What we collect

When you place an order, we collect your email address, shipping address, and billing address. This data is encrypted at the application layer using AES-256-GCM before being stored in our database. We never store your payment card information — all payment processing is handled by Stripe on their secure servers.

With your consent, we collect anonymized analytics data including page views and product interactions. Your IP address is stored only as an irreversible hash.

How we use it

We use your personal data to fulfill your order (contract performance, GDPR Art. 6(1)(b)), comply with tax obligations (legal obligation, Art. 6(1)(c)), and — only with your explicit consent — to improve our website through analytics (consent, Art. 6(1)(a)).

Your rights

You have the right to access, export, and delete your personal data. Contact privacy@reve-celeste.com to exercise these rights. We will respond within 30 days.

California residents

Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion, and opt out of the sale of your personal information. RÊVE CÉLESTE does not sell personal information.

Cookies

We use strictly necessary cookies to maintain your shopping cart. Analytics cookies are only activated with your explicit consent via our cookie banner. You can change your cookie preferences at any time using the Cookie Settings link in our footer.

Data processors

We share data with: Stripe (payment processing), Supabase (database hosting), Vercel (website hosting), and Resend (email delivery). Each processor has a signed Data Processing Agreement in place.