Privacy policy

Data controller

9434-2128 Québec inc. (NOPé), 8772, Des Portageurs, Saguenay (Québec) G7N 2A3, Canada, is responsible for processing your personal data. Contact: info@boutiquenope.com.

Representative in the European Union (Article 27 of the GDPR): Catherine Sauvageau, catherine.sauvageau@boutiquenope.com. You may contact her with any questions about your personal data.

Data, purposes and retention periods

Purpose Data Legal basis (GDPR, Art. 6) Retention period
Orders, delivery and returns Name, addresses, email address, telephone number, order contents Performance of a contract [3] years after the order
Invoicing and VAT Invoices, payment history Legal obligation 7 years
Customer service Email correspondence, photos submitted Performance of a contract; legitimate interest [2] years after the last exchange
Customer account Login credentials, order history Performance of a contract Until the account is deleted
Newsletter Email address, first name, language Consent Until you unsubscribe
Fraud prevention IP address, transaction data Legitimate interest [6] months
Audience measurement and advertising See the cookie policy Consent See the cookie policy

We do not sell your personal data or make any fully automated decisions that produce legal effects concerning you.

Recipients

Your personal data is shared only with the necessary service providers, bound by a contract compliant with Article 28 of the GDPR:

  • Shopify International Limited (Ireland): store platform and payments;
  • Bergen Logistics B.V. (Netherlands): order fulfilment and returns;
  • DHL (Germany): delivery and transport;
  • PayPal (United States): payment platform;
  • Klaviyo (United States): email marketing and newsletters;
  • AfterShip (Hong Kong, China): returns management.
Transfers outside the European Union


Our team, based in Canada, accesses your personal data to process your orders and requests. This transfer is based on the European Commission’s adequacy decision concerning Canada.

Some of our service providers are based outside the European Union or transfer personal data outside it:

  • PayPal: for customers in the European Union, the data controller is PayPal (Europe) S.à r.l. et Cie, S.C.A., based in Luxembourg. To the extent that personal data is transferred to PayPal’s infrastructure in the United States, this transfer is governed by the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.

  • Klaviyo (United States): transfers are covered by Klaviyo’s certification under the EU-US Data Privacy Framework, supplemented by the standard contractual clauses included in its data processing agreement.

  • AfterShip (Hong Kong): Hong Kong is not covered by an adequacy decision; transfers are governed by the European Commission’s standard contractual clauses, included in the data processing agreement concluded with AfterShip.

Your rights

You may request access to your personal data, its rectification or erasure, restriction of processing and data portability. You may object to processing based on our legitimate interest and, at any time, to direct marketing. You may withdraw your consent without affecting prior processing.

Write to info@boutiquenope.com. We respond within one month.

You may lodge a complaint with the data protection authority in your country of residence, for example the CNIL in France, the Autoriteit Persoonsgegevens in the Netherlands or the authority of your federal state in Germany.

Update

Last updated: October 20, 2026.