check_circle error info report
  • Welcome to ELYROA

  • Responsive customer service

Cart (0)

Your cart is empty

Privacy policy

1. Who is responsible for your personal data?

The data controller responsible for the processing of personal data through www.elyroa.com is:

ELYROA
47 rue Vivienne
75002 Paris
France

Email: contact@elyroa.com
Telephone: +33 7 56 84 68 33
SIRET number: 10345884000016

This Privacy Policy explains what personal data ELYROA collects, how it is used, why it is processed, how long it may be retained and the rights available to individuals.

2. Personal data we collect

When you browse the Website, create an account, contact us or place an order, we may collect the following personal data:

  • your first name and surname;
  • your billing and delivery addresses;
  • your email address;
  • your telephone number;
  • your customer account information;
  • your order history and Product information;
  • information concerning payments and transaction status;
  • your communications with customer service;
  • information concerning returns, refunds, complaints and warranty claims;
  • your IP address;
  • your browser, device and operating system information;
  • your navigation activity and interactions with the Website;
  • your marketing and cookie preferences; and
  • information required to prevent fraud and protect the Website.

Payment card information is processed securely by the payment service selected at checkout. ELYROA does not have access to the complete payment card number.

3. How we collect your personal data

Personal data may be collected:

  • directly from you when you place an order, create an account, complete a form or contact us;
  • automatically when you browse or interact with the Website;
  • from the selected payment service when the status of a transaction is confirmed;
  • from carriers and delivery partners in connection with an order;
  • from customer service, review or communication tools used on the Website; and
  • from advertising or analytics services where you have given the required consent.

4. Purposes and legal bases of processing

ELYROA processes personal data only where there is an appropriate legal basis.

Order management

Your personal data is used to process transactions, confirm orders, arrange delivery, provide tracking information and manage returns or refunds. This processing is necessary to perform the sales contract entered into with you.

Customer accounts

Account information is processed to provide access to your order history and customer account features. This processing is necessary to provide the service requested by you.

Customer service and complaints

Your information is used to respond to questions, complaints, return requests and warranty claims. This processing is necessary to perform the contract or is based on ELYROA’s legitimate interest in managing customer relationships and resolving disputes.

Accounting and legal obligations

Order, transaction and invoicing information may be retained to comply with accounting, tax, legal and regulatory obligations.

Fraud prevention and Website security

Technical, transaction and account information may be processed to identify suspicious activity, prevent fraud, secure transactions and protect the Website. This processing is based on ELYROA’s legitimate interest in protecting its business, Website and Customers.

Website operation and improvement

Technical and usage information may be processed to maintain the Website, identify technical problems and improve its performance. Where non-essential cookies or tracking technologies are involved, this processing takes place only after the required consent has been obtained.

Marketing communications

With your consent, ELYROA may send emails concerning Products, offers, news and other commercial updates.

You may withdraw your consent at any time by using the unsubscribe link included in each marketing email or by contacting contact@elyroa.com.

Reviews and customer feedback

Where you submit a Product review or respond to a customer satisfaction request, your information may be processed to publish, verify and manage that review or feedback. This processing is based on your consent or ELYROA’s legitimate interest, depending on the circumstances.

5. Providing your personal data

Certain personal data is required to process an order, receive payment and arrange delivery. If you do not provide the necessary information, ELYROA may be unable to process or fulfil your order.

Providing information for marketing purposes is optional and does not affect your ability to place an order.

6. Consent

Consent is requested where it is required by applicable law, particularly for marketing communications and non-essential cookies.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Contractual and legally required processing does not rely on consent. ELYROA may therefore continue to retain or process certain information where this is necessary to fulfil an order, comply with a legal obligation, prevent fraud or establish, exercise or defend legal claims.

7. Shopify hosting

The Website is hosted by Shopify Inc., which provides the e-commerce platform used by ELYROA to present Products, manage orders and operate the online store.

Personal data may be processed within Shopify’s systems and infrastructure in accordance with Shopify’s applicable privacy and security policies.

Shopify uses technical and organisational security measures designed to protect account, order and Website information.

8. Payments

ELYROA accepts the following payment methods, subject to their availability at checkout:

  • Visa;
  • Mastercard;
  • American Express;
  • Apple Pay;
  • PayPal; and
  • Klarna.

Personal and payment information is processed in accordance with the privacy policies and legal obligations applicable to the payment method selected by the Customer.

The relevant payment service may process information relating to the transaction, billing details, payment authorisation, fraud prevention and identity or eligibility checks.

Where Klarna is selected, Klarna may process personal information to assess the Customer’s eligibility for its payment services. ELYROA does not control or make Klarna’s eligibility decisions.

ELYROA does not have access to the Customer’s complete payment card number. Payment information is protected using the security standards applicable to the payment method selected, including PCI-DSS where relevant.

9. Sharing personal data

ELYROA does not sell personal data.

Personal data may be shared, where necessary, with service providers involved in operating the Website and fulfilling orders, including:

  • Shopify as the Website’s e-commerce hosting provider;
  • the payment method selected by the Customer;
  • carriers, logistics providers and delivery partners;
  • customer service and communication providers;
  • email and marketing service providers;
  • analytics and advertising providers, subject to consent where required;
  • Product review providers;
  • accounting, legal or professional advisers; and
  • public authorities where disclosure is required by law.

These recipients may process personal data only to the extent necessary to provide their services or comply with their legal obligations.

10. International data transfers

Some of ELYROA’s service providers may process personal data outside France, the European Economic Area or the United Kingdom.

Where required, international transfers are protected by an adequacy decision, approved standard contractual clauses or another recognised legal safeguard.

Further information about the safeguards applicable to a particular transfer may be requested by contacting contact@elyroa.com.

11. Data retention

ELYROA retains personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with legal, accounting or regulatory obligations.

  • Order and invoicing records may be retained for up to ten (10) years to comply with accounting and legal obligations.
  • Customer account information is retained while the account remains active and may be deleted following a valid request, subject to legal retention obligations.
  • Customer service communications are retained for the period necessary to process the request and manage any related dispute.
  • Information relating to warranty claims may be retained for the duration of the warranty and any applicable limitation period.
  • Marketing information may be retained until consent is withdrawn or for up to three (3) years following the last meaningful contact, subject to applicable law.
  • Cookie and analytics information is retained according to the duration applicable to each cookie or tracking technology.
  • Fraud-prevention information is retained only for as long as necessary to investigate and prevent suspicious activity or manage related claims.

At the end of the applicable retention period, the information is deleted or anonymised unless further retention is required by law.

12. Cookies and similar technologies

The Website uses cookies and similar technologies that are necessary for its operation.

Subject to your consent where required, the Website may also use analytics, personalisation and advertising cookies.

You may accept, refuse or adjust your cookie preferences through the consent management tool available on the Website. Refusing non-essential cookies does not prevent you from accessing the main features of the Website.

Further information about the categories, purposes and duration of cookies used on the Website is available through the cookie management tool.

13. Data security

ELYROA and its service providers implement reasonable technical and organisational measures designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

The Website uses secure communication technology to protect information transmitted between your device and the Website.

However, no method of transmission or electronic storage is completely secure. ELYROA cannot guarantee absolute security but will take appropriate steps if a personal data incident occurs.

14. Your rights

Subject to the conditions and limitations provided by applicable law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete information;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to certain processing based on legitimate interests;
  • request the portability of information you provided;
  • withdraw your consent at any time;
  • object to direct marketing; and
  • submit a complaint to a competent data protection authority.

To exercise any of these rights, contact ELYROA at contact@elyroa.com.

ELYROA may request information reasonably necessary to confirm your identity before responding. Requests will be processed within the period required by applicable law.

15. Complaints

If you have concerns about the way your personal data is processed, please contact ELYROA first so that the matter can be reviewed.

You may also submit a complaint to the French data protection authority:

Commission Nationale de l’Informatique et des Libertés
Website: www.cnil.fr

Customers residing in the United Kingdom may also contact the UK Information Commissioner’s Office where applicable:

Information Commissioner’s Office
Website: ico.org.uk

16. Age requirements

The Website and its Products are intended for adults. By placing an order, you confirm that you have the legal capacity to enter into a contract or that you are acting with the authorisation of a parent or legal guardian.

ELYROA does not knowingly collect personal data directly from children for marketing purposes.

17. Third-party links

The Website may contain links to third-party websites or services.

Once you leave the ELYROA Website, the processing of your personal information may be governed by the privacy policy of the relevant third party. ELYROA is not responsible for the privacy practices of websites it does not control.

You should review the privacy policy of a third-party website before providing personal information.

18. Business transfers

If all or part of the ELYROA business is sold, transferred or reorganised, relevant personal data may be transferred to the purchaser or successor where necessary for the transaction and permitted by applicable law.

Any recipient will be required to process the information in accordance with applicable data protection requirements.

19. Changes to this Privacy Policy

ELYROA may update this Privacy Policy to reflect changes to the Website, its service providers, its data-processing practices or applicable legal requirements.

The current version will be published on this page with its latest update date. Material changes will be communicated where required by law.

20. Contact

For questions about this Privacy Policy, the processing of your personal data or the exercise of your rights, please contact:

ELYROA
47 rue Vivienne
75002 Paris
France

Email: contact@elyroa.com
Telephone: +33 7 56 84 68 33