Privacy policy

Last updated: 09.15.2026

This policy explains how your personal data is collected and used when you visit the chrune.com website (the "Site"), place an order or contact us. It is drawn up in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the "GDPR") and the amended French Law No. 78-17 of 6 January 1978 (the "Data Protection Act").

1. Data controller

Alexandre MEON, sole trader (EI), operating the Chrune shop
Address: 55 Boulevard de Stalingrad, 94400 Vitry-sur-Seine, France
Email: info@chrune.com

2. Data collected

Identity and contact details: last name, first name, email address, phone number, delivery and billing addresses.
Orders: products ordered, chosen options (model, colour, size), amounts, order history.
Personalization: texts entered for engraving. They may include first names, dates or other information about you or people close to you.
Payment: transaction information (payment method used, status, amount). Full card details are processed by the payment providers and are not accessible to us.
Customer account: if you create an account, the information needed to sign in and view your orders.
Customer service: messages sent through the contact form or by email, and any photos sent as part of a claim.
Newsletter: email address and consent, if you subscribe.
Browsing: IP address, device and browser type, pages viewed and data from cookies, according to your choices (see our cookie policy).

Required information is marked when you order. Without it, the order cannot be processed.

3. Purposes and legal bases

Purpose	Legal basis (article 6 GDPR)
Process the order, have the piece made and engraved, deliver it and provide tracking	Performance of the contract
Manage payment and prevent fraud	Performance of the contract; legitimate interest (secure transactions)
Answer requests, handle claims and apply the legal guarantees	Performance of the contract; legal obligation
Keep accounts and retain accounting records	Legal obligation
Manage the customer account	Performance of the contract or of pre-contractual steps taken at your request
Send the newsletter and offers by email	Consent
Measure audience and personalize advertising using non-essential cookies	Consent
Protect the Site's forms against bots and keep the Site secure	Legitimate interest (Site security)
Establish, exercise or defend our rights in a dispute	Legitimate interest

4. Recipients

Your data is processed by the shop operator and shared, only to the extent strictly necessary, with the following recipients:

Shopify: hosting and e-commerce platform of the Site (Shopify International Limited, Ireland, and its group companies). Shopify processes data on our behalf to run the shop, cart, checkout, customer accounts, newsletter subscriptions and order emails. Shopify may also act as a data controller for its own consumer services, such as Shop and Shop Pay: see the Shopify Consumer Privacy Policy.
Payment providers offered at checkout, which process your payment.
DSers: app used to send orders to our suppliers. It receives the information needed to fulfil the order: name, delivery address, phone number, products, options and engraving text.
Partner suppliers responsible for production, engraving and shipping. They receive the information needed to prepare and ship the order.
Carriers handling the delivery. They receive the information needed to deliver and track the parcel.
hCaptcha: bot protection service used on the Site's forms.
Our accountant, where applicable, for accounting obligations.
Administrative or judicial authorities, where required by law.

We do not sell your personal data.

5. Transfers outside the European Union

Some recipients are located, or process data, outside the European Union:

Shopify may process data in other countries, including Canada and the United States. For these transfers, Shopify relies on recognized transfer mechanisms, such as European Commission adequacy decisions or standard contractual clauses.
DSers and our partner suppliers may be located outside the European Union, in particular in China. The data sent to them is limited to what is needed to fulfil your order, and the transfer is necessary for the performance of the contract with you (article 49(1)(b) GDPR).

6. Retention periods

Data	Period
Orders and customer relationship	For the duration of the business relationship, then 5 years (general limitation period, article 2224 of the French Civil Code)
Accounting records	10 years (article L. 123-22 of the French Commercial Code)
Contracts of EUR 120 or more	10 years from delivery (articles L. 213-1 and D. 213-1 et seq. of the French Consumer Code)
Engraving texts	Kept with the corresponding order
Customer account	Until the account is deleted, and at the latest 3 years after your last activity
Newsletter	Until you unsubscribe, and at the latest 3 years after your last contact with us
Customer service messages	As long as needed to handle the request, then kept with the related order or 3 years after the last exchange
Cookies and consent choices	See the cookie policy
Full card details	Not kept by us (processed by the payment providers)

7. Your rights

You have the following rights over your data:

right of access (article 15 GDPR);
right to rectification (article 16);
right to erasure (article 17);
right to restriction of processing (article 18);
right to data portability (article 20);
right to object, in particular to direct marketing (article 21);
right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
right to give instructions on what happens to your data after your death (article 85 of the French Data Protection Act).

To exercise these rights, contact us through the Contact page or at info@chrune.com. If there is reasonable doubt about your identity, we may ask for proof. We reply within one month, which may be extended by two months depending on the complexity or number of requests (article 12 GDPR).

Every newsletter email contains an unsubscribe link.

For data processed by Shopify on its own behalf, you can also use the Shopify Privacy Portal. See also the Your Privacy Choices page.

If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL): www.cnil.fr, or with the supervisory authority of your country of residence.

8. Security

We take reasonable measures to protect your data (restricted access, established service providers, encrypted connection on the Site). As no transmission of data over the internet is completely secure, we recommend that you do not send us sensitive information through unsecured channels.