Privacy policy



Last updated: June 2026

1. INTRODUCTION

Desknovra ("we", "our", "us") is committed to protecting the personal data of its customers and website visitors. This Privacy Policy explains what data we collect, how we use it, with whom we share it, and what rights you have regarding your personal information.

This policy applies to all visitors and customers of desknovra.com, regardless of their country of residence. It complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA).

2. DATA CONTROLLER

The data controller responsible for your personal data is:

27 Agency — Verseux Titouan
23 Rue des Tournesols
31170 Tournefeuille, France
SIRET : 99980423000012
Email : support@desknovra.com

3. DATA WE COLLECT

We collect personal data in the following circumstances:

When you place an order:

  • Full name
  • Delivery address
  • Email address
  • Phone number
  • Payment information (processed securely by Shopify Payments or PayPal — we never store your card details directly)
  • Order history and transaction details

When you browse our website:

  • IP address
  • Browser type and version
  • Pages visited and time spent
  • Referring URL
  • Device type and operating system
  • Cookie identifiers

When you contact our support team:

  • Name and email address
  • Content of your message
  • Order reference if applicable

When you leave a product review:

  • Name or username
  • Review content and rating

We do not collect sensitive personal data such as health information, political opinions, racial or ethnic origin, or financial data beyond what is necessary to process your payment.

4. HOW WE USE YOUR DATA

We use your personal data for the following purposes:

Order fulfillment:
Processing and shipping your order, sending order confirmations, shipping notifications, and tracking information.

Customer service:
Responding to your questions, processing returns and refunds, and managing warranty claims.

Legal obligations:
Maintaining transaction records as required by French accounting and tax law.

Marketing and analytics:
Analyzing website traffic and user behavior to improve our store and product offering. Measuring the performance of our advertising campaigns.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

5. LEGAL BASIS FOR PROCESSING (GDPR)

For customers in the European Union and United Kingdom, we process your personal data on the following legal bases:

  • Contract performance — processing your order and delivering your purchase
  • Legal obligation — complying with French accounting and tax requirements
  • Legitimate interest — analyzing website performance and improving our service
  • Consent — sending marketing communications where you have opted in

6. COOKIES

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us recognize you and improve your experience.

Essential cookies — Required for the website to function. They enable shopping cart functionality, secure checkout, and session management. These cannot be disabled.

Analytics cookies — Used to understand how visitors interact with our website. We use Google Analytics to collect anonymous data on page views, session duration, and navigation paths. This data is aggregated and does not identify you personally.

Advertising cookies — Used to measure the effectiveness of our advertising campaigns. We use Google Ads conversion tracking to understand which clicks lead to purchases. This data helps us allocate our advertising budget efficiently.

Managing cookies:
You can control and delete cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of the website. You may also opt out of Google Analytics tracking at analytics.google.com/analytics/web/optout.

7. THIRD-PARTY SERVICES

We share your data with the following third parties to operate our business:

Shopify Inc.
Our e-commerce platform provider. Shopify processes order data, payment information, and stores customer records on our behalf. Shopify is certified PCI DSS compliant.
Privacy policy: shopify.com/legal/privacy

Google LLC — Google Analytics
We use Google Analytics to analyze website traffic and user behavior. Data collected is anonymized and used exclusively for internal reporting purposes.
Privacy policy: policies.google.com/privacy

Google LLC — Google Ads
We use Google Ads to run advertising campaigns and measure conversion performance. Google may use cookies to show you relevant ads on other websites.
Privacy policy: policies.google.com/privacy

UPS (United Parcel Service)
Your delivery address and contact information are shared with UPS to fulfill and track your shipment.
Privacy policy: ups.com/us/en/support/shipping-support/legal-terms-conditions.page

CJDropshipping
Our fulfillment partner processes your order details and delivery address to dispatch your purchase from their US warehouse.

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law. We do not sell your personal data to third parties.

8. DATA RETENTION

We retain your personal data for the following periods:

  • Order and transaction data — 10 years, as required by French accounting law
  • Customer account data — for the duration of the relationship and 3 years after your last interaction
  • Analytics data — 26 months (Google Analytics default retention)
  • Support correspondence — 3 years from the date of the interaction

After these periods, your data is securely deleted or anonymized.

9. YOUR RIGHTS UNDER GDPR

If you are located in the European Union or United Kingdom, you have the following rights regarding your personal data:

  • Right of access — obtain a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate or incomplete data
  • Right to erasure — request deletion of your personal data, subject to legal retention obligations
  • Right to restriction — request that we limit how we use your data in certain circumstances
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interests or for direct marketing purposes
  • Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at support@desknovra.com. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority (CNIL) at cnil.fr.

10. RIGHTS OF CALIFORNIA RESIDENTS (CCPA)

If you are a resident of California, the California Consumer Privacy Act grants you the following additional rights:

  • Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you over the past 12 months
  • Right to delete — request deletion of personal information we have collected, subject to certain exceptions
  • Right to opt out — opt out of the sale of your personal information. We do not sell your personal information to third parties.
  • Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights

To submit a California privacy request, contact us at support@desknovra.com with the subject line "California Privacy Request". We will respond within 45 days.

11. RIGHTS OF CANADIAN RESIDENTS (PIPEDA)

If you are a resident of Canada, you have the right to access your personal information held by us and to request correction of any inaccuracies. You may also withdraw consent to the collection, use, or disclosure of your personal information at any time, subject to legal and contractual restrictions.

To exercise your rights under PIPEDA, contact us at support@desknovra.com.

12. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. Our website uses SSL encryption for all data transmissions. Payment data is handled exclusively by PCI DSS certified providers and is never stored on our servers.

13. INTERNATIONAL DATA TRANSFERS

As we operate internationally, your personal data may be transferred to and processed in countries outside the European Union, including the United States and Canada. When we transfer data outside the EU, we ensure that appropriate safeguards are in place in accordance with GDPR requirements, including Standard Contractual Clauses where applicable.

14. CHILDREN'S PRIVACY

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at support@desknovra.com.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with the revised date. We encourage you to review this policy periodically.

16. CONTACT

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data:

📧 support@desknovra.com
Response time : within 24 hours, Monday to Friday

Desknovra — operated by 27 Agency
23 Rue des Tournesols, 31170 Tournefeuille, France
SIRET : 99980423000012