Last updated
April 21, 2026
This policy explains how Celipack (“we”, “us”) processes personal information when you use our e‑commerce website, create an account, place an order, or contact us. We comply with the General Data Protection Regulation (GDPR) and applicable local laws.
Data controller
- The controller of your personal data is Celipack, operating the online store available on this website. For any privacy-related questions, please use the contact details provided under “Your rights” below.
Data we collect
- Identity and contact data: name, email address, phone number, shipping and billing addresses.
- Order data: products purchased, amounts, payment method used (we do not store your full card number — it is handled by our payment partners under their own policies).
- Technical and usage data: IP address, device type, pages viewed, cookies and similar technologies as described in our cookie practices (banner or browser settings).
- Information you voluntarily provide: product reviews, customer service messages, and any attachments you send.
Purposes and legal bases
- Contract performance: cart, orders, delivery, after‑sales support, and invoicing (legal basis: performance of a contract).
- Legal obligations: accounting records and responses to lawful requests from authorities (legal basis: legal obligation).
- Legitimate interests: site improvement, security, fraud prevention, and aggregated non‑identifiable analytics where applicable (legal basis: legitimate interests, balanced against your rights).
- Consent: newsletters, non‑essential cookies, and marketing where required by law — you may withdraw consent at any time.
Recipients and processors
- We may share data with service providers strictly necessary to operate our business: hosting, payments, carriers, transactional email, review platforms. They are contractually required to protect your information.
- We do not sell your personal data to third parties for their own marketing.
Retention
- Account and order data: for the duration of the commercial relationship and as long as required by legal and tax obligations.
- Marketing data: up to three years from your last interaction, or until you withdraw consent.
- Browsing data: according to the lifetime of relevant cookies or our analytics tools’ policies.
Your rights
- Under the GDPR you may request access, rectification, erasure, restriction of processing, objection (including to direct marketing), and data portability where applicable.
- You may lodge a complaint with your local supervisory authority (in France: CNIL).
- To exercise your rights: contact us via the details on this site (form or customer email), and include a copy of proof of identity if needed. We respond within one month, extendable where the request is complex.
Security
- We implement appropriate technical and organizational measures (encryption in transit, restricted access, backups) to protect your data against loss, misuse, or unauthorized access. No system is perfect — please use a strong password and keep your credentials confidential.
Transfers outside the European Economic Area
- Where certain providers are located outside the EEA, we ensure appropriate safeguards (e.g. EU Standard Contractual Clauses, adequacy decisions, or other recognized mechanisms).
Changes
- We may update this policy to reflect changes in our practices or the law. The “Last updated” date at the top of this page will be revised accordingly — please review this page periodically.
Celipack — online store. For questions about this policy, please reach out through the contact options provided on the website.