How Saphirius protects your data.

For processing connected with the Saphirius website, the controller is SAPHIRIUS DIGITAL COMMERCE, the commercial name of the individual business operated by RAIS ZAKARYA.

Professional address: 1 rue Marguerin, 75014 Paris, France.

Privacy contact: contact@saphirius.com.

Saphirius may process identification and contact data, order information, delivery and billing addresses, purchase history, customer care exchanges, language preferences, consents, necessary browsing data, cart data and technical security information.

Full payment data is processed by payment providers; Saphirius does not store full bank card numbers.

Data is used to manage orders, payments, deliveries, returns, guarantees and customer requests on the basis of contract performance.

It is also used to comply with accounting, tax and consumer law obligations on the basis of legal obligations.

Fraud prevention, site security and evidence of exchanges rely on Saphirius legitimate interests, without disproportionately affecting customer rights.

Google Tag Manager, Google Analytics or Firebase Analytics audience measurement, if configured, relies on the user’s prior consent.

Newsletter communications requested by the user rely on consent where required. Necessary transactional emails may be sent to confirm an order, payment, shipment, return or customer service request.

Necessary data is shared with authorized Saphirius staff and providers involved in the site, payment, order, preparation, delivery, support and communication processes.

These providers may include Shopify for e-commerce infrastructure and checkout, configured payment providers, services necessary for preparation and delivery if enabled, email or newsletter tools present in the code, and Google Tag Manager, Google Analytics or Firebase Analytics for audience measurement when the user consents. Hosting provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States. Contact: privacy@vercel.com.

Some technical, e-commerce, payment or email providers may process data outside the European Union according to their own infrastructure.

Where this occurs, Saphirius relies on available protection mechanisms, including adequacy decisions, standard contractual clauses, supplementary measures and providers’ contractual commitments.

Order and billing data is kept for the periods necessary for the commercial relationship and then for accounting, tax and evidentiary obligations.

Customer care exchanges are kept for the time needed to handle the request and then for evidence in case of a dispute. Prospecting data is kept until consent is withdrawn or, without interaction, for a limited period consistent with applicable recommendations.

Cookies and consent information are retained for the periods stated in the cookie policy.

You have rights of access, rectification, erasure, restriction, objection, portability where applicable, withdrawal of consent at any time, and the right to define instructions regarding your data after death where French law applies.

You may exercise your rights by writing to contact@saphirius.com. Proof of identity may be requested where necessary. You may also lodge a complaint with the CNIL: www.cnil.fr.