Privacy and Cookie Policy

Last updated: 28 July 2026

This Privacy and Cookie Policy explains how Lovely Stickers collects, uses, shares and protects personal data when you visit lovelystickers.com, contact us, create an account, subscribe to marketing communications or place an order.

1. Data controller

The controller responsible for the processing described in this policy is:

Kevin Boyer, Entrepreneur Individuel, trading as Lovely Stickers
1800 Route de Bras
83143 Le Val
France
Email: info@lovelystickers.com
SIREN: 883 260 861

2. Personal data we collect

Depending on how you interact with the website, we may collect the following categories of personal data.

Identity and contact data

• name;
• email address;
• billing and delivery addresses;
• telephone number, where voluntarily supplied or required for delivery;
• account and login information.

Order and transaction data

• products ordered;
• product options and customisation choices;
• order value, currency, taxes and discounts;
• payment status and transaction references;
• shipping method and tracking details;
• returns, refunds, complaints and customer-service history.

Customisation and customer content

• names, numbers, text and dimensions supplied for personalised products;
• logos, images, photographs, designs and other files supplied by customers;
• design instructions, messages, previews and approvals.

Payment data

Payments are processed by specialised payment providers. Lovely Stickers does not directly receive or store complete payment card numbers or security codes.

We may receive limited information such as the payment method, payment status, card type, last digits of a card and transaction identifier.

Website and device data

• IP address;
• browser type and version;
• device type and operating system;
• language and approximate location;
• referring website or search terms;
• pages and products viewed;
• cart and checkout interactions;
• cookie identifiers and similar technical data;
• security, diagnostic and fraud-prevention information.

Marketing and review data

• newsletter subscription status;
• marketing preferences;
• email opens and clicks where permitted;
• discount-code use;
• product reviews, ratings, photographs and related content submitted by customers.

3. How we collect personal data

We collect personal data:

• directly from you when you place an order, contact us, create an account, submit a review, upload a file or subscribe to communications;
• automatically through the website, cookies, log files and similar technologies;
• from Shopify and applications connected to our store;
• from payment providers, shipping providers and carriers;
• from fraud-prevention and security services;
• from advertising or analytics services where permitted.

4. Why we use personal data and our legal bases

Processing and fulfilling orders

We use identity, contact, order, payment and delivery data to accept payment, manufacture products, provide previews, fulfil orders, arrange shipping and provide invoices or order confirmations.

Legal basis: performance of the contract and compliance with legal obligations.

Customer service

We use order and communication data to answer questions, resolve delivery problems, process returns, investigate defects and manage complaints.

Legal basis: performance of the contract and our legitimate interest in providing customer service and defending legal rights.

Personalised products

We use customer-supplied text, dimensions, logos, designs and files to create and manufacture the requested product.

Legal basis: performance of the contract.

Fraud prevention and security

We use transaction, device, account and technical information to detect unauthorised payments, fraud, abuse, cyberattacks and other security risks.

Legal basis: our legitimate interest in protecting customers, the business and the website, and compliance with legal obligations.

Accounting, tax and legal compliance

We retain and use transaction, invoicing and customer data where necessary to comply with tax, accounting, customs, consumer-protection and other legal obligations.

Legal basis: compliance with legal obligations.

Website operation and improvement

We analyse technical and usage data to maintain the website, identify errors, measure performance, understand how customers use the store and improve navigation and product presentation.

Legal basis: legitimate interest for strictly necessary operations and, where required, consent for analytics cookies or similar technologies.

Marketing

Where permitted, we use contact and interaction data to send newsletters, product updates, promotions and abandoned-cart or customer-retention communications.

Legal basis: consent where required, or our legitimate interest where direct marketing is legally permitted to existing customers.

You may unsubscribe at any time using the link in a marketing email or by contacting info@lovelystickers.com.

Reviews

We use review data to collect, verify and display customer feedback and photographs.

Legal basis: consent or our legitimate interest in obtaining and displaying genuine customer feedback.

5. Service providers and recipients

We share personal data only where necessary for the purposes described in this policy.

Recipients may include:

• Shopify, which hosts and operates the online store and checkout infrastructure;
• Stripe and other payment providers, which process payments and payment-related fraud checks;
• Boxtal and shipping carriers, which calculate shipping, create labels, transport parcels and provide tracking;
• Kiliba, which provides email marketing and customer-retention automation;
• Stamped.io, which provides product-review functions;
• Easify Product Options, which manages product options, customisation fields and related order information;
• Google services, including analytics, search, advertising or performance-measurement services where enabled and permitted;
• website-security, fraud-prevention, hosting and technical-support providers;
• accountants, insurers, legal advisers and other professional advisers;
• tax, customs, law-enforcement, judicial or regulatory authorities where disclosure is legally required.

Service providers are authorised to use personal data only for their contracted services, their own legal obligations or other purposes clearly described in their applicable privacy terms.

6. Shopify

Our store is hosted on Shopify. Shopify processes customer and visitor data to provide the store, checkout, security, fraud-prevention and related services.

Depending on the customer’s location and the Shopify services used, Shopify may act as our processor, as an independent controller or in another legally defined role.

7. International data transfers

Some providers, including Shopify, Google and other technology providers, may process personal data outside the European Economic Area.

Where required, transfers are protected using an adequacy decision, approved contractual clauses, binding corporate rules or another legally recognised safeguard.

Data may therefore be processed in countries including Canada, the United States, Ireland and other countries in which our service providers operate.

8. Data retention

We retain personal data only for as long as necessary for the purpose for which it was collected and for applicable legal limitation or retention periods.

In general:

• order, invoice and accounting records may be retained for up to 10 years where required by French accounting law;
• customer-service and complaint records may be retained for the duration needed to resolve the matter and, where necessary, for up to 5 years for the establishment or defence of legal claims;
• customisation files and production instructions may generally be retained for up to 3 years after completion of the order, unless a shorter period is practical or a longer period is needed for a dispute, repeat order or legal obligation;
• marketing data may be retained until consent is withdrawn or for up to 3 years after the last meaningful contact, subject to applicable rules;
• fraud and security records may be retained for the time reasonably necessary to investigate and prevent abuse;
• cookie and consent records are retained according to the applicable cookie duration and consent settings.

Data may be archived for a longer period where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

9. Cookies and similar technologies

The website uses cookies and similar technologies.

Cookies may be used for:

• essential website operation;
• shopping-cart and checkout functions;
• account login and security;
• language, currency and market preferences;
• fraud prevention;
• website analytics and performance measurement;
• marketing and advertising measurement where permitted.

Strictly necessary cookies

Strictly necessary cookies are required for the website, cart, checkout, security and requested services to function. They do not normally require consent.

Analytics and marketing cookies

Where required by law, analytics, advertising and other non-essential cookies are used only after consent.

Customers can accept, refuse or modify applicable cookie choices through the cookie banner or privacy settings made available on the website.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

10. Behavioural advertising and data sharing

We do not sell personal data for monetary consideration.

Where advertising or analytics services are enabled, certain device identifiers and interaction data may be disclosed to those services. Under some regional privacy laws, this activity may be legally described as sharing or targeted advertising.

Where required, customers can refuse or withdraw consent through the website’s privacy controls.

11. Your rights

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• receive certain data in a portable format;
• withdraw consent at any time;
• lodge a complaint with a competent data-protection authority.

In France, the competent authority is the Commission Nationale de l’Informatique et des Libertés, commonly known as the CNIL.

To exercise a right, contact:

info@lovelystickers.com

Please describe your request clearly. We may request reasonable information necessary to verify your identity and protect customer data.

12. Security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No internet transmission or storage system can be guaranteed to be completely secure.

13. Children

The website is not specifically directed at children under 18.

We do not knowingly collect personal data from a child who is not legally able to provide the required consent or enter into the relevant transaction.

14. Third-party websites

The website may contain links to third-party websites or services.

Lovely Stickers is not responsible for the privacy practices of an independent third party. Customers should review the privacy information provided by the relevant service.

15. Changes to this policy

We may update this policy to reflect changes in our business, service providers, website functions or applicable law.

The updated date displayed at the beginning of the policy indicates when it was last revised.

16. Contact

For questions or requests concerning personal data:

Kevin Boyer EI – Lovely Stickers
1800 Route de Bras
83143 Le Val
France
Email: info@lovelystickers.com