Privacy Policy

Privacy Policy

Last updated: August 2026

1. Introduction

Puzzy (hereinafter "we," "our," or "the Company") places great importance on protecting your personal data. This Privacy Policy is intended to inform you about how we collect, use, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679), the amended French Data Protection Act of January 6, 1978, and, where applicable, the California Consumer Privacy Act (CCPA).

By using our site www.puzzypuzzle.fr and making purchases in our online store, you accept the practices described in this policy.

2. Data Controller

The controller responsible for processing your personal data is:
Company: Puzzy
Website: www.puzzypuzzle.fr
Contact: love@puzzypuzzle.fr

3. Personal Data Collected

We collect the following categories of data:

3.1 Data collected during a purchase
First and last name — Email address — Delivery and billing address — Phone number (if provided) — Payment data (processed and secured by our payment provider — Puzzy does not store your banking data)

3.2 Data collected via forms
Email address (newsletter sign-up) — First name (optional) — Date of birth (for the astrology calculator — processed locally only, not stored)

3.3 Data collected automatically
IP address — Browser type and version — Pages visited and time spent — Browsing data and cookies

4. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

  • Processing and managing your orders — Legal basis: performance of the contract (Art. 6.1.b GDPR)
  • Managing the customer relationship and after-sales service — Legal basis: performance of the contract
  • Sending the newsletter (with your consent) — Legal basis: consent (Art. 6.1.a GDPR)
  • Sending automatic post-purchase emails (confirmation, shipping, reviews) — Legal basis: performance of the contract
  • Improving our site and services — Legal basis: legitimate interest (Art. 6.1.f GDPR)
  • Complying with our legal and accounting obligations — Legal basis: legal obligation (Art. 6.1.c GDPR)

5. Data Retention Period

  • Customer data (orders): 10 years from account closure or last purchase, in accordance with French accounting obligations
  • Newsletter data: until unsubscribing or withdrawal of consent
  • Browsing data (cookies): 13 months maximum, in accordance with CNIL recommendations
  • Commercial prospecting data: 3 years from last contact

6. Data Recipients

Your personal data may be shared with the following third parties as part of our activities:

  • Our host and e-commerce platform (Shopify Inc.)
  • Secure payment providers (Stripe, PayPal, or equivalent)
  • Carriers and delivery companies
  • Email service providers (for sending newsletters and automated emails)
  • French legal and tax authorities, as part of our legal obligations

We do not sell, rent, or transfer your personal data to third parties for commercial purposes.

7. Data Transfers Outside the European Union

Some of our providers may process your data outside the European Union. In such cases, we ensure that appropriate safeguards are in place, in particular through standard contractual clauses approved by the European Commission, in accordance with Articles 46 et seq. of the GDPR.

8. Cookies and Trackers

Our site uses cookies and similar technologies. In accordance with CNIL recommendations, we distinguish between:

8.1 Strictly necessary cookies (no consent required)
Session and shopping cart cookies — Authentication cookies — Security cookies

8.2 Cookies subject to consent
Analytics cookies (audience measurement) — Personalization cookies — Social media cookies (Instagram, etc.)

You can manage your cookie preferences at any time via your browser settings or our consent banner.

9. Your Rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights over your personal data:

  • Right of access (Art. 15 GDPR): obtain a copy of the personal data we hold about you
  • Right of rectification (Art. 16 GDPR): have inaccurate or incomplete data corrected
  • Right to erasure (Art. 17 GDPR): request deletion of your data ("right to be forgotten")
  • Right to restriction of processing (Art. 18 GDPR): restrict the use of your data
  • Right to data portability (Art. 20 GDPR): receive your data in a structured, readable format
  • Right to object (Art. 21 GDPR): object to the processing of your data for prospecting purposes
  • Right to withdraw consent: withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal

To exercise your rights, contact us at: love@puzzypuzzle.fr

You also have the right to file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy, 75007 Paris — www.cnil.fr.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or disclosure. Our site uses the HTTPS protocol (SSL/TLS) to secure data exchanges. Payments are processed by PCI-DSS certified providers.

11. Children's Data

Our site and products are intended exclusively for an adult audience (18 and older). We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, please contact us so that we can delete it.

12. California Residents (CCPA)

If you are a California resident, applicable law may give you additional rights over your personal information, including the right to know what personal information we have collected about you, the right to request deletion of that information, the right to correct inaccurate information, and the right to opt out of the "sale" or "sharing" of personal information, as those terms are defined under the California Consumer Privacy Act (CCPA), as amended.

We do not sell or share your personal information for monetary or other valuable consideration, and we do not use your personal information for cross-context behavioral advertising. Accordingly, there is currently no sale or sharing of personal information for you to opt out of.

To exercise any of the rights described above, contact us at love@puzzypuzzle.fr. We will verify your request and respond within the timeframes required by law. You will not be discriminated against for exercising these rights.

13. Changes to This Privacy Policy

We reserve the right to change this Privacy Policy at any time, in particular to comply with any regulatory, case-law, editorial, or technical developments. The date of the last update is shown at the top of this document. We encourage you to review this page regularly.

14. Contact

For any questions regarding this Privacy Policy or exercising your rights, you can contact us:
By email: love@puzzypuzzle.fr
Via our site: www.puzzypuzzle.fr