Privacy policy

This is an English translation of our French privacy policy (Politique de confidentialité). In case of any difference between the two versions, the French version prevails.

In short

We only collect the data needed for your orders, our exchanges and, with your consent, audience measurement, advertising and the newsletter. We never sell your data. This policy complies with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

Who is responsible for your data?

Mylène THOMAS ZANINO EI, trading as Joli Pot, 4 impasse de Carlet, 31600 Eaunes, France. Contact: contact@joli-pot.fr.

What data, why, and on what legal basis?

What we do	Data concerned	Legal basis	Retention period
Process and deliver your order, customer service, after-sales	Name, addresses, email, phone, order content (including your personalized messages), message history	Performance of the contract	During the order, then 5 years as proof of the contract
Invoicing and accounting	Billing data	Legal obligation	10 years (French Commercial Code)
Payment	Data processed directly by the payment provider (we never see your card number)	Performance of the contract	As set by the provider
Answer your questions (email, form, chat bubble, quote)	Name, email, company where relevant, message	Legitimate interest or pre-contractual steps	3 years after the last contact
Business relationship and B2B prospecting (resellers, companies)	Name, business email, phone, company and shop details	Legitimate interest, objection possible at any time	3 years after the last contact
Newsletter, customers	Email	Legitimate interest (products similar to those already bought), unsubscribe at any time	3 years after the last purchase or contact
Newsletter, prospects	Email	Consent	3 years after the last contact
Manage your points and rewards in the Les Jolis Points loyalty program	Name, email, points balance and history, date of birth if you provide it (birthday offer), rewarded actions such as following @jolipot.fr on Instagram	Performance of the program you join	While your account is active, then deleted 3 years after the last contact or activity
Invite you to leave a review after a purchase	Name, email, order reference	Legitimate interest	For the time of the invitation
Audience measurement and advertising	Cookies and trackers, IP address	Consent (banner)	13 months maximum
Handle your rights requests	Identity, request	Legal obligation	3 years (5 years for an objection)

After you unsubscribe, we only keep your email on a suppression list, so that we no longer write to you.

Who receives your data?

Only the providers we need, who process it on our behalf and on our instructions:

• Shopify: hosting of the website and shop.
• Stripe (card payments), PayPal, and Apple Pay or Google Pay if you choose these payment methods.
• BON Loyalty: management of the Les Jolis Points loyalty program (points, rewards, referrals).
• Carriers: La Poste Colissimo, Mondial Relay, Chronopost when you choose express delivery, and Packlink for shipping (name, address, phone, email). For shipments outside the EU, the carrier and the customs authorities of the destination country also receive the data on the customs declaration.
• Trustpilot: invitations to leave a review after a purchase.
• Meta (Facebook, Instagram) and Google: measurement and advertising, only if you accept the corresponding cookies.
• Brevo (French company, data hosted in the European Union): sending the newsletter and emails about your order or request.
• Accounting and invoicing software.

If you order on Etsy, Faire or Ankorstore, these platforms process your data under their own policies and send us what is needed for delivery.

Your data is never sold, rented or exchanged.

Data transferred outside the European Union

Some providers (Shopify, Stripe, PayPal, Meta, Google) may process data outside the European Union, in particular in the United States and Canada. These transfers are covered by an adequacy decision of the European Commission (Canada, and the EU-US Data Privacy Framework for certified companies) or, failing that, by the European Commission's standard contractual clauses. When we ship to a customer outside the EU, the data needed for delivery and customs is sent to the destination country because it is necessary to perform the contract.

Cookies

On your first visit, a banner lets you choose: accept, reject, or choose by category. Rejecting is as easy as accepting, and does not stop you from ordering.

• Necessary cookies: cart, login, security, remembering your choices. They do not require consent.
• Audience measurement: understanding how the website is used, to improve it. Only with your consent.
• Advertising (Meta, Google): showing you relevant Joli Pot ads and measuring their performance. Only with your consent.

You can change your mind at any time through the "Gérer mes cookies" (manage my cookies) link at the bottom of every page. Your choices are kept for 6 months, then the banner asks you again; cookies themselves never last more than 13 months.

Security

The website uses HTTPS, payments are handled by certified providers, and access to your data is limited to what is needed to process your orders.

Your rights

At any time, you can access your data, have it corrected or erased, restrict its use, object to its processing (and always to prospecting), receive it in a readable format (portability), withdraw your consent, and leave instructions on what happens to it after your death.

To do so, write to contact@joli-pot.fr or to the postal address above. We reply within 1 month. We will only ask for ID if we have reasonable doubt about your identity.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with the data protection authority of your country.

Updates

This policy may change, for example if we change tools. The date of the latest update is shown below, and any significant change will be announced on the website.

Last updated: November 6, 2026 (English translation of the version of November 4, 2026).