Privacy Policy

Cemoi Chocolatier SAS, 2980 Julien Panchot, 66000 Perpignan, France, is the controller of the personal data described here. You can reach us at [email protected] or +33 4 48 07 06 96.

• Order details: name, email address, delivery address, items ordered, currency, and order totals.
• Technical data: device type, browser, approximate region, and pages visited.
• Storage data: your candy bag, currency preference, and cookie choice, kept in your browser.
• Correspondence: messages you send us and our replies.

• To process, confirm, and deliver orders and to issue receipts.
• To answer support questions and handle refunds or complaints.
• To keep the shop secure, prevent abuse, and fix technical faults.
• To understand, in aggregate, which products and pages people use.

We rely on performance of a contract for order handling, legitimate interests for security and improvement of the shop, consent for optional analytics cookies, and legal obligation for accounting and tax records.

This is a demonstration store. No payment is captured, charged, or stored, and card details entered in the checkout form are never transmitted to a payment processor or saved on our systems.

We share data only with service providers acting on our instructions — hosting, email delivery, and delivery partners — and with authorities where the law requires it. We never sell personal data.

Order records are kept for as long as accounting law requires, typically seven years. Support messages are kept for two years. Browser storage remains until you clear it.

Where a provider processes data outside the European Economic Area, we use standard contractual clauses or an equivalent safeguard approved under applicable law.

• Access a copy of your data and ask us to correct or delete it.
• Object to or restrict certain processing, and withdraw consent at any time.
• Request portability of the data you provided to us.
• Complain to your local data protection authority.

The shop is intended for adults. We do not knowingly collect data from children under 16. If you believe a child has provided data, contact us and we will remove it.

We update this policy when our practices change and revise the date above. Questions and requests go to [email protected] and receive a reply within 30 days.