PRIVACY POLICY

Last updated: 18 July 2025

1. Introduction

RAINBOW‑BOW respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store and share your information when you visit rainbowbow.com or purchase our products.

2. Data Controller

  • Entity: RAINBOW‑BOW represented by Grâce Andrianjatovo

  • Postal address: 61 Rue de Lyon, 75012 Paris, France.

  • Email: contact@rainbowbow.com

3. Personal Data We Collect

  • Identification: name, postal address, email, telephone (when you place an order)

  • Transaction: products purchased, payment ID (during checkout)

  • Technical: IP address, browser type, device information, cookies (when you browse the Site)

  • Marketing preferences: newsletter opt‑ins, interests (when you sign up for marketing)

  • Correspondence: emails (when you contact support)

4. Purposes and Legal Bases

  • Process and deliver orders — contract performance (GDPR Art. 6‑1‑b)

  • Manage payments and prevent fraud — legitimate interest (Art. 6‑1‑f)

  • Send transactional emails — contract performance

  • Provide customer support — legitimate interest

  • Send marketing newsletters — consent (Art. 6‑1‑a); you can unsubscribe at any time

  • Analyse site traffic and improve services — legitimate interest

5. Cookies

  • We use first‑party and third‑party cookies to make the site work, measure audience and personalise content.

  • You can manage cookies through the banner displayed on your first visit and through your browser settings.

6. Recipients of Data

  • Authorised RAINBOW‑BOW staff

  • Payment providers such as Stripe or PayPal

  • Logistics partners handling warehousing and delivery

  • Marketing platforms that send our newsletters

  • Public authorities when required by law

We never sell your personal data.

7. International Transfers

When our service providers operate outside the European Economic Area, we ensure your data is protected by EU adequacy decisions, Standard Contractual Clauses or other appropriate safeguards.

8. Retention Periods

  • Invoices: 10 years (accounting obligations)

  • Marketing data: until you withdraw consent

9. Security Measures

  • SSL encryption of all data in transit

  • Strict access controls and authentication

10. Your Rights

  • Access: obtain a copy of your data

  • Rectification: correct inaccurate data

  • Erasure: request deletion when legally possible

  • Restriction: limit processing in certain cases

  • Objection: oppose processing based on legitimate interest

  • Portability: receive your data in a structured format

To exercise these rights, email contact@rainbowbow.com with proof of identity.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be announced by email or a banner on the Site.

14. Contact

For any questions about this policy, contact us at contact@rainbowbow.com or write to the following postal address :

RAINBOW-BOW, 61 Rue de Lyon, 75012 Paris, France.