Privacy Policy

About this policy

This policy explains how the operator of KLEOS — By Alexander Ancient Atlas, a French micro-enterprise trading under the name KLEOS, handles personal data in connection with this Shopify store. KLEOS is a trading name, not a separate incorporated company. For privacy enquiries and rights requests:

KLEOS — By Alexander Ancient Atlas
47 rue Vivienne, 75002 Paris, France
contact@alexander-ancien-atlas.com

Information we process

When you place an order, contact us or use an account, we process the information needed for that interaction: your name, email, delivery and billing details, order and payment status, account information and correspondence. Shopify and payment providers process payment details to complete transactions. Technical data may include your IP address, browser, device identifiers and store interactions. Data comes from you, your use of the store and providers involved in payment, hosting or fulfilment.

Purposes and legal grounds

• Orders, payments, delivery, returns and requested support: performing our contract with you or taking steps you request before purchase.
• Invoices and records required by law: compliance with legal obligations.
• Proportionate security, fraud prevention and handling claims: our legitimate interests in protecting the business and customers.
• If offered, optional promotional communications and tracking: your consent where required by law. You can withdraw consent or unsubscribe at any time.

Information necessary to process an order must be provided for us to fulfil it. Optional marketing is not a condition of purchase. Reading this policy or browsing the store does not itself constitute consent to optional tracking.

Recipients and Shopify

Data is shared as needed with Shopify, payment providers, production and fulfilment partners, delivery providers and professional advisers. Authorities may receive information when required by law. We disclose only information relevant to the service or obligation involved.

Shopify hosts the store and processes information to provide its services. Depending on the Shopify features used, Shopify may also act as a controller for its own processing. See Shopify's Consumer Privacy Policy and Shopify's privacy portal for those activities and rights requests.

Retention

Order and account data is kept for the customer relationship and as needed to fulfil orders, handle returns and meet applicable obligations. Support correspondence is retained while the request remains active and, where necessary, for the relevant legal claims period. Records retained for legal purposes are restricted to that purpose. Accounting documents are retained for the legally required period, generally ten years. Data that is no longer needed is deleted or anonymised. Retention depends on the record's purpose and applicable legal requirements rather than indefinite storage.

International processing and security

Shopify and providers may process data outside the European Economic Area. Where required, transfers rely on recognised safeguards such as adequacy decisions or approved standard contractual clauses. You can contact us for information about relevant safeguards. Appropriate technical and organisational measures are used to protect personal data; no system can guarantee absolute security.

Your rights

Subject to the applicable legal conditions, you may request access, correction, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Contact the email above. We may request proportionate information to verify your identity. We respond within the applicable statutory period, normally one month, and explain any lawful extension.

You may complain directly to the CNIL or your local data-protection authority. You do not have to contact us first.

Cookies and updates

See our Cookie Policy for information about tracking and choices. Changes to this notice will be published on this page, with additional notice where legally required.