Privacy Policy
PRIVACY POLICY
Last update: September 28, 2026
OCNI Factory pays close attention to the protection of the personal data of its site visitors and customers.
This policy explains what data may be collected on ocni-factory.com, the reasons for its use, who it may be shared with, how long it is kept, and what your rights are.
The information provided to individuals must, in particular, specify the identity of the data controller, the purposes pursued, the legal bases, the recipients, and the retention periods. CNIL
1. Data Controller
The personal data controller is:
OCNI Factory
SAS with a capital of €4,000
170 avenue Jean Chaptal
30340 Méjannes-lès-Alès
France
E-mail: bonjour@ocni-factory.com
Phone: +33 (0)4 66 55 62 37
2. Data that may be collected
Depending on your use of the site, OCNI Factory may collect, in particular:
- last name and first name;
- postal address;
- e-mail address;
- phone number;
- information necessary for delivery;
- content and history of orders;
- information related to returns and requests addressed to customer service;
- information related to your customer account, when you create one;
- marketing preferences and proof of your consent;
- reviews and comments posted on products;
- technical data related to your browsing, such as IP address, browser, device used, or certain cookie identifiers;
- data related to site usage and interactions with OCNI communications when you have consented to them.
Full banking details are not stored directly by OCNI Factory. They are processed by the payment service providers used during the order.
3. Purposes and legal bases
Order management
The data is used to:
- record your order;
- collect payment;
- prepare products;
- organize their shipping;
- manage returns, refunds, and complaints;
- communicate with you regarding the order.
Legal basis: performance of the contract.
Payment and fraud prevention
Certain data is processed to ensure payment security, prevent fraudulent transactions, and manage payment incidents.
Legal bases: performance of the contract and legitimate interest in securing transactions.
Delivery
The contact details necessary for delivery are transmitted to the providers involved in shipping, notably Sendcloud and Colissimo / La Poste, depending on the delivery method used.
Legal basis: performance of the contract.
Accounting and legal obligations
Certain information related to orders and invoices must be kept to satisfy OCNI Factory’s accounting, tax, and legal obligations.
Legal basis: legal obligation.
Customer service
Data provided during a request via e-mail, form, or other means of contact is used to respond to the request and follow up on it.
Legal bases: performance of the contract when it concerns an order, or legitimate interest in responding to requests in other cases.
Newsletter and commercial communications
You can sign up for OCNI Factory communications:
- by voluntarily entering your e-mail address in a registration form;
- or by checking the box provided for this purpose during your order.
Registration is not automatic simply by placing an order.
For individuals, electronic commercial communications are in principle based on prior consent, expressed by a positive action such as a dedicated unchecked box. CNIL
You may withdraw your consent at any time by using the unsubscribe link present in the messages.
Depending on the features used, sending tools may also measure message opening and clicks to assess their effectiveness.
Legal basis: consent.
Measurement of email opens and interactions
OCNI Factory may use, depending on the configuration of its sending tools, technologies allowing for the measurement of certain interactions with sent emails, including:
- opening a message;
- clicks on links present in the message;
- the date or time of certain interactions;
- certain technical information related to viewing.
These technologies may, in particular, take the form of tracking pixels or links used to measure interactions.
They may be used to:
- measure the effectiveness of email campaigns;
- better understand the content that interests recipients;
- adjust communication frequency;
- limit sends addressed to permanently inactive individuals;
- and, when authorized, improve or personalize certain commercial communications.
When the use of these trackers requires your consent, they are only used after that consent has been obtained under the conditions provided for by regulations.
You may withdraw your consent when it constitutes the basis for processing and unsubscribe from commercial communications at any time using the link provided in each email or by contacting:
Withdrawal of consent or unsubscribing does not affect the lawfulness of processing carried out previously.
Customer reviews
OCNI Factory uses Judge.me to allow customers to post and view reviews on its products.
Data necessary for sending an invitation to post a review or for its publication may be communicated to Judge.me.
Legal basis: OCNI Factory's legitimate interest in collecting customer feedback and, when required, consent.
Audience measurement and site improvement
With your consent when required, OCNI Factory may use tools such as those from Google to measure audience, understand browsing, and improve site performance.
Legal basis: consent for trackers subject to consent.
Advertising and campaign measurement
With your agreement, technologies from Meta and Google may be used in order to:
- measure the performance of advertising campaigns;
- better understand the journeys leading up to an order;
- create or measure advertising audiences;
- and, depending on the enabled features, personalize advertisements.
Legal basis: consent.
4. Providers and recipients
Personal data is only accessible to people and providers who need to know it to perform their tasks.
Depending on the services used, recipients may notably include:
- Shopify, for operating the store;
- Shopify Payments and associated payment service providers;
- PayPal, when selected as a payment method;
- Sendcloud;
- Colissimo / La Poste;
- Judge.me;
- Google, when its services are activated with your agreement;
- Meta, when its advertising services are activated with your agreement;
- Consentmo, for managing cookie-related choices;
- messaging and newsletter tools actually used by OCNI Factory, such as Shopify or Brevo;
- technical providers necessary for hosting, security, maintenance, and operation of the site.
The presence of an application in the Shopify admin does not necessarily mean that it systematically receives your data: this depends on the features actually enabled.
5. Shopify
The store operates with Shopify.
For European merchants, Shopify indicates that the primary contracting entity is Shopify International Limited, established in Ireland. Shopify may process data necessary for the operation of the store and implement international transfers as part of its services and contractual guarantees. Shopify Help Center
6. Transfers outside the European Economic Area
Some international providers may process data from countries located outside the European Economic Area.
When such transfers take place, they must rely on a mechanism recognized by applicable law, such as an adequacy decision by the European Commission or appropriate contractual guarantees.
7. Retention periods
OCNI Factory does not retain data longer than necessary regarding its purpose.
In general:
- data related to orders and invoices: kept for the periods necessary for legal and accounting obligations, up to 10 years for certain documents;
- customer account data: for the duration of account use, then for the period necessary for the management of potential rights or obligations;
- commercial prospecting data: until the withdrawal of consent and, in the absence of activity, for the applicable reference duration;
- prospect data: a reference duration of 3 years from the last active contact may notably be applied;
- customer service requests: for the duration necessary for processing, then archived when necessary for proof or the defense of rights;
- consent and cookie preferences: for the duration necessary to record and demonstrate the expressed choices.
8. Your rights
Depending on the processing concerned and under the conditions provided for by regulations, you notably have:
- a right of access;
- a right of rectification;
- a right to erasure;
- a right to restriction;
- a right to object;
- a right to portability when applicable;
- the right to withdraw your consent at any time when processing is based on it.
To exercise your rights:
OCNI Factory may request additional information if it is necessary to reasonably verify your identity.
You also have the right to file a complaint with the CNIL – Commission nationale de l’informatique et des libertés. CNIL
9. Mandatory or optional nature of data
Information marked as mandatory during an order is necessary for its processing.
Failure to provide this information may result in OCNI Factory being unable to process the order or provide the requested service.
Data used for newsletter, advertising, or audience measurement purposes when consent is required is optional.
10. Security
OCNI Factory and its providers implement technical and organizational measures intended to protect data against, in particular, loss, destruction, access, modification, or unauthorized disclosure.
11. Policy update
This policy may be modified to take into account changes to the site, the services used, or regulations.
The date at the top of this page corresponds to its last update.