Privacy Policy
Privacy Policy
Last updated: October 19, 2026
ElleDi Creative SAS is committed to protecting the privacy of our website visitors and studio clients. This Privacy Policy explains transparently how we collect, process, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR - Regulation EU 2016/679) and applicable data protection laws.
1. Data Controller
The Data Controller responsible for processing your personal data is:
ElleDi Creative SAS
61 rue de la République, 75012 Paris, France
Contact Email / DPO: legal@elledicreative.studio
2. Cookies set by Shopify
The public site does not use Google Analytics or advertising pixels.
Shopify, which runs the shop, sets three cookies on this site. Each one lasts one year:
- _shopify_essential keeps the cart and checkout working.
- _shopify_analytics lets Shopify measure visits to the shop.
- _shopify_marketing lets Shopify attribute a visit to a marketing source.
3. Categories of Personal Data Collected
We collect only the personal data strictly necessary to deliver our services:
- Newsletter Subscriptions: Email address (collected with your explicit, opt-in consent). You can unsubscribe at any time using the link provided at the bottom of every email.
- Online Purchases (Shopify Store, Books, Collections, Event Tickets): Name, billing address, shipping address, email address, phone number, and order details.
- Payment Processing: Payment transactions are securely processed by our payment provider Shopify Payments (and its licensed banking partners). ElleDi Creative SAS never handles or stores your credit card details or banking credentials.
- B2B Commercial Photography & Inquiries: Company name, contact person's full name, job title, business email address, phone number, and project details or licensing contract requirements.
4. Legal Basis & Purposes of Processing
Purpose of Processing | Data Categories | Legal Basis (GDPR) |
|---|---|---|
Order management, physical delivery, and event ticketing | Contact details, order history | Contractual necessity (Art. 6.1.b) |
Management of B2B commercial photography projects | Business contact details, quotes, contracts | Contractual necessity or pre-contractual steps (Art. 6.1.b) |
Sending Newsletters (artist updates, agenda, new books) | Email address | User consent (Art. 6.1.a) |
Invoicing, accounting, and legal compliance | Transaction records, invoices | Legal obligation (Art. 6.1.c) |
Language selection storage (FR/EN) | Language preference (Technical cookie) | Legitimate interest / Technical necessity (Art. 6.1.f) |
5. Data Retention Periods
- Transaction & B2B/B2C Purchase Data: Retained for the duration of the commercial relationship, then archived for 10 years in accordance with French commercial law requirements.
- Newsletter Data: Retained until you withdraw your consent (via the unsubscribe link).
- Contact Form Inquiries / Quotes: Retained for a maximum of 3 years from the date of last contact.
6. Data Recipients
Your personal data is strictly confidential and used exclusively by ElleDi Creative SAS. It is never sold, rented, or shared with third parties for marketing purposes.
Data may be shared solely with trusted service providers necessary to operate our website and services:
- Shopify (E-commerce backend host and secure payment gateway).
- Vercel (Front-end website hosting infrastructure).
- Logistics and courier services responsible for fulfilling and delivering physical orders.
7. International Data Transfers
Some of our technical service providers (notably Shopify Inc. and Vercel Inc.) are located outside the European Economic Area (EEA). These data transfers are governed by appropriate safeguards under Article 46 of the GDPR, specifically the Standard Contractual Clauses (SCCs) approved by the European Commission.
8. Cookie Management
A cookie is a small text file stored on your device when visiting a website.
On our site:
- Strictly necessary cookies (exempt from consent): the cart, the session, signing in, the language preference (FR or EN), and Shopify’s _shopify_essential cookie.
- Shopify measurement and marketing cookies: _shopify_analytics and _shopify_marketing, described in section 2. Each one lasts one year.
9. Your GDPR Rights
Under the GDPR, you hold the following rights regarding your personal data:
- Right of Access (Art. 15 GDPR): Request confirmation and a copy of the personal data we hold about you.
- Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR): Request deletion of your data, subject to legal retention obligations.
- Right to Restriction of Processing (Art. 18 GDPR): Request a temporary restriction on processing.
- Right to Data Portability (Art. 20 GDPR): Receive your personal data in a structured, machine-readable format.
- Right to Withdraw Consent: Unsubscribe from our newsletter at any time.
To exercise any of these rights, please contact us at legal@elledicreative.studio.
If you believe that your rights have been violated, you also have the right to lodge a complaint with your local supervisory authority or the French Data Protection Authority (CNIL - Commission Nationale de l'Informatique et des Libertés) atwww.cnil.fr.
10. Updates to This Policy
ElleDi Creative SAS reserves the right to modify this Privacy Policy at any time to reflect legal or technical changes. The updated date will be noted at the top of this document.