Privacy Policy

Last updated: 14 October 2026

PHLAME (SAS, 47 rue Vivienne, 75002 Paris, France) operates the online shop phlame.live. The website, its content, features, products and services are referred to below as "the Services". The shop is powered by Shopify. This policy describes how we collect, use and disclose your personal information when you use the Services, make a purchase or contact us. In the event of any conflict with our terms and conditions of sale, this policy prevails for all matters relating to your personal information.

1. Data controller

PHLAME is the controller of your personal information. For any questions: societe@phlame.live, +33 7 67 07 03 85, or by post at 48 rue Georges Clemenceau, 49300 Cholet, France.

2. Information we collect

Depending on how you use the Services, we may collect:

  • your contact details: name, billing and delivery addresses, telephone number, email address;
  • your payment information: payment method, transaction confirmation and details. Card numbers are processed directly by our payment provider, and we do not have access to them;
  • your account information: username, preferences, loyalty points;
  • your order information: products viewed, added to your basket, purchased, returned or exchanged;
  • your communications with us: the content of messages sent to our customer service;
  • information about your device: browser, connection, IP address, technical identifiers;
  • usage information: pages viewed, date and length of visits.

This information comes directly from you, from your browsing (cookies and similar technologies), and from our service providers when they act on our behalf.

3. How we use your information

We use your information to:

  • fulfil your order: payment processing, preparation, shipping, returns, and management of your account and loyalty membership;
  • communicate with you: customer service and replies to your requests;
  • send you our offers: promotional emails, text messages or letters, and personalised advertising based on your purchases and browsing, with your consent where required by law;
  • keep the Services secure: fraud prevention and protection of your account;
  • comply with our legal obligations: accounting, responding to authorities, defending our rights.

4. Disclosure of your information

Your information may be disclosed:

  • to Shopify and our service providers (payment, hosting, shipping, customer service, analytics), who act on our behalf;
  • to our marketing partners, in order to show you personalised advertising. Depending on where you live, you may object to this;
  • to third parties you ask us to inform, such as the carrier, or when you sign in through a social network;
  • where required by law, or in connection with a business restructuring.

We do not sell your personal information.

5. Our relationship with Shopify

The Services are hosted by Shopify, which processes certain information to provide and improve its services, including when it acts as a controller for its own features. To find out more: Shopify Consumer Privacy Policy and Shopify Privacy Portal.

6. Cookies

The website uses cookies that are necessary for it to function (basket, login, security) and, with your consent, audience measurement and advertising cookies. You can accept or refuse the latter via the banner displayed on your first visit, and change your choice at any time in your browser settings.

7. International transfers

Your information may be transferred and processed outside the European Economic Area, in particular by Shopify and its subcontractors. These transfers rely on recognised mechanisms, such as the European Commission's standard contractual clauses, except where the destination country offers a level of protection deemed adequate.

8. Retention period

We keep your information for as long as necessary to manage your account and orders, and then for the periods required by law, in particular ten years for accounting records. Data used for marketing purposes is kept for three years after our last contact with you.

9. Security

We implement appropriate measures to protect your information. As no measure is infallible, we recommend that you do not send us sensitive information through unsecured channels.

10. Children's data

The Services are not intended for minors, and we do not knowingly collect their information. If you are the parent or guardian of a minor who has provided us with information, please contact us to request its deletion.

11. Your rights

Under the General Data Protection Regulation (GDPR), you have:

  • the right to access, rectify and erase your information;
  • the right to data portability;
  • the right to object to and restrict processing;
  • the right to withdraw your consent at any time, without affecting the lawfulness of prior processing;
  • the right to set instructions regarding what happens to your data after your death.

You can unsubscribe from our promotional emails at any time using the link included in each of them. To exercise your rights, write to us at societe@phlame.live. We may ask you to verify your identity, and we will respond within one month.

12. Complaints

If you believe your rights have not been respected, you can lodge a complaint with the CNIL (cnil.fr), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or with the data protection authority in your country of residence.

13. Changes to this policy

We may update this policy to reflect changes in our practices or in regulations. The date of the last update is shown at the top of the page.

14. Contact

For any questions about this policy or to exercise your rights: write to us at societe@phlame.live, call us on +33 7 67 07 03 85 or send us a letter at 48 rue Georges Clemenceau, 49300 Cholet, France.