Because trust is at the heart of the relationship we build with you, HUITIÈME CIEL is committed to protecting your personal data with the greatest care.
This privacy policy aims to inform you clearly about the nature of the information collected, its use, your rights and the guarantees we put in place.
Data controller
The personal data controller is:
Sara Fernandes – Entrepreneur Individuel (EI)
31 rue de Thann, 67100 Strasbourg, France
SIRET: 80066418700047
E-mail: contact@huitieme-ciel.com
For any questions regarding your personal data or to exercise your rights, you can contact us using the details above.
Data Protection Officer
HUITIÈME CIEL is not subject to the obligation to appoint a Data Protection Officer (DPO) under the GDPR provisions relating to micro-enterprises.
For any questions regarding the processing of your data, you can contact us directly using the contact details above.
1. Data collected
As part of your navigation and interactions on our site, we may collect:
- Identity information: surname, first name
- Contact information: e-mail, telephone, postal address
- Order-related information: delivery address, purchase history, payment references
- Information submitted via the contact form: message, specific requests
- After-sales service information: problem description, supporting documents
- Browsing data: cookies, pages viewed, IP address, browser type, behavioral data
- Waiting list information: if you request to be notified of product availability
The collection of this data is necessary to provide you with our services.
Certain information marked as mandatory must be completed to process your request.
2. Purposes of collection
This information is used exclusively in the following cases:
- Order processing: preparation, delivery and tracking of your order
- After-sales service management: response to your support requests, management of returns and complaints
- Communications: response to messages via the contact form
- Availability notifications: if you have requested to be notified when a product is back in stock
- Sending information and newsletters: only if you have explicitly consented
- User experience improvement: anonymous analysis of site operation and service optimization
- Legal compliance: adherence to accounting, tax, and legal obligations
- Fraud prevention and security: protection of your account and securing transactions
Important clarification: No data is sold, rented, or transferred to third parties for commercial purposes.
Your data is only shared strictly within the scope of providing our services.
3. Legal Basis for Processing
In accordance with the GDPR, we collect and use your data based on:
- Your consent: for commercial communications, newsletters, and certain cookies (you can withdraw it at any time)
- Contract performance: for processing your order and delivery
- A legal obligation: for the retention of accounting and tax data
- Our legitimate interest: to improve our site, prevent fraud, and ensure security
4. Data Recipients
Your personal data is intended exclusively for:
- The HUITIÈME CIEL team: administrative and commercial management
- Nos prestataires techniques et partenaires :
- OVH SAS (site hosting)
- Secure payment platform (WooPayments and PayPal – transaction processing)
- Brevo (newsletter and commercial communication management)
- CookieYes (cookie consent management)
- Google (anonymized browsing statistics, product synchronization, advertising, and anti-spam protection via ReCAPTCHA)
- WPML (multilingual content management)
- Jetpack (site backup, security, and statistics)
- Wordfence (site security and threat prevention)
- UpdraftPlus (automatic backups and secure storage)
- Carriers and logistics providers: solely for the delivery of your order (examples: Colissimo, Chronopost, DHL, etc., depending on the chosen destination)
These providers are bound by strict confidentiality and data security obligations through Data Processing Agreements (DPAs).
They use your data only within the strict scope of their mission.
5. Retention Period
Data is retained only for the period necessary for its processing:
- Order and billing data: 10 years (legal accounting and tax obligation)
- Active customer data: 3 years after the last commercial interaction
- Prospect data without activity: 2 years after the last contact
- Newsletter subscription data: until you unsubscribe
- Contact form data: 1 year after request processing
- After-sales service data: 2 years after case resolution
- Waiting list data: until notification or 12 months
- Cookies: maximum 13 months in accordance with CNIL recommendations
- Browsing data (server logs): maximum 12 months
- Security data: retained as long as necessary to prevent threats
- Backups: retained according to our provider’s retention policy (generally the last 4 backups)
After this period, data is either permanently deleted or irreversibly anonymized.
6. Your Rights
In accordance with current regulations (GDPR), you have the following rights regarding your personal data:
- Right of access: obtain a copy of your data
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure (“right to be forgotten”): request the deletion of your data, under certain conditions
- Right to object: object to certain processing activities
- Right to restriction of processing: limit the use of your data
- Right to data portability: receive your data in a structured and transferable format
- Right to withdraw your consent: at any time, for processing based on your consent
How to exercise your rights?
You can exercise these rights at any time by contacting us via email at contact@huitieme-ciel.com or through the contact form available on the website.
We will process your request within a maximum of 30 days.
Right to lodge a complaint
If you believe that your data protection rights are not being respected, you have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL):
CNIL
3 Place de Fontenoy, 75007 Paris, France
Telephone: +33 (0)1 53 73 22 22
Website: www.cnil.fr
7. Cookies and Tracking Technologies
The site uses CookieYes to manage cookie consent in compliance with the GDPR and CNIL recommendations.
Types of cookies used:
- Strictly necessary cookies (consent not required): authentication, security, shopping cart, language preferences, anti-spam protection (Google ReCAPTCHA v3)
- Performance and analytics cookies: Google Analytics (anonymized browsing statistics)
- Marketing and tracking cookies: Google for WooCommerce (product synchronization), conversion tracking, retargeting, personalized recommendations
- Personalization cookies: remembering your visit preferences, wish list
Managing your preferences
The user can at any time:
- Refuse or accept cookies during the first visit
- Modify or revoke their consent by clicking on Cookie Management from the site footer
- Manage cookies directly from their browser
For more details on cookies, consult your web browser settings.
8. Data Security
HUITIÈME CIEL implements all necessary technical and organizational measures to ensure the security and confidentiality of your data and prevent any unauthorized access, loss, or alteration:
- Secure HTTPS connection across the entire site
- SSL/TLS encryption of data in transit
- Secure hosting with OVH SAS with certified infrastructure
- Secure authentication for data access
- Regular and automated backups to prevent data loss
- Access control limiting access to authorized persons only
- Continuous security monitoring of the site
- Secure payments via industry-standard encryption protocols
However, no data transmission over the Internet can be guaranteed to be completely secure.
We strive to protect your data to the best of our ability, but cannot guarantee absolute security.
9. Anti-Spam and Anti-Fraud Protection
To protect our site against spam, abuse, and fraudulent activities, we use Google ReCAPTCHA v3 on certain forms (contact, order, account creation).
How does ReCAPTCHA v3 work?
Google ReCAPTCHA v3 analyzes your browsing behavior invisibly (without a checkbox) to determine if you are human or a bot. This analysis is performed in the background and does not disrupt your user experience.
Data collected by ReCAPTCHA
Google may collect the following information:
- IP address
- ReCAPTCHA cookies
- Browser and device information
- Mouse movements and page interactions
- Browsing behavior data
Google collects and processes this information in accordance with its own terms of service.
Legal basis: We use ReCAPTCHA based on our legitimate interest in protecting our site and our users against malicious activities, in accordance with Article 6(1)(f) of the GDPR.
For more information on Google ReCAPTCHA, please consult:
10. Intellectual Property
The brand “HUITIÈME CIEL” is registered with the National Institute of Industrial Property (INPI) under number 5189074.
All elements on this website (texts, images, photographs, creations, logos, designs, and brand visual identity) are the exclusive property of HUITIÈME CIEL or subject to usage authorisation.
Your personal data is protected with the same rigor.
11. Content Translations
Our site offers content in multiple languages to improve accessibility for users worldwide.
Translation methods used:
- Manual and professional translations: performed by human translators or AI assistants to ensure content quality and accuracy
- Automatic translations: some content may also be automatically translated via Google Translate to offer broader language coverage
These translations do not generate systematic transfers of your personal data to third-party services.
Only public site content (product descriptions, information pages, editorial content) is translated.
Important: No personal data collected (emails, addresses, order information, purchase history) is transmitted to Google Translate or other translation services. Users accessing the site in a multilingual version simply benefit from translated content, without specific processing of their sensitive data.
Google Translate processes only public site text in accordance with its own privacy policy. For more information, please consult: Google Privacy Policy
12. Data Transfers Outside the European Union
Some of our service providers may process your data outside the European Union, including:
- Google (United States): analytics and advertising services
- PayPal (United States): payment processing
- Automattic/Jetpack (United States): backups and security
- Wordfence (United States): site protection
These data transfers comply with the appropriate safeguards provided by the GDPR, including:
- Standard Contractual Clauses (SCC) approved by the European Commission
- Data Privacy Framework (for certified US companies)
- Additional security measures (encryption, pseudonymization)
You can request more information about these transfers by contacting us.
13. Online Payments
Payments on our site are securely processed by specialized providers compliant with GDPR and PCI-DSS standards:
- WooPayments (Stripe payment service integrated with WooCommerce) for credit cards
- PayPal for payments via PayPal account
We never store your complete banking data (card number, security code) on our servers.
Only the information necessary for managing your order (amount, date, payment status, last digits of the card) is securely retained.
14. Backups and Service Continuity
We use the UpdraftPlus plugin to perform regular and automated backups of our site, including the personal data it contains.
These backups are securely stored and encrypted to prevent unauthorized access.
In case of technical issues, cyberattacks, or data loss, we can restore the site from these backups, thereby ensuring the continuity of our service and the protection of your data.
15. Protection of Minors
Our site is intended for an adult audience.
If we learn that we have collected information about a minor without parental authorization, we will promptly delete it.
For any questions, contact us at contact@huitieme-ciel.com
16. Changes to this Policy
This privacy policy may be updated to reflect legal, regulatory, or technical developments, as well as changes in our data processing practices.
In the event of substantial changes affecting your rights, we will inform you by email or by a visible notification on the site.
We recommend that you regularly consult this page to stay informed of any modifications.
The date of the last update is indicated below.
Last updated: February 4, 2026
