Privacy Policy

Last updated: 22 October 2026

This Privacy Policy explains how EXPORGIN EUROPE SAS ("Exporgin", "we", "us") collects, uses and protects your personal data when you visit exporgin.com, create an account, place an order, subscribe to our emails or contact us. We process personal data in line with the EU General Data Protection Regulation (GDPR), the UK GDPR and the French Data Protection Act (Loi Informatique et Libertés).

1. Who is responsible for your data

The data controller is EXPORGIN EUROPE SAS, a simplified joint-stock company (SAS) with share capital of €50,000, registered office at 10 Rue Victor Hugo, 93500 Pantin, France, registered with the Bobigny Trade and Companies Register (RCS) under number 914 283 981.
For any privacy question or request, write to customerservice@exporgin.com with the subject "Privacy".

2. What data we collect

  • Identity and contact data: name, email address, phone number, delivery and billing address.
  • Order data: products purchased, order value, order history, delivery and return information.
  • Payment data: payments are processed by our payment providers. We do not store your full card details.
  • Account data: login details and preferences if you create an account.
  • Communication data: messages you send us by email, contact form or live chat.
  • Marketing data: your email subscription status, the discount codes assigned to you (for example from our Spin & Win game) and how you interact with our emails.
  • Reviews: product reviews, ratings and questions you choose to publish.
  • Technical and usage data: IP address, device and browser type, pages viewed and how you arrived at our site. Analytics and advertising cookies are only used if you accept them (see section 5).

3. Why we use your data and on what legal basis

Purpose Legal basis
Processing and delivering your order, handling returns and refunds, customer service Performance of a contract
Managing your customer account Performance of a contract
Invoicing, accounting and tax obligations Legal obligation
Sending marketing emails and personalised offers Your consent (you can withdraw it at any time)
Analytics and advertising cookies, measuring our advertising Your consent via the cookie banner
Preventing fraud and keeping our website secure Our legitimate interest
Publishing product reviews Your consent

4. Who we share your data with

We only share personal data with service providers who need it to provide their service to us, under contracts that require them to protect it:

  • E-commerce platform and checkout: Shopify.
  • Payment providers: Shopify Payments, PayPal, Klarna and the card networks.
  • Delivery: the carriers that deliver your order and our order-tracking service.
  • Email marketing: Klaviyo.
  • Analytics and advertising (only with your consent): Google (Google Analytics, Google Ads) and Meta (Facebook and Instagram).
  • Reviews: Judge.me.
  • Customer support and website tools: Shopify Inbox (live chat), our cookie consent tool, and apps that power the cart, product recommendations, translations and site performance.
  • Authorities: when the law requires it, for example tax or customs authorities.

We never sell your personal data.

5. Cookies

Strictly necessary cookies keep the website and checkout working and do not require consent. Analytics, advertising and personalisation cookies are only placed after you click "Accept" in our cookie banner, or allow the relevant category under "Preferences". If you click "Decline", these tags are not loaded. You can change your choice at any time from the cookie settings link at the bottom of the page. Your choice is stored for up to 12 months.

6. Transfers outside the European Economic Area

Some of our providers (for example Shopify, Google, Meta and Klaviyo) may process data outside the EEA, including in the United States and Canada. In these cases the transfer is protected by an adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission's Standard Contractual Clauses.

7. How long we keep your data

  • Orders and invoices: 10 years, as required by French accounting law.
  • Customer account: until you delete it, or 3 years after your last activity.
  • Marketing emails: until you unsubscribe, or 3 years after your last interaction with our emails.
  • Customer service messages: up to 3 years.
  • Cookies: a maximum of 13 months; your consent choice for up to 12 months.

8. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. Under French law you can also give instructions about what happens to your data after your death. You can unsubscribe from marketing emails with the link at the bottom of every email.

To exercise your rights, email customerservice@exporgin.com. We will reply within one month. If you are not satisfied with our answer, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority in your country. UK customers can contact the Information Commissioner's Office (ico.org.uk).

9. Children

Our website is not intended for children under 16 and we do not knowingly collect their personal data.

10. Security

We use encrypted connections (HTTPS), payment processing by certified providers and access controls to protect your personal data.

11. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version.