Sarveni takes the protection of your personal data seriously. This policy explains what data we collect, why we collect it, how long we keep it and what rights you can exercise.
1. Data controller
The data controller is Sarveni.
Contact: contact@sarveni.com
2. What we collect
When you browse the site, we automatically collect information about your device and your visit: IP address, browser type, operating system, time zone, pages viewed, time spent and referring site.
When you place an order, we collect the information you give us: first and last name, billing and delivery address, email address, phone number and payment information.
When you contact us or sign up to our newsletter, we collect your email address and the content of your exchanges with us.
We never collect sensitive data within the meaning of article 9 of the General Data Protection Regulation, in particular health data.
3. Why we process your data, and on what legal basis
To process your order, manage delivery, payment and after-sales service, on the legal basis of performance of the contract.
To send you commercial communications about our products, on the legal basis of your consent, or of our legitimate interest where you are already a customer.
To prevent fraud and secure transactions, on the legal basis of our legitimate interest.
To meet our accounting and tax obligations, on the legal basis of a legal obligation.
To measure site traffic and improve what we offer, on the legal basis of your consent for non-essential cookies.
4. Who receives your data
Your data is accessible to our authorised staff and to our service providers acting as processors, in particular our e-commerce platform Shopify, our payment provider, our carrier, our fulfilment provider and our email tool.
These providers only access the data needed to carry out their task and are contractually bound to confidentiality.
We do not sell or rent your personal data to third parties.
5. Transfers outside the European Union
Some of our providers may be established outside the European Union. Where that is the case, transfers are covered by appropriate safeguards, in particular the standard contractual clauses adopted by the European Commission, or an adequacy decision.
6. How long we keep your data
Order data is kept for the duration of the commercial relationship, then archived for ten years to meet accounting obligations.
Prospecting data is kept for three years from your last contact with us.
Cookies and trackers are kept for a maximum of thirteen months.
7. Cookies
The site uses cookies that are strictly necessary for it to work, in particular for cart and session management. These do not require your consent.
It also uses audience measurement and advertising cookies, including those of Meta and Google, which are only placed after your consent has been obtained.
You can change your preferences at any time using the cookie banner available on the site, or set your browser to refuse cookies.
8. Your rights
Under the General Data Protection Regulation and the French Data Protection Act, you have the following rights.
The right to access your data and obtain a copy of it.
The right to have inaccurate or incomplete data corrected.
The right to have your data erased in the cases provided for by law.
The right to restrict the processing of your data.
The right to data portability in a structured, machine-readable format.
The right to object to the processing of your data on grounds relating to your particular situation, and at any time and without reason where direct marketing is concerned.
The right to withdraw your consent at any time where processing is based on it.
The right to give instructions on what happens to your data after your death.
To exercise these rights, write to contact@sarveni.com. We will reply within one month. Proof of identity may be requested if there is reasonable doubt about who is making the request.
9. Unsubscribing from commercial communications
Every commercial email contains an unsubscribe link. You can also write to contact@sarveni.com to stop receiving our communications.
10. Security
We put in place appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration. Exchanges with the site are encrypted and payment data is handled directly by our certified provider, without passing through our servers.
11. Complaints
If you consider that the processing of your data breaches the regulations, you may lodge a complaint with the French data protection authority: Commission nationale de l'informatique et des libertes, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at cnil.fr.
12. Changes to this policy
We may amend this policy to reflect changes in our practices or in the law. The date of the latest update appears at the top of this document. If we make a substantial change, we will inform you by an appropriate means.