Privacy policy

Courtesy translation: only the French version is legally binding.

PRIVACY POLICY

1. Data controller
Personal data collected on starcowparis.com and in store are processed by JUST COW, a French SARL with share capital of €7,622.45, trading as STAR-COW, 64 rue Saint-Honoré, 75001 Paris, France, Paris Trade and Companies Register no. 409 144 425, SIRET 409 144 425 00074.
Contact for any question about your data: sav@starcowparis.com – +33 1 88 13 20 82 (press 2).

2. Data collected
We collect only the data we need:

  • identity and contact details: surname, first name, email address, phone number, delivery and billing addresses, date of birth if you provide it;
  • orders: products purchased, amounts, online and in-store purchase history, returns and claims;
  • payment: payment method used and transaction status. Your full card details are processed directly by our payment providers: we do not store them;
  • customer account: login details, preferences, participation in raffles;
  • communication: your exchanges with our customer service, your reviews;
  • browsing: IP address, device and browser type, pages viewed, data collected by cookies according to your choices (see section 9).

3. Purposes and legal bases

  • Managing your orders, payments, deliveries, returns and customer service: performance of the contract.
  • Managing your customer account and your participation in raffles: performance of the contract.
  • Preventing and combating fraud, handling payment disputes and any legal proceedings: legitimate interest.
  • Sending you our newsletter, offers and alerts (back in stock, launches) by email or SMS: consent (and, for customers, legitimate interest for similar products, with the option to object at any time).
  • Measuring site audience and improving our services: consent (cookies).
  • Displaying personalised advertising: consent (cookies).
  • Collecting and publishing customer reviews: legitimate interest.
  • Complying with our accounting and tax obligations: legal obligation.

4. Retention periods

  • Customer data: for the duration of the business relationship, then 3 years after your last purchase for marketing purposes.
  • Prospect data (newsletter subscribers who have not made a purchase): 3 years after your last contact with us.
  • Invoices and accounting records: 10 years (legal obligation).
  • Data relating to fraud or a dispute: as long as necessary to handle it and for the applicable limitation periods.
  • Cookies: 13 months maximum; your consent choices are kept for 6 months.
  • Customer account: until you delete it, or after 3 years of inactivity.

5. Recipients
Your data are intended for our authorised staff (customer service, logistics, marketing) and for our service providers, to the extent necessary for their tasks. We never sell your data.
They may be disclosed to the competent authorities where required by law, and to the police or gendarmerie and payment institutions in the event of fraud.

6. Service providers
We use the following service providers in particular:

  • hosting and e-commerce platform: Shopify;
  • payment: Shopify Payments, PayPal, Alma, Apple Pay;
  • delivery and logistics: Colissimo, UPS, Mondial Relay, Sendcloud;
  • emailing, SMS and customer reviews: Klaviyo;
  • audience measurement and advertising (only with your consent): Google Analytics, Microsoft Clarity, Meta (Facebook, Instagram).

7. Transfers outside the European Union
Some of these providers are established or process data outside the European Union, in particular in the United States and Canada. These transfers are covered by safeguards provided for by the GDPR: an adequacy decision of the European Commission (including the EU–US Data Privacy Framework) or standard contractual clauses. You can obtain information about these safeguards by writing to us.

8. Your rights
You have the right to access, rectify and erase your data, to restrict and object to its processing and to data portability, as well as the right to withdraw your consent at any time and to set instructions regarding what happens to your data after your death.
You can unsubscribe from emails and SMS at any time using the unsubscribe link or by replying STOP.
To exercise your rights, write to us at sav@starcowparis.com. We may ask you to prove your identity if there is reasonable doubt. We reply within one month.
If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the CNIL (www.cnil.fr).

9. Cookies
On your first visit, a banner lets you accept, refuse or customise non-essential cookies (audience measurement, advertising). Cookies strictly necessary for the site and the cart to work do not require your consent. You can change your choices at any time using the cookie settings link at the bottom of the page.

10. Security
We implement appropriate technical and organisational measures to protect your data: encrypted communications (HTTPS), access restricted to authorised persons, and service providers bound by confidentiality and security obligations.

11. Minors
The site is intended for adults. Minors must obtain the consent of their legal representative before creating an account or placing an order.

12. Changes to this policy
We may update this policy. The version in force is the one published on the site; we will inform you of any significant change.

Last updated: 21 October 2026