Privacy policy
This Privacy Policy explains how your personal data is collected, used, stored and protected when you visit or place an order on revivoavenue.com (the “Site”), operated by the Revivo Avenue brand. It is issued in accordance with Regulation (EU) 2016/679 (the “GDPR”), the French Loi Informatique et Libertés (as amended), and the applicable guidance of the Commission Nationale de l’Informatique et des Libertés (“CNIL”). For visitors in the United Kingdom, the equivalent provisions of the UK GDPR apply.
DATA CONTROLLER
The data controller is SAS 137 PROJECT, a société par actions simplifiée with share capital of €1,000, registered at 60 rue François 1er, 75008 Paris, France, under SIRET 991 869 728 00014 and R.C.S. Paris 991 869 728, with intra-EU VAT number FR45 991 869 728, trading under the brand “Revivo Avenue”. You can reach us regarding data protection at [email protected].
We have not appointed a Data Protection Officer, as this is not mandatory given the nature and scale of our processing. All requests relating to your personal data should be sent to the address above.
SCOPE
This policy applies to all personal data we process in connection with the Site: when you browse it, purchase from it as a guest, contact our customer service, or subscribe to our communications. The Site currently offers guest checkout only, and no customer account is created.
DATA WE COLLECT
We collect only the data necessary for the purposes set out below. This includes your identity and contact details, meaning your first and last name, email address and telephone number; your order and delivery details, meaning billing address, shipping address, order contents, order history and order value; payment information limited to the confirmation and reference of your transaction, since card details are entered directly with our payment providers, Stripe and PayPal, and are never stored or processed on our servers; the content of your communications with us by email or WhatsApp, together with our replies; your marketing preferences, including your email subscription status and your interactions with our emails such as opens and clicks; and technical and browsing data such as your IP address, device and browser information, the pages you view, and data collected through cookies and similar technologies as described below. We do not collect special-category data such as health, ethnicity or political opinions, and we ask that you do not send us any such data.
PURPOSES AND LEGAL BASES
We process your order and delivery data to process, fulfil and deliver your purchases, on the basis of the performance of our contract with you. We process payment information to take and confirm payment, on the basis of contract performance and our legal obligations. We use your contact details and message content to respond to your enquiries by email or WhatsApp, on the basis of contract performance and our legitimate interest in assisting our customers. We issue and retain invoices and accounting records in order to comply with our legal obligations. We send marketing emails and newsletters, and where applicable cart-abandonment and behaviour-based emails, on the basis of your consent. We carry out audience measurement and analytics through Google Analytics, and advertising and conversion measurement through Meta, on the basis of your consent. We process technical data to prevent fraud and secure the Site, on the basis of our legitimate interest in protecting our business and our customers. Where processing relies on legitimate interest, we have weighed that interest against your rights and freedoms, and you may object at any time. Where processing relies on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.
COOKIES AND SIMILAR TECHNOLOGIES
The Site uses cookies and similar trackers in three categories. Strictly necessary cookies allow the Site and the checkout to function and do not require consent. Analytics cookies, through Google Analytics 4, measure traffic and usage. Marketing cookies, through the Meta Pixel and Conversions API, measure advertising performance and enable relevant advertising. Non-essential cookies, meaning analytics and marketing, are only deposited after you have given consent through our consent banner, managed by [CookieYes / Complianz]. You can accept, refuse or set your preferences by category at any time, and revisit your choices through the banner’s preference link. In line with CNIL guidance, your consent choices are retained for a maximum of thirteen months, after which consent is requested again, and trackers have a lifespan not exceeding twenty-five months. Refusing non-essential cookies is as straightforward as accepting them and does not prevent you from browsing or purchasing.
RECIPIENTS AND PROCESSORS
We share personal data only with the recipients described here, each acting under a data processing agreement and only as required for its function. Our hosting and e-commerce platform is provided by Automattic Inc. through WordPress.com and WooCommerce. Payments are handled by Stripe, through Stripe Payments Europe Ltd in Ireland, and by PayPal, through PayPal Europe S.à r.l. et Cie in Luxembourg. Email and marketing automation is provided by Klaviyo Inc. Analytics is provided by Google, through Google Ireland Ltd and Google LLC. Advertising is provided by Meta, through Meta Platforms Ireland Ltd and Meta Platforms Inc. Your order is delivered and returns are handled by our shipping and logistics partners, [SPECIFY CARRIERS / WAREHOUSE OPERATOR]. We may also disclose data to public authorities where required by law. We do not sell your personal data.
INTERNATIONAL DATA TRANSFERS
Some of our processors are established in, or transfer data to, the United States. These transfers are governed by appropriate safeguards under Chapter V of the GDPR, namely the EU-US Data Privacy Framework and its UK Extension where the recipient is certified under that framework, and the European Commission’s Standard Contractual Clauses, supplemented by additional technical and organisational measures where necessary. You may request a copy of the relevant safeguards by contacting us at the address given above.
RETENTION PERIODs
We keep personal data no longer than necessary for the purposes for which it was collected. Order, invoice and accounting records are kept for ten years, in accordance with Article L123-22 of the French Code de commerce. Customer contact data is kept for the duration of the commercial relationship and for up to three years after your last activity, for the purpose of managing the relationship and direct marketing. Marketing consent and prospect data is kept for three years from collection or from your last contact with us. Customer service communications are kept for the time needed to handle your request and a reasonable period afterwards. Cookie consent records and cookies are kept as described in the cookies section above. Payment data is retained by our payment providers in accordance with their own retention rules and applicable legal obligations.
YOUR RIGHTS
Under the GDPR and the Loi Informatique et Libertés, you have the right to access your personal data, to have inaccurate or incomplete data corrected, to have your data erased, to restrict processing, to data portability, to object to processing based on legitimate interest and at any time to direct marketing, to withdraw your consent at any time where processing is based on consent, and to define directives regarding the fate of your personal data after your death. To exercise any of these rights, contact us at [email protected] or by post at the address given above. We will respond within one month, and we may ask you to confirm your identity where reasonably necessary. If you believe your rights have not been respected, you may lodge a complaint with the CNIL at 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at www.cnil.fr. Residents of the United Kingdom may complain to the Information Commissioner’s Office.
PROFILING AND AUTOMATED DECISIONS
We use cookies and marketing tools, namely Meta, Google Analytics and Klaviyo, to segment audiences and measure the relevance of our advertising and communications. This constitutes profiling for marketing purposes, carried out on the basis of your consent. It does not produce legal effects concerning you or similarly significantly affect you, and we do not make decisions about you based solely on automated processing.
SECURITy
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or loss, including encrypted connections over HTTPS and TLS and contractual security commitments from our processors.
MINORS
The Site is intended for adults and is not directed at children. We do not knowingly collect personal data from persons under the age of fifteen, the age of digital consent in France, without the authorisation of a holder of parental responsibility. If you believe a minor has provided us with personal data, please contact us so that we may delete it.
CHANGES TO THIS POLICY
We may update this policy to reflect changes in our processing or in applicable law. The version in force is the one published on this page, identified by the “Last updated” date shown at the end. We encourage you to review it periodically.
CONTACT
For any question relating to this policy or to your personal data, contact SAS 137 PROJECT at 60 rue François 1er, 75008 Paris, France, or at [email protected].
Last updated 4 June 2026