Privacy policy

PRIVACY POLICY

In compliance with GDPR (EU) 2016/679 and applicable data protection laws.
Last updated: June 2026

─────────────────────────────
DATA CONTROLLER
─────────────────────────────

Martin Clauser — Sole Proprietor (operating as Fajena)
SIREN: 105 295 554
Address: 401 Rue du Vieux Chemin de Gravelines, 59279 Loon-Plage, France
Email: fajena@proton.me

─────────────────────────────
DATA WE COLLECT & WHY
─────────────────────────────

Name, address, email, phone number
→ Purpose: Processing and delivering orders
→ Legal basis: Contract performance (art. 6.1.b GDPR)
→ Retention: 3 years after last order

Payment data (tokenized)
→ Purpose: Secure payment processing
→ Legal basis: Contract performance (art. 6.1.b GDPR)
→ Retention: Not stored by Fajena — handled by Shopify Payments (PCI-DSS)

IP address, browsing cookies
→ Purpose: Security, fraud prevention, analytics
→ Legal basis: Legitimate interest (art. 6.1.f GDPR)
→ Retention: 13 months maximum

Order history
→ Purpose: Accounting and legal obligations
→ Legal basis: Legal obligation (art. 6.1.c GDPR)
→ Retention: 10 years

Email address (newsletter opt-in)
→ Purpose: Marketing communications
→ Legal basis: Consent (art. 6.1.a GDPR)
→ Retention: Until unsubscribed

─────────────────────────────
WHO WE SHARE YOUR DATA WITH
─────────────────────────────

Fajena never sells your personal data. Data is shared only with:

- Shopify Inc. (Canada — EU adequacy decision): store hosting and PCI-DSS payments
- Carriers (USPS, UPS, DHL, etc.): order delivery
- Payment providers (Stripe, Shopify Payments): secure transaction processing

All transfers outside the EU/EEA are governed by Standard Contractual Clauses (SCCs) approved by the European Commission.

─────────────────────────────
COOKIES
─────────────────────────────

Essential cookies (no consent required): shopping cart, secure authentication, fraud prevention.

Non-essential cookies (consent required): analytics, targeted advertising, social media pixels.

You can manage your cookie preferences through the cookie banner on your first visit or through your browser settings.

─────────────────────────────
YOUR RIGHTS
─────────────────────────────

Under GDPR and applicable law, you have the right to:

- Access: obtain a copy of your personal data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data ("right to be forgotten")
- Restriction: limit how your data is processed
- Portability: receive your data in a machine-readable format
- Objection: opt out of processing, including marketing

To exercise these rights, email fajena@proton.me with proof of identity.
We will respond within 1 month.
You may also file a complaint with the CNIL: www.cnil.fr

─────────────────────────────
DATA SECURITY
─────────────────────────────

- SSL/TLS encryption (HTTPS) on all communications
- Shopify Payments certified PCI-DSS Level 1
- Access restricted to authorized personnel only
- Regular data backups

In the event of a data breach posing a high risk to your rights, you will be notified in accordance with art. 34 GDPR.

─────────────────────────────
CALIFORNIA RESIDENTS (CCPA)
─────────────────────────────

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your personal information. Fajena does not sell personal information. To exercise your rights, contact: fajena@proton.me

─────────────────────────────
CHANGES TO THIS POLICY
─────────────────────────────

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Continued use of our site after any changes constitutes acceptance of the updated policy.