Confidentiality
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from sesameaparis.com (the “Site”).
0 - Who is responsible for the processing of your data?
The controller responsible for processing your personal data is:
SESAME A PARIS 16 rue Richard Lenoir, 75011 Paris, France SIRET: 945 001 956 00016 Intra-community VAT number: FR72945001956 Email: contact@sesameaparis.com
1 - Personal information collected
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device.
Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site.
We refer to this automatically collected information as “Device Information.”
Here is the list of cookies we use:
_session_id: unique session identifier, allows Shopify to store information about your session (referrer, landing page, etc.). Duration: session.
_shopify_visit: no data held, persists for 30 minutes from the last visit. Used to record the number of visits.
_shopify_uniq: no data held, expires at midnight (depending on the visitor's location) of the next day. Counts the number of visits to a store by a single customer.
cart: unique identifier, persists for 2 weeks, stores information about your shopping cart.
_secure_session_id: unique session identifier.
storefront_digest: unique identifier, undefined if the store has a password, used to determine if the current visitor has access.
“Log files” track activity on the Site and collect data such as your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
Furthermore, when you make or attempt to make a purchase through the Site, or when you book a workshop, we collect certain information from you, including your name, billing address, shipping address, payment information (processed directly by our payment providers; we do not have access to your full credit card numbers), email address, and phone number.
This information is referred to as “Order Information.”
2 - Purposes, legal bases, and retention periods
We process your personal data for the following purposes:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Processing your orders and workshop bookings (payment, shipping, invoicing) | Performance of the contract | Duration of the commercial relationship + 10 years (accounting and tax obligations, Art. L123-22 of the Commercial Code) |
| Management of your customer account | Performance of the contract | Account lifetime + 3 years from the last contact |
| Responding to your inquiries via contact@sesameaparis.com | Performance of the contract / legitimate interest | 3 years from the last exchange |
| Fraud prevention and Site security | Legitimate interest | 13 months maximum (connection data) |
| Marketing communications (newsletter, offers) | Consent (or legitimate interest for prospecting on similar products if you are already a customer) | Until withdrawal of your consent, or 3 years from the last active contact |
3 - Sharing your personal information
Your personal data may be shared with third parties in the following cases:
Payment providers (Shopify Payments, Klarna, PayPal, etc.) for the secure processing of your payments.
Shopify Inc., our e-commerce hosting platform — to learn more: https://www.shopify.fr/legal/confidentialite.
Carriers and logistics providers, for the delivery of your orders.
Competent authorities, when required by law (judicial requisition, legal obligation, protection of our rights).
We never sell your personal data to third parties for commercial purposes.
4 - Data transfers outside the European Union
Some of our providers (notably Shopify Inc.) may process your data outside the European Union, including in Canada and the United States. These transfers are governed by appropriate safeguards, including standard contractual clauses adopted by the European Commission, or by an adequacy decision where applicable. You can obtain a copy of these safeguards by contacting us at contact@sesameaparis.com.
5 - Behavioral advertising
We may use your personal information, with your consent when required, to provide you with targeted advertisements or marketing messages that we believe may be of interest to you.
For more information about how targeted advertising works: http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
To opt out of these services: https://optout.aboutads.info/?c=3&lang=fr.
We do not alter our data collection practices when we detect a “Do Not Track” signal from your browser.
6 - Your rights
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights regarding your personal data:
Right of access
Right of rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Right to define directives regarding the fate of your data after your death
Right to withdraw your consent at any time, when processing is based on it
To exercise any of these rights, contact us at: contact@sesameaparis.com, specifying your identity. We commit to responding to you within one month.
If you believe, after contacting us, that your rights are not being respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — https://www.cnil.fr
7 - Security of your data
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or accidental disclosure.
8 - Minors
The Site is not intended for individuals under 15 years of age. In accordance with French regulations, any processing of data of a minor under 15 years of age requires the joint consent of the minor and a holder of parental authority.
9 - Changes to this policy
We may need to update this Privacy Policy, particularly to comply with any legal, regulatory, judicial, or technical developments. The version in effect is the one published on this page, on the date of your visit.
Last update: 12/09/2026