Privacy policy

Last updated: November 3, 2026.

1. Data controller

The controller of personal data collected on curvea-paris.com is STLN INTERNATIONAL LLP, a limited liability partnership registered in England and Wales with Companies House under number OC460969, with its registered office at 24-26 Arcadia Avenue Fin009, London, N3 2JU, United Kingdom, trading as Curvea. For questions or requests about personal data, contact contact@curvea-paris.com.

2. Data we collect

Depending on how you use the website, we may collect:

• Your name, mailing address, email address, and phone number.
• Order details, including products, amounts, discounts, billing and shipping addresses, order status, and order history.
• Information needed for payment processing and fraud prevention. Full card details are processed by payment providers and are not stored by Curvea.
• Customer account information, if you use an account.
• Customer service correspondence, return requests, complaints, and reviews.
• Technical and browsing information, including IP address, device, browser, pages viewed, interactions, cookie identifiers, and referral source.
• Your marketing preferences and cookie choices.

Information marked as required is needed to process an order or respond to your request. Without it, we may be unable to provide the relevant service.

3. Data sources

We receive information directly from you when you order, create an account, complete a form, or contact us. Information may also be collected automatically from your device or received from Shopify and providers involved in payments, delivery, analytics, advertising, or fraud prevention, in accordance with your consent choices.

4. Purposes and legal bases

• Orders, payments, delivery, returns, and after-sales service: performance of a contract and pre-contractual steps.
• Customer account creation and management: performance of a contract, or consent where the account is optional.
• Requests and complaints: performance of a contract and our legitimate interest in providing effective customer service.
• Invoicing, accounting, and regulatory requirements: legal obligations.
• Security, fraud prevention, and protection of our rights: our legitimate interest in protecting the website, customers, and business, and legal obligations where applicable.
• Analytics and website improvements: consent for nonessential tracking; legitimate interests where a tool is strictly necessary and legally exempt from consent.
• Personalized advertising and campaign measurement: prior consent where required by law.
• Email or SMS marketing: consent, unless an applicable exception allows marketing of similar products to existing customers, with the right to opt out at any time.

5. Recipients and service providers

Access is limited to those who need the information. Data may be shared with Shopify, which provides the ecommerce platform and hosting; the payment providers offered at checkout; carriers, logistics partners, and order fulfillment providers; customer service, email, hosting, security, analytics, and fraud prevention providers; advertising and analytics partners where you have consented to the relevant tracking; and professional advisers or public authorities where required by law or necessary to protect our rights. Providers receive only the data needed for their work and must protect it in accordance with their contractual and legal obligations.

6. International transfers

STLN INTERNATIONAL LLP is based in the United Kingdom. Providers, including Shopify and its subprocessors, may process data in the United Kingdom, Canada, the United States, or other countries outside the European Economic Area. Where a transfer is not covered by a European Commission adequacy decision, appropriate safeguards are used, including the European Commission’s standard contractual clauses and additional measures where necessary. Contact us for information about these safeguards.

7. Retention periods

• Orders, invoices, and accounting records: during the contractual relationship, then archived for the period required by applicable accounting, tax, and evidentiary obligations, which may be up to ten years.
• Customer accounts: while active, followed by deletion or anonymization after a reasonable period of inactivity, subject to recordkeeping obligations.
• Customer service, returns, and complaints: for the time needed to handle them, then up to five years where necessary for evidence or dispute management.
• Marketing to customers: during the business relationship and for three years after it ends or after the last contact.
• Prospective customers: three years after collection or the person’s last contact.
• Opt-out lists: at least three years to continue honoring your choice.
• Security and fraud information: for the time needed to investigate and protect rights, then according to applicable limitation periods.
• Cookies and tracking technologies: according to their purpose and the periods shown in the cookie tool. Consent or refusal choices may be stored for six months before being requested again.

Data may be retained longer where a legal obligation, proceeding, or protection of a legal right requires it, with access restricted to authorized individuals.

8. Cookies and tracking technologies

Strictly necessary cookies help display the website, remember your cart, secure payment, and retain your preferences. They may be used without consent where indispensable to the requested service. Nonexempt analytics, personalization, and advertising cookies are set only after your agreement. The consent banner lets you accept, reject, or configure tracking by purpose. You can withdraw consent through the website’s cookie tool as easily as you gave it. Withdrawal does not affect the lawfulness of processing already carried out.

9. Marketing

You can unsubscribe at any time using the link in each marketing email or by contacting us. For SMS messages, follow the unsubscribe instructions in the message. Communications strictly necessary for an order or account may continue.

10. Your rights

Subject to applicable law, you may have rights of access, correction, deletion, restriction, objection, data portability, and withdrawal of consent. Where French law applies, you may also provide instructions concerning your data after your death. Email contact@curvea-paris.com with your request. Where there is reasonable doubt about your identity, we may request only the information necessary to verify it. We generally respond within one month; this may be extended by two months for complex or numerous requests, after notifying you. You may complain to the competent supervisory authority, including the French CNIL at www.cnil.fr, or the authority in your usual place of residence in the European Economic Area where applicable.

11. Security

We use technical and organizational measures appropriate to the risks to protect data against loss, unauthorized access, alteration, or disclosure. No system is completely invulnerable. We regularly review these measures and limit access to people who need it.

12. Children

The website is not intended for children, and we do not knowingly seek to collect their data. If you believe a child has provided data without appropriate authorization, contact us so we can take the necessary action.

13. Changes

This policy may be updated to reflect changes to the website, providers, or regulations. The policy date appears above. We will notify you of material changes where required by law.

14. Contact

STLN INTERNATIONAL LLP — Curvea
24-26 Arcadia Avenue Fin009
London, N3 2JU, United Kingdom
Email: contact@curvea-paris.com