Privacy Policy

The Little Cabari company (as defined below in article 1), offers high-end decorative items for sale and a tailor-made delivery service via its website www.littlecabari.com and thus only at its showroom located at 6 rue Chabanais, 75002 Paris.

In order to offer for sale, sell and deliver its products, Little Cabari collects personal data from users of its website and its customers during purchases made at the Little Cabari showroom.

The purpose of this confidentiality policy is to inform users of the means implemented to collect, consult, process and store the personal data of these same users.

Little Cabari, as data controller, undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of April 27, 2016 relating to the protection of personal data.

The customer is informed that certain data must be collected by Little Cabari in order to be able to carry out its services. If the customer does not wish to communicate this data, Little Cabari will not be able to perform its services.

This confidentiality policy (“Policy”) may be modified at any time by Little Cabari, in particular in order to comply with any regulatory, jurisprudential, editorial or technical developments. The user must refer to the latest version of the Policy before any navigation.

1. The Data Controller

The data controller, who collects personal data and implements data processing, is:
Little Cabari, simplified joint stock company with capital of €30,000, registered in the Paris Trade and Companies Register under number 793 285 941, whose head office is located at 6 rue Chabanais in Paris (75002), France.

2. Collection of personal data

Little Cabari collects users' personal data on the website www.littlecabari.com , on the IOS mobile application and during purchases in Little Cabari stores.

The personal data that may be collected are as follows:
- user account data: namely the data that the user provides when creating an account by completing the registration form (first name, last name, postal billing and delivery addresses, email address, number mobile phone, password for connecting to the customer account);
- personal data of the user when he enters them in his customer account: date of birth, size of clothes and shoes;
- transaction data: refers to the data that the user provides when making purchases, information relating to orders placed and returns such as their telephone number, address, email address and information relating to their means of payment;
- exchanges carried out with customer service;
- data relating to navigation: refers to the data that the Publisher collects during the User's navigation on the Site and Applications such as in particular the date, time of connection and/or navigation, browser type , browser language, IP address, location data and geolocation.

Data relating to payment methods (bank card number, expiration date, authorization number, security code) are collected directly by our service providers Adyen and Paypal.

Third-party providers of applications, tools, gadgets and plug-ins on our website and mobile application, as well as the networks on which we publish editorial and promotional content (such as Facebook and Instagram) may also use automated means, linked interests and context, to collect user data (interactions with functions and profiling of online activity). This data is collected directly by these service providers and/or third parties and is subject to their policies. To the extent permitted by applicable law, Little Cabari is not responsible for the practices of these service providers and third parties.

Certain services may be impaired or inaccessible in the absence of consent to the collection of data mentioned in this Privacy Policy.

3. Purposes of collecting personal data

Data collected as part of the use of the application site or in physical stores is processed in order to meet the purposes described in the table below.
The regulations in force protect the privacy of users and require any data controller to be able to demonstrate a legitimate basis for said processing. The regulation thus provides among the legal bases for processing:
- the execution of a contract to which the data subject is a party, such as a sales contract. Thus certain personal data of the customer are necessary to deliver the goods, manage the customer account and make returns;
- compliance with a legal obligation, in particular accounting by retaining invoices;
- the prior consent of the person concerned;
- the legitimate interest of the data controller, while respecting the rights and freedoms of users. Thus, improving the customer experience or preventing fraud may justify data collection.
Little Cabari does not share any personal data for commercial purposes with third parties.

The user has the option of modifying their personal data and withdrawing their consent at any time by logging into their customer account.

4. Service providers with access to users’ personal data

The personal data collected are transmitted to Little Cabari service providers, who may carry out processing on behalf of Little Cabari (subcontractors) and/or their own account (recipients of the data).
The recipients of the data are:
- Adyen and Paypal, payment providers
- any police or administrative authority in the context of judicial requisitions concerning the fight against fraud
- customs services and providers in the event of delivery abroad.

Little Cabari subcontractors may have access to the data collected for:
- preparation, shipping of orders and return of products
- improving the content of mobile sites and applications
- technical maintenance and development operations of the website, mobile application and internal applications of Little Cabari, including the entities which execute orders and provide web hosting, information storage, service providers email services, as well as analysis and tag management services, such as Google Analytics.

To obtain more details on these analysis services and the terms of opposition, we invite you to consult the following sites:

- https://support.google.com/analytics/answer/6004245
- Google Analytics: https://support.google.com/analytics/answer/6004245?hl=fr

Little Cabari may also share the personal data of customers who have a customer account in its physical stores. Their access is limited to orders placed by the customer.

5. User rights over their personal data

In accordance with articles 14 to 22 of regulation 2016/679 of April 27, 2016, any natural person using the Little Cabari website or the mobile application has the right to exercise the following rights:

- A right of access, rectification and deletion of the data collected,
- A right to object to the processing of your data
- A right to limitation of processing,
- A right to portability of the data collected
- May formulate directives relating to the conservation, erasure and communication of his personal data after his death in accordance with article 40-1 of law 78-17 of January 6, 1978

Finally, if Little Cabari detects a personal data breach likely to create a high risk for the rights and freedoms of its users, it undertakes to inform the users concerned as soon as possible.

The user can exercise all of these rights by logging into their customer area, by contacting customer service at info@littlecabari.com or by regular mail to Little Cabari – Customer Service 6 rue Chabanais – 75002 Paris, France.

The user must attach proof of identity to their request.

In the event of no response or an unsatisfactory response, the user may contact the supervisory authority of their country of residence, for France, the CNIL: https://www.cnil.fr/

6. Transfer of personal data outside the European Union

The personal data of Little Cabari customers cannot be transferred outside the European Union.

User data will not be kept beyond the period strictly necessary for the purposes pursued as set out herein, in accordance with applicable regulations and laws. In this regard, data used for prospecting purposes may be kept for a maximum period of 3 years from the closure of the user's account or the last contact of the prospect concerned. User data is deleted when retention periods expire. However, the data may be archived beyond the periods provided for the purposes of research, detection, and prosecution of criminal offenses with the sole aim of allowing, as necessary, the provision of these data to the judicial authority. Archiving implies that this data will be anonymized and will no longer be consultable online but will be extracted and stored on an independent and secure medium.