Privacy policy

Last updated: October 22, 2026

1. Who is responsible for your data

Alexance MOURIER EI (Hushwoven), 9 rue André Crétin, 01100 Oyonnax, France, SIRET 939 228 524 00012, contact@hushwoven.com.

This policy explains what personal data we collect on hushwoven.com, why, and what your rights are, in line with the EU General Data Protection Regulation (GDPR), the UK GDPR and the French Data Protection Act.

2. Data we collect

Orders: first and last name, delivery and billing address, email, phone number (optional), products purchased, order history.
Payment: card details are processed directly by our payment providers (Shopify Payments, PayPal); we never have access to them.
Contact: the information you send us by email or through a form.
Newsletter: your email address, if you sign up.
Browsing: technical data (IP address, browser, pages viewed) collected through cookies, according to your choices.

3. Why we use it and on what legal basis

To process and deliver your orders and handle returns and complaints: performance of the contract.
To meet our accounting and tax obligations: legal obligation.
To answer your messages, prevent fraud and keep the website secure: legitimate interest.
To send you our newsletter and offers: consent (you can unsubscribe at any time using the link in each email).
Audience measurement and advertising through non-essential cookies: consent.

4. Who receives it

Your data is used by us and shared only with the service providers we need: Shopify (store hosting), Shopify Payments and PayPal (payment), carriers and our logistics partner (delivery), and where relevant our email and audience measurement tools. We never sell your personal data.

5. International transfers

Some providers (including Shopify and our logistics partner) may process data outside the European Union and the United Kingdom, for example in Canada, the United States or Asia. These transfers are covered by appropriate safeguards (adequacy decisions, standard contractual clauses).

6. How long we keep it

Order data and invoices: 10 years (accounting obligation).
Customer data for marketing: 3 years after your last purchase or contact.
Customer service messages: for as long as needed to handle your request, then archived for the applicable limitation period.
Cookies: 13 months maximum; your consent choices are kept for 6 months.

7. Cookies

The website uses cookies that are needed for it to work (cart, checkout, security), which do not require your consent. Audience measurement and advertising cookies are only set with your agreement, given through the banner shown on your first visit. You can change your choices at any time.

8. Your rights

You have the right to access, correct, delete, restrict, object to and port your data, to withdraw your consent at any time, and (in France) to give instructions about your data after your death. To exercise these rights, email contact@hushwoven.com; we reply within one month. Wherever you live, you can contact us about your data and we will handle your request. If you believe your rights are not respected, you can complain to the French data protection authority, the CNIL (www.cnil.fr), to your local data protection authority in the EU, or, in the United Kingdom, to the Information Commissioner's Office (ico.org.uk).

9. Security

We take reasonable measures to protect your data (encrypted SSL connection, restricted access). Since no transmission over the internet is completely secure, we recommend that you do not send sensitive information by email.

10. Children

Our website is intended for adults. We do not knowingly collect data about children.

11. Changes

We may update this policy; the date of the latest update is shown at the top of this page.