At Naela, we respect your privacy and are committed to protecting your personal
data. This Privacy Policy explains how we collect, use, share, and protect your
information when you visit naelaparis.com or make a purchase, in compliance
with the General Data Protection Regulation (GDPR).

1. Data Controller
The data controller responsible for your personal data is:
Legal company name: Telos
Brand name: Naela Paris (Naela)
Registered address: 39, rue Escudier, 92100 Boulogne-Billancourt, France
Contact email: hello@naelaparis.com

2. What Data We Collect
Depending on how you interact with our Site, we may collect:
Identity data: name, title
Contact data: email address, delivery address, billing address, phone
number
Order data: products purchased, order value, order history
Payment data: processed securely by our third-party payment provider; we
do not store your full card details
Technical data: IP address, browser type, device information, cookies
Marketing preferences: whether you've opted in to receive our newsletter
or promotional communications

3. How We Use Your Data
We use your personal data for the following purposes:
Purpose Legal basis
Processing and delivering your order Performance of a contract
Managing your account and order history Performance of a contract

Responding to customer service requests Performance of a contract /
legitimate interest

Sending order confirmations and shipping
updates

Performance of a contract

Sending marketing communications (newsletter,
promotions)

Consent

Improving our Site and services (analytics) Legitimate interest / consent

(cookies)

Preventing fraud Legitimate interest
Complying with legal and tax obligations Legal obligation

4. Who We Share Your Data With
We only share your data with trusted third parties who help us operate our
business, including:
Payment processors (e.g. Stripe, PayPal), to securely process transactions
Shipping carrier (Colissimo), to deliver your order
Email marketing and customer service tools, if you opt in to
communications
Analytics providers (e.g. Google Analytics), to help us understand and
improve Site performance
Legal or regulatory authorities, where required by law
We do not sell your personal data to third parties.

5. International Data Transfers
Where any of our service providers are located outside the European Economic
Area (EEA), we ensure appropriate safeguards are in place, such as Standard
Contractual Clauses approved by the European Commission, to protect your data.

6. Data Retention
We retain your personal data only as long as necessary for the purposes described
in this policy:
Order and transaction data: retained for the duration required by French

accounting and tax law (typically 10 years)
Marketing data: retained until you withdraw your consent
Account data: retained for as long as your account remains active

7. Cookies
Our Site uses cookies and similar technologies to enhance your browsing
experience, remember your preferences, and analyze Site tra!c. You can manage
your cookie preferences at any time through our cookie consent banner or your
browser settings. Some cookies are essential for the Site to function and cannot be
disabled.

8. Your Rights
Under the GDPR, you have the right to:
Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten"), subject to legal retention
obligations
Restrict or object to certain processing
Data portability — receive your data in a structured, machine-readable
format
Withdraw consent at any time for marketing communications
To exercise any of these rights, please contact us at hello@naelaparis.com. We
will respond within one month, as required by law.
You also have the right to lodge a complaint with the French data protection
authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), at
www.cnil.fr, if you believe your data protection rights have been violated.

9. Data Security
We implement appropriate technical and organizational measures to protect your
personal data against unauthorized access, loss, or misuse. However, no method of
transmission over the internet is 100% secure, and we cannot guarantee absolute
security.

10. Children's Privacy
Our Site is not intended for individuals under the age of 18, and we do not
knowingly collect personal data from minors.

11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our
practices or legal requirements. The "Last updated" date at the top of this page
indicates when it was last revised.

12. Contact Us
For any questions about this Privacy Policy or how we handle your data, please
contact us at:
Email: hello@naelaparis.com
Response time: within 3 business days