Privacy policy

The company Little Cabari (as defined hereinafter in article 1), offers for sale high-end decoration articles and a made-to-measure service via its Internet site www.littlecabari.com and also at its showroom located at 6 rue Chabanais, 75002 Paris.

In order to offer for sale, sell and deliver its products, Little Cabari collects personal data from the users of its Internet site and from its customers during purchases made at the Little Cabari showroom.

The present privacy policy aims at informing the users of the means implemented to collect, consult, process and conserve the personal data of these same users.

Little Cabari, in its capacity as data controller, undertakes to respect the provisions of the EU regulation n°2016/679 of 27 April 2016 on the protection of personal data.

The client is informed that certain data must be collected by Little Cabari in order to be able to carry out its services. If the client does not wish to communicate these data, Little Cabari will not be able to accomplish its services.

The present privacy policy ("Policy") may be modified at any time by Little Cabari, in order to conform to all regulatory, jurisprudential, editorial or technical evolutions. The user must refer to the latest version of the Policy before any navigation.

1. The processing Manager

The data controller, who collects the personal data and implements the data processing, is:
Little Cabari, a simplified joint stock company with a capital of €30,000, registered in the Paris Trade and Companies Register under number 793 285 941, whose registered office is located at 6 rue Chabanais in Paris (75002), France.

2. Collection of personal data

Little Cabari collects personal data from users on the Internet site www.littlecabari.com, on the mobile application IOS and during purchases in Little Cabari boutiques.

The personal data likely to be collected are the following:
- data of the user's account: i.e. the data that the user fills in when creating an account by filling in the registration form (first name, last name, billing and delivery postal addresses, email address, mobile phone number, password for the connection to the client account);
- personal data of the user when he/she registers them in his/her client account: date of birth, size of clothes and shoes;
- data on transactions: designate the data that the user provides when he/she makes purchases, information relating to orders made and returns such as his/her telephone number, address, e-mail address and information relating to his/her means of payment;
- exchanges made with customer service;
- data relating to browsing: designate the data that the Publisher collects during the User's browsing of the Site and the Applications such as, in particular, the date and time of the connection and/or browsing, the type of browser, the language of the browser, his/her IP address, location data and geolocation.

Data relating to payment methods (credit card number, expiry date, authorisation number, security code) are collected directly by our service providers Adyen and Paypal.

Third party providers of applications, tools, gadgets and plug-ins on our website and mobile application, as well as networks on which we publish editorial and promotional content (such as Facebook and Instagram) may also use automated means, linked to interests and context, to collect user data (interactions with functions and profiling of online activity). This data is collected directly by these providers and/or third parties and is subject to their policies. To the extent permitted by applicable law, Little Cabari is not responsible for the practices of these service providers and third parties.

Some services may be impaired or inaccessible in the absence of consent to the collection of the data mentioned in this Privacy Policy. 

3. Purposes of collecting personal data

The Data collected in the context of the use of the application site or in the physical shops are processed for the purposes described in the table below.
The regulations in force protect the privacy of users and require any data controller to be able to justify a legitimate basis for such processing. The regulation thus provides among the legal bases for processing:
- the performance of a contract to which the data subject is a party, such as a sales contract. For example, some of the customer's personal data is necessary to deliver the goods, manage the customer account and make returns;
- to comply with a legal obligation, in particular for accounting purposes by keeping invoices;
- the prior consent of the data subject;
- the legitimate interest of the data controller, with due respect for the rights and freedoms of users. Thus, the improvement of the customer experience or the prevention of fraud may justify the collection of data.
Little Cabari does not share any personal data for commercial purposes with third parties.

The user has the right to modify his personal data and to withdraw his consent at any time by logging into his customer account.

4. providers with access to users ' personal data

The personal data collected are transmitted to the service providers of Little Cabari, who may operate a treatment on behalf of Little Cabari (subcontractors) and/or their own account (data recipients).
The recipients of the data are:
- Adyen and Paypal, payment service providers
- any police or administrative authority within the framework of judicial requisitions concerning the fight against fraud
- customs services and service providers in case of delivery abroad.

The subcontractors of Little Cabari may have access to the data collected for:
- the preparation, the shipping of orders and the return of products
- the improvement of the contents of the sites and mobile applications
- the technical maintenance and development operations of the website, the mobile application and the internal applications of Little Cabari, including the entities that execute the orders and assure the web hosting, the storage of information, the providers of email services, as well as the services of analysis, management of tags, such as Google Analytics. 

For more details on these analysis services and the terms of opposition, please visit the following sites:

- https://support.google.com/analytics/answer/6004245
- Google Analytics: https://support.google.com/analytics/answer/6004245?hl=fr

Little Cabari may also share the personal data of customers who have a customer account in its physical shops. Their access is limited to the orders placed by the customer.

5. user rights to their personal data

In accordance with Articles 14 to 22 of Regulation 2016/679 of 27 April 2016, any natural person using the Little Cabari website or mobile application has the right to exercise the following rights:

- A right of access, rectification and deletion of the data collected,
- A right to object to the processing of his or her data
- A right to the limitation of the processing,
- A right to the portability of the data collected
- Can formulate directives relating to the retention, to the deletion and communication of his personal data after his death in accordance with article 40-1 of the law 78-17 of January 6, 1978

Finally, if Little Cabari detects a violation of personal data likely to generate a high risk for the rights and liberties of its users, it commits itself to inform the concerned users as soon as possible.

The user may exercise all of these rights by connecting to his client space, by contacting the client service at info@littlecabari.com or by simple mail to Little Cabari - Service Client 6 rue Chabanais - 75002 Paris, France.

The user must imperatively attach proof of identity to his request.

In case of no response or an unsatisfactory response, the user may refer to the control authority of his country of residence, for France, the CNIL: https: //www.cnil.fr/

6. transfer of personal data outside the European Union

The personal data of the customers of little Cabari cannot be transferred outside the European Union.

User data shall not be retained beyond the duration strictly necessary for the purposes pursued as set forth herein and in accordance with applicable laws and regulations. In this regard, the data used for prospecting purposes may be retained for a maximum period of 3 years from the closing of the account of the user or the last contact of the prospect concerned. The user's data is erased when the retention durations expire. Nevertheless, the data may be archived beyond the expected duration for research purposes, the finding, and prosecution of criminal offences for the sole purpose of enabling, as a requirement, the availability of such data to the judicial authority. Archiving implies that this data will be anonymized and will no longer be searchable online but will be extracted and stored on a standalone and secure medium..