Privacy Policy

Date: 2025-09-01


At cflonge.store (“we,” “us,” or “our”), we are committed to protecting your personal data and ensuring compliance with applicable data protection laws, including the European Union’s General Data Protection Regulation (GDPR) and other regional regulations. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, make purchases, or interact with our services.

1. Definitions & Data Controller

  • Personal Data: Any information that directly or indirectly identifies you, such as your name, address, email, phone number, payment details, or browsing behavior.
  • Data Controller: cflonge.store is the data controller responsible for processing your personal data. You can contact us at:
    • Email: support@cflonge.store

2. What Personal Data Do We Collect?

We collect personal data in two main ways: data you provide voluntarily, and data automatically collected when you use our services.

2.1 Data You Provide Voluntarily

  • Account Registration: When creating an account, we collect your full name, email address, password (encrypted), phone number, and shipping/billing addresses.
  • Purchases: When placing an order, we collect payment details (e.g., credit card number, expiry date, billing address), order history, and delivery preferences.
  • Communications: When you contact us (via email, contact form, or phone), we collect your message content, contact details, and any information you share to resolve inquiries.
  • Marketing Consent: If you opt in to marketing communications, we store your consent status and preferences (e.g., preferred communication channels).

2.2 Data Automatically Collected

When you visit or use our website, we automatically collect the following data via cookies, server logs, and tracking technologies:


  • Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and network provider.
  • Usage Data: Pages visited, time spent on each page, links clicked, search queries, and the date/time of your visit.
  • Tracking Data: Information from cookies, web beacons, and third-party analytics tools (e.g., Google Analytics) to understand user behavior and improve our services.

3. How Do We Use Your Personal Data?

We process your personal data for the following purposes, based on the legal bases outlined in the GDPR:


Purpose of Processing Legal Basis
Process and fulfill orders (e.g., shipping, payment processing) Performance of a contract (Art. 6(1)(b) GDPR)
Create and manage your account Performance of a contract (Art. 6(1)(b) GDPR)
Respond to your inquiries or complaints Legitimate interest (to provide customer service, Art. 6(1)(f) GDPR)
Send marketing communications (e.g., promotions, new products) Your consent (Art. 6(1)(a) GDPR) – you can withdraw consent at any time
Improve website functionality and user experience Legitimate interest (to enhance our services, Art. 6(1)(f) GDPR)
Detect and prevent fraud or misuse of our services Legitimate interest (to protect our business, Art. 6(1)(f) GDPR)
Comply with legal obligations (e.g., tax, accounting) Legal obligation (Art. 6(1)(c) GDPR)

4. Who Do We Share Your Personal Data With?

We do not sell your personal data to third parties. However, we may share your data with the following parties for the purposes outlined above:

4.1 Service Providers

  • Payment Processors: Companies like PayPal, Stripe, or credit card processors to handle payments securely. They receive only necessary payment details (e.g., card number, billing address) and are contractually obligated to protect your data.
  • Shipping & Logistics Partners: Carriers like DHL, UPS, or USPS to deliver orders. They receive your name, shipping address, and order details to fulfill delivery.
  • IT & Hosting Providers: Companies that host our website, manage servers, or provide technical support (e.g., cloud services). They process data only as instructed by us.
  • Analytics Providers: Tools like Google Analytics to analyze website usage. These providers may collect data via cookies (see Section 6 for details).

4.2 Legal & Regulatory Authorities

We may disclose your data if required by law (e.g., court order, tax audit) or to protect our legal rights (e.g., investigating fraud).

4.3 Third-Party Partners 

If you purchase products through a partner platform (e.g., marketplaces), we may share necessary data with that partner to process the order, as permitted by your agreement with them.

5. Data Transfers Outside the EEA

If our service providers are based outside the European Economic Area (EEA), we ensure your data is protected by:


  • Using EU-approved standard contractual clauses (SCCs) for transfers to countries without adequate data protection laws.
  • Verifying that the recipient is in a country deemed to have adequate protection (e.g., the U.S. via the EU-U.S. Data Privacy Framework).
    You can request a copy of these safeguards by contacting support@cflonge.store.

6. Cookies & Tracking Technologies

We use cookies and similar technologies (e.g., web beacons, pixels) to enhance your experience. Here’s how we categorize them:

6.1 Types of Cookies

  • Strictly Necessary Cookies: Essential for website functionality (e.g., logging in, adding items to cart). These cannot be disabled.
  • Functional Cookies: Remember your preferences (e.g., language, shipping address) to personalize your experience. Disabling them may reduce functionality.
  • Performance/Analytics Cookies: Collect data on how you use the website (e.g., pages visited) to improve performance. We use Google Analytics for this (see Section 6.3).
  • Advertising/Targeting Cookies: Track your activity to show relevant ads (e.g., retargeting). These are set by third-party ad networks (e.g., Google Ads, Facebook Ads).

6.2 Managing Cookies

  • You can control cookies via your browser settings (e.g., block all cookies, delete existing ones). Note that disabling necessary cookies may break website features.
  • Use our cookie banner (on the homepage) to adjust preferences for non-necessary cookies. You can update preferences anytime via the “Manage Cookies” link in the website footer.

6.3 Google Analytics

We use Google Analytics to analyze user behavior. Google may transfer this data to the U.S. For more on how Google processes data, see Google’s Privacy Policy. You can opt out using the Google Analytics Opt-out Browser Add-on.

7. Data Retention & Erasure

We retain your personal data only as long as needed for the purposes outlined, plus any legal retention periods:


  • Account Data: Retained while your account is active. If you close your account, we delete data unless required by law (e.g., tax records).
  • Order Data: Retained for 7 years to comply with tax and accounting laws (per EU and local regulations).
  • Marketing Data: Retained until you withdraw consent or opt out of communications.


To request erasure of your data, contact support@cflonge.store. We will respond within 1 month (extendable by 2 months for complex requests).

8. Data Security

We use technical and organizational measures to protect your data from unauthorized access, loss, or misuse:


  • Encryption of data in transit (SSL/TLS) and at rest (AES-256).
  • Secure access controls (e.g., two-factor authentication for staff).
  • Regular security audits and updates to systems.


While we strive to protect your data, no method is 100% secure. We are not liable for breaches caused by third-party attacks beyond our control.

9. Your Rights Under Data Protection Laws

You have the following rights regarding your personal data, which you can exercise by contacting support@cflonge.store:


  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data (if no legal reason to retain it).
  • Right to Restriction of Processing: Ask us to stop processing your data (e.g., while verifying accuracy).
  • Right to Data Portability: Receive your data in a structured, machine-readable format (e.g., for transferring to another provider).
  • Right to Object: Object to processing based on our legitimate interests (e.g., marketing) – we will stop unless we have compelling reasons to continue.
  • Right to Withdraw Consent: If processing is based on your consent (e.g., marketing), you can withdraw it at any time (this does not affect past processing).


To verify your identity when making a request, we may ask for details like your email address or order number. We will respond to requests within 1 month.

10. Complaints

If you are unhappy with how we process your data, you have the right to lodge a complaint with a data protection authority. In the EU, contact your local supervisory authority (e.g., ICO in the UK, CNIL in France).

11. Changes to This Privacy Policy

We may update this policy to reflect legal changes or new services. Updates will be posted on this page with a revised “Date.” Your continued use of our services after the update constitutes acceptance of the new policy.

12. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact:


  • Email: support@cflonge.store