Last updated: February 14, 2026

1. Data Controller

The data controller for the data collected on the site Where it all began is:

Emma Darsonville
Micro-entrepreneur
Email: contact@laoutoutacommence.fr

2. Data collected

The data that may be collected during your browsing or ordering process includes:

• First and last name
• Mailing address
• E-mail address
• Phone number
• Payment information (processed securely by payment providers)
• Browsing data and cookies

3. Purposes of the processing

The data is collected in order to:

• Process and ship orders
• Provide customer service
• Manage payments and prevent fraud
• Improve the user experience
• Comply with legal and accounting obligations

4. Legal basis

Data processing is based on:

• Contract execution (order management)
• Compliance with legal obligations
• Consent (cookies and marketing communications)
• Legitimate interest (fraud prevention)

5. Data Recipients

The data may be transmitted to the following service providers, only to the extent strictly necessary for the performance of the services:

• Shopify (store hosting and management)
• Shopify Payments / Stripe (secure payment)
• Gelato (production and printing)
• DHL, DPD or equivalent carriers (delivery)
• Analytical and marketing tools (Google Analytics, Meta, etc.)

6. Transfer outside the European Union

Some service providers may be located outside the European Union. In this case, appropriate safeguards are put in place in accordance with the GDPR.

7. Shelf life

The data is stored:

• For the time necessary to process the order
• For the legally required accounting retention period (10 years)
• Until the withdrawal of consent for marketing data

8. User Rights

In accordance with Regulation (EU) 2016/679 (GDPR), you have the following rights:

• A right of access
• A right of rectification
• A right to erasure
• A right to object
• From a right to limitation
• From a right to portability

To exercise these rights, you can write to: contact@laoutoutacommence.fr

In the event of a dispute, you also have the right to lodge a complaint with the CNIL.

9. Security

The site uses appropriate technical and organizational security measures to protect personal data against loss, unauthorized access or disclosure. Payments are secured through certified providers.

10. Cookies

The site uses cookies necessary for its operation as well as analytical and marketing cookies. Consent can be given or withdrawn via the cookie management banner.

11. Policy Amendment

This policy may be modified at any time to ensure its compliance with applicable legislation.