools: https://privacy.shopify.com/fr.
7. Retention Periods
- Orders, deliveries, and after-sales service: during the term of the contract, and thereafter in restricted access archives for as long as necessary to comply with legal obligations, applicable warranties, and the protection of rights.
- Invoices and accounting documents: generally ten (10) years when the Commercial Code requires this retention period.
- Prospect data: generally retained for up to three (3) years after collection or the prospect’s last active contact, unless there is a relevant renewal or objection.
- Customer data used for marketing purposes: during the business relationship and, in principle, for three (3) years following its termination, subject to the right to object.
- Cookies and consent options: Depending on the purposes, applicable rules, and retention periods actually configured in Axeptio and partner services, the corresponding retention periods are specified in the information available through the cookie management module.
- Payment data: Information strictly necessary for payment, transaction verification, and legal obligations is processed for the appropriate periods of time; KIPLI does not retain full card numbers if the payment service provider processes them directly.
Upon expiration of the applicable retention periods, the data is deleted or anonymized, unless there is a legal obligation to retain it or a need to defend a legal right. Access to the archives is restricted.
8. Cookies and Other Trackers
The Site uses cookies and trackers necessary for its operation. It also offers, through the Axeptio consent manager, the “Google Analytics 4” (audience measurement) and “Google Advertising Products” (ad campaign measurement and effectiveness) services. These services may process online identifiers, browsing data, and other personal data. Non-essential cookies and trackers are subject to prior consent when required by regulation. The Site uses Axeptio to collect visitors’ choices regarding cookies and other trackers. Users must be able to accept, refuse, or customize their preferences, and then change their choices at any time. Opting out must be as simple as opting in. Closing the banner or clicking the “Hide Cookies” button should not be considered consent. The integration of Axeptio with Shopify’s Customer Privacy API and Google Consent Mode v2, as well as the blocking of trackers prior to consent, must be verified in the technical configuration. For additional information on the purposes and partners, users may consult the information presented in the Axeptio module available on the Site. Consent choices are retained and applied in accordance with the administrator’s settings and applicable legal obligations.
9. Data Transfers Outside the European Economic Area
Certain service providers may process data in countries outside the European Economic Area. In such cases, KIPLI ensures that applicable mechanisms are used, such as an adequacy decision by the European Commission or standard contractual clauses, supplemented, if necessary, by additional measures. Data subjects may request information about the relevant safeguards by writing to help@kipli.com.
10. Security
KIPLI implements technical and organizational measures appropriate to the risks, including access controls, protection of accounts and communications, securing of tools, and the use of service providers subject to appropriate obligations. Since no system can guarantee zero risk, KIPLI handles incidents in accordance with legal obligations, including data breach notification rules where applicable.
11. Your Rights
In accordance with the GDPR, you have the following rights, subject to applicable conditions: the right of access, rectification, erasure, restriction of processing, objection, data portability, and the right to withdraw consent. You may also provide instructions regarding the handling of your data after your death, in accordance with the provisions of French law. You may exercise your rights by writing to help@kipli.com or to the mailing address listed in Section 1. Proof of identity will only be requested if there is reasonable doubt regarding your identity and to the extent necessary to verify it. KIPLI generally responds within one (1) month of receiving the request. This period may be extended by two (2) months due to the complexity or number of requests, provided that you are notified of this within the initial timeframe. You may file a complaint with the French Data Protection Authority (CNIL): https://www.cnil.fr. For operations under the responsibility of another data controller, including certain standalone Shopify or Alma services, you may also review the information and exercise your rights directly with that entity.
12. Minors
The store is intended for adults who are legally capable of entering into contracts. KIPLI does not knowingly collect data from minors through the store. If you believe that data has been submitted by a minor without an appropriate legal basis, please contact help@kipli.com.
13. Third-Party Sites and External Links
The site may contain links to third-party sites. The privacy policies and practices of these third parties are their sole responsibility. We recommend that you review their information before providing them with any data.
14. Changes to the Policy
KIPLI may update this policyto reflect technical, organizational, or regulatory changes. The revision date appears at the top of the document. Where required by law, data subjects will be notified of significant changes through an appropriate means.
15. Contact
, KIPLI SAS — 200 rue de la Croix Nivert, 75015 Paris, France. Email: help@kipli.com. Phone: +33 (0)1 76 42 11 72.