Privacy Policy

Last updated: 6 October 2026

At StudioSoie, your data is treated with the same care as our silks: as little as possible, and only for a good reason. This policy explains what information we collect when you visit studiosoie.fr / studiosoie.com, place an order or get in touch with us, why we collect it, and how to exercise your rights.

1. Data controller

StudioSilk OÜ, a company incorporated under Estonian law and registered under number 17084260, Ahtri tn 12, 10151 Tallinn, Estonia, which operates the StudioSoie brand. Contact: support@studiosoie.com.

2. The data we collect

• Orders and delivery: name, billing and delivery addresses, email address, telephone number, items ordered, purchase history, returns and exchanges.
• Payment: payments are processed by our payment providers (Shopify Payments, PayPal, Apple Pay, Google Pay). We never see or store your full card number.
• Customer account: login details, preferences, saved addresses.
• Communications with us: messages sent by email, via the contact form or via the shop chat, and photos attached to a complaint.
• Reviews: the rating, text, photos and first name that you choose to publish.
• Newsletter and notifications: email address, language and your subscription preferences.
• Browsing: IP address, device and browser type, pages viewed, recently viewed products, searches, and data from cookies in accordance with your choices.

3. Why we use it

• To process your orders (payment, preparation, shipping, tracking, returns, warranties) — performance of the contract.
• To reply to you and resolve your requests (email, chat, complaints) — performance of the contract and legitimate interest.
• To comply with our legal obligations (invoicing, accounting, tax) — legal obligation.
• To prevent fraud and keep the site secure — legitimate interest.
• To send you our new arrivals and offers by email or notification — with your consent or, for our customers, on the basis of legitimate interest in respect of similar products; you can unsubscribe at any time using the link included in every message.
• To measure audiences and personalise advertising — only with your consent to the cookies concerned.
• To display customer reviews — legitimate interest, and your agreement at the time of publishing.

4. Customer service chat

The shop chat is run by an automated assistant, with our team taking over when necessary. To find an order, it uses the order number and email address that you give it. Conversations are kept for 12 months so that we can follow up on your request and improve our service, and are then deleted. Never share bank details or sensitive information in the chat.

5. Cookies and trackers

On your first visit, a banner allows you to accept, refuse or choose the categories of cookies: necessary (basket, security, language — always active), preferences, analytics and marketing. Refusing cookies does not prevent you from making a purchase. You can change your mind at any time using the ‘Cookie preferences’ link at the bottom of every page. Your choice is stored for a maximum of 13 months.

6. Who receives your data

Your data is never sold. It is shared only with the service providers who help us run the shop, and only to the extent that they need it:

• shop hosting, payment and security: Shopify, PayPal;
• order preparation and delivery: our partner workshop and the carriers (name, address, telephone number); parcel tracking: 17TRACK when you enter a tracking number;
• customer service: the provider that hosts our chat assistant (Cloudflare) and the artificial intelligence service that generates its replies;
• emails, newsletter and notifications: Brevo;
• customer reviews: Judge.me;
• audience measurement and advertising, if you accept it: Google, Meta, TikTok, Pinterest.

We may also disclose data to the authorities where required by law.

7. Transfers outside the European Union

Some service providers may process data outside the European Economic Area (for example in Canada or the United States). These transfers are based on an adequacy decision of the European Commission or on its standard contractual clauses.

8. Retention periods

• Order data and invoices: for the statutory retention period for accounting records (up to 10 years).
• Customer account: until it is deleted, or 3 years after your last activity.
• Direct marketing (newsletter): until you unsubscribe, or 3 years after your last contact with us.
• Chat conversations: 12 months.
• Cookie choices: 13 months maximum.

9. Your rights

You may request access to your data, its rectification, erasure or portability, or the restriction of its processing; you may also object to its use (in particular for direct marketing purposes) and withdraw your consent at any time. Write to us at support@studiosoie.com: we respond within one month. We may ask you to confirm your identity.

If you consider that your rights have not been respected, you may lodge a complaint with the Estonian data protection authority (Andmekaitse Inspektsioon, www.aki.ee) or with the authority in your country of residence (in France, the CNIL, www.cnil.fr).

10. Security

The site is served over HTTPS, payments are encrypted by our payment providers, and access to your data is restricted to those people who need it.

11. Minors

Our shop is intended for adults. We do not knowingly collect data relating to children under 16; if this should happen, please write to us so that we can delete it.

12. Changes

We may update this policy; the date at the top of the page indicates the latest version.

13. Contact

For any question about your data: support@studiosoie.com — StudioSilk OÜ, Ahtri tn 12, 10151 Tallinn, Estonia.