Privacy policy
Who we are. The data controller is HARMANDI, société par actions simplifiée (SAS), 552 Rue Antoine Pissard, 74700 Sallanches, France (RCS Annecy 819 258 005), .
What we collect and why.
- Orders – name, addresses, email, phone, order history: to fulfil your contract (deliver, invoice, handle returns and guarantees). Legal basis: performance of the contract. Kept for the duration of the commercial relationship, then archived as legally required for accounting (10 years).
- Customer account – kept until you delete it or after 3 years of inactivity.
- Newsletter – your email, used only to send our letter (about one per month). Legal basis: your consent; unsubscribe with one click in every email. Kept until you unsubscribe or after 3 years without opening.
- Support messages – kept 2 years after the last exchange.
- Customer reviews – after an order, your name, email address and order number are passed to Judge.me (a product review request, about two weeks after delivery) and to Trustpilot (an invitation to rate our service, a few days after the order and at most once a month). Legal basis: our legitimate interest in collecting genuine reviews. Every email carries an unsubscribe link, and you can object at any time by writing to us. These providers keep the data for the duration of the review request and, if you leave a review, for as long as it stays published; it is deleted on request.
- Back-in-stock alert – if you ask for a back-in-stock alert for an item, your email address and the item are recorded by the STOQ app for the duration of the alert; we delete them on request. Legal basis: your consent. You receive one email, about that one item.
- Cookies and trackers – see the Cookies section below.
Who processes your data. Our store runs on Shopify (Shopify International Ltd, Ireland, and Shopify Inc., Canada): hosting, orders, payments through Shopify Payments and Shop Pay. We share the strictly necessary data with our payment providers (PayPal, Google Pay), our logistics partner (La Ruche Logistique) and carriers, our email service, the review services Judge.me (Judge.me Ltd, United Kingdom) and Trustpilot (Trustpilot A/S, Denmark), and the back-in-stock alert app STOQ (Artos Software Inc., United States). With your consent, Google (Google Ireland Ltd and Google LLC: Analytics, Ads and Merchant Center) , Meta (Meta Platforms Ireland Ltd and Meta Platforms, Inc.: Facebook and Instagram pixel) and Pinterest (Pinterest Europe Ltd and Pinterest, Inc.: Pinterest tag) measure the site's audience and the performance of our adverts, Microsoft (Microsoft Ireland Operations Ltd and Microsoft Corporation: Clarity) records how you move through the site to help us improve it, and STOQ measures the use of its back-in-stock alert; if you start a video, YouTube (Google) also receives your playback data. Some of these providers process data outside the European Union: Google, Meta, Microsoft and Pinterest are certified under the EU-US Data Privacy Framework, Shopify relies on the European Commission's standard contractual clauses, STOQ (Artos Software Inc.) is based in the United States and hosts this data there on our behalf under its data-processing contract, and the United Kingdom benefits from an adequacy decision. We never sell your data.
Cookies and trackers. A cookie is a small file the site stores on your device; we also use your browser's local storage, which follows the same rules. Strictly necessary and functional cookies do not need your consent. Analytics and advertising cookies are set only after you accept them in the banner shown on your first visit from the European Union; refusing is as easy as accepting and does not limit your browsing in any way. Your choice is kept for 12 months. You can change it at any time through the Manage my cookies link. The first column of each table gives the cookie's technical name as it appears in your browser.
1. Strictly necessary cookies – no consent required.
| Name | Service | Purpose | Type and duration |
|---|---|---|---|
_shopify_essential |
Shopify | Maintains your session while you visit and remembers your cookie choice so you are not asked again. | First-party cookie, 12 months |
cart |
Shopify | Remembers the items you put in your basket. | First-party cookie, 3 months |
cart_currency |
Shopify | Remembers the currency your basket is shown in. | First-party cookie, 14 days (3 months at checkout) |
localization |
Shopify | Remembers the country and language you are browsing in. | First-party cookie, 12 months |
_shop_app_essential |
Shop Pay (Shopify) | Makes the Shop sign-in and accelerated payment button work. | Third-party cookie (shop.app), 12 months |
consentHeader, _shs_state
|
Shopify | Pass your cookie choice and the display state of the page to the site's components during your visit. | Session storage, deleted when you close the tab |
cartToken, __ui, lastSeenErrorReceiptId, __quiltRouterScroll
|
Shopify (checkout) | Link your basket to your order, display the checkout correctly and report a technical error if one occurs. | Browser local storage, persistent |
bugsnag-anonymous-id |
Shop Pay (Shopify) | Anonymous identifier for technical error reports from the Shop payment component. | Third-party local storage (shop.app), persistent |
2. Functional cookies – no consent required.
| Name | Service | Purpose | Type and duration |
|---|---|---|---|
theme:recently-viewed-products |
Creatifwood (theme) | Remembers the items you have just looked at so they can be shown to you again. | Local storage, persistent |
signInWithShop:cartSyncNextRecognitionAt |
Shop Pay (Shopify) | Avoids offering to sync your basket with your Shop account too often. | Local storage, persistent |
_stoq_pls |
STOQ | Counts the pages you view during one visit, for the back-in-stock alert display. | Session storage, deleted when you close the tab |
3. Analytics cookies – set only after you accept.
| Name | Service | Purpose | Type and duration |
|---|---|---|---|
_shopify_y |
Shopify | Identifies your browser between visits in order to count the site's visitors. | First-party cookie, 12 months |
_shopify_s |
Shopify | Identifies the pages viewed during the same visit. | First-party cookie, 30 minutes |
_shopify_analytics |
Shopify | Links your browsing to the shop's audience statistics. | First-party cookie, 12 months |
_ga |
Google Analytics 4 | Identifies your browser in order to count the site's visitors. | First-party cookie, 13 months |
_ga_3HXV2MY08P |
Google Analytics 4 | Holds the state of your current visit for audience statistics. | First-party cookie, 13 months |
lastExternalReferrer, lastExternalReferrerTime
|
Shopify | Remember which site you arrived from and when you arrived. | Local storage, persistent |
_stoq_extension_details |
STOQ | Remembers the context of the page viewed, for the back-in-stock alert and its measurement. | Local storage, persistent |
wpm-ri-#, ri-#, __shopify_agent_context_events
|
Shopify | Identify one page load and hold the browsing events of the visit before they are sent. | Session storage, deleted when you close the tab |
_clck |
Microsoft Clarity | Identifies your browser between visits so your recorded visits can be linked together. | First-party cookie, 12 months |
_clsk |
Microsoft Clarity | Groups the pages viewed during the same visit for the browsing recording. | First-party cookie, 24 hours |
_cltk |
Microsoft Clarity | Holds the identifier of your current visit for the browsing recording. | Session storage, deleted when you close the tab |
Recording your browsing. With your consent (analytics cookies), we use Microsoft Clarity to record how you move through the site: the pages shown, your mouse movements, clicks and scrolling. These recordings help us understand what works badly on the site and fix it. Anything you type into form fields is masked and is not sent to us. The recordings are processed by Microsoft; without your consent, Clarity is not loaded.
4. Advertising cookies – set only after you accept.
| Name | Service | Purpose | Type and duration |
|---|---|---|---|
_shopify_marketing |
Shopify | Links your visit to the shop's advertising campaigns. | First-party cookie, 12 months |
_gcl_au |
Google Ads | Remembers the advert you arrived from in order to measure how well adverts work. | First-party cookie, 3 months |
_gcl_ls |
Google Ads | Stores measurement information relating to advertising campaigns. | Local storage, persistent |
_ga_KH2Q0R5C82 |
Google Merchant Center | Holds the state of your visit for measuring Google product listings. | First-party cookie, 13 months |
_fbp |
Meta | Identifies your browser in order to measure and target Facebook and Instagram adverts. | First-party cookie, 3 months |
fr |
Meta | Lets Facebook recognise you in order to measure and target its adverts. | Third-party cookie (facebook.com), 3 months |
_pin_unauth |
Identifies your browser in order to measure and target Pinterest adverts. | First-party cookie, 12 months | |
_pinterest_ct_ua |
Lets Pinterest recognise you across sites in order to measure and target its adverts. | Third-party cookie (pinterest.com), 12 months | |
test_cookie |
Google (DoubleClick) | Checks that your browser accepts cookies before an advert is shown. | Third-party cookie (doubleclick.net), 15 minutes |
5. Third-party content and services – these services load whatever you choose; the Google Pay button sets one Google cookie, the YouTube player sets cookies only if you start a video, Judge.me and Trustpilot set none.
| Name | Service | Purpose | Type and duration |
|---|---|---|---|
NID |
Google (Google Pay) | Set by Google when the Google Pay payment button loads on product pages, whatever your choice; Google uses it to remember your preferences and for its advertising functions. | Third-party cookie (google.com), 6 months |
VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, __Secure-YNID, __Secure-ROLLOUT_TOKEN
|
YouTube (Google) | Remember your playback and privacy preferences and identify your browser to YouTube; set only if you start a video. | Third-party cookies (youtube.com), 6 months |
YSC |
YouTube (Google) | Counts the videos watched during the same visit; set only if you start a video. | Third-party session cookie, deleted when you close the browser |
ytidb::LAST_RESULT_ENTRY_KEY, yt-player-caption-persistence, yt-icons-last-purged
|
YouTube (Google) | Remember your video player settings, such as subtitles. | Third-party local storage, persistent |
| no cookie | Judge.me | Shows customer reviews on product pages and the home page; the connection sends your IP address to Judge.me. | Network request only |
| no cookie | Trustpilot | Shows the shop's Trustpilot rating on every page; the connection sends your IP address to Trustpilot. | Network request only |
Your rights. Access, rectification, erasure, portability, restriction and objection: write to . We answer within one month. You may also lodge a complaint with the CNIL (cnil.fr).
Last updated: 18 September 2026.