Privacy policy
Last updated: 21 October 2026
This privacy policy explains which personal data we collect when you visit or order from the Doux Cocon shop, why we use it, who we share it with and what your rights are.
Data controller
Brandy Fontijn, sole proprietorship (eenmanszaak) under Dutch law, trading as Digitain, operator of the Doux Cocon shop
Burgemeester de Geusstraat 65, 5146 EA Waalwijk, the Netherlands
KvK: 83449167
Email: info@douxcocon.fr
Phone: +31 6 40 77 67 68
Data we collect
- Identity and contact details: name, delivery and billing address, email address and, if you provide it, phone number.
- Order: products purchased, amount, order history, returns and contact with our customer service.
- Payment: payments are processed by Shopify Payments. We only receive limited information, such as the payment method used and the payment status, never your full payment details.
- Browsing: IP address, device and browser type and pages viewed, collected through cookies and similar technologies.
- Marketing: your consent, your preferences and your interaction with our emails (opens, clicks).
Why we use your data
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, handling returns and refunds | Performance of the contract |
| Answering your questions and complaints | Performance of the contract and legitimate interest |
| Keeping our accounts and meeting our tax obligations | Legal obligation |
| Preventing fraud and securing the shop | Legitimate interest |
| Audience measurement (Google Analytics) and relevant advertising (Meta Pixel) | Consent |
| Sending our newsletter and marketing emails | Consent; for customers, legitimate interest for similar products, with the option to unsubscribe at any time |
Cookies and analytics
On your first visit, a banner lets you accept or refuse non-essential cookies. Google Analytics and the Meta Pixel are only loaded after you give consent. Cookies that are strictly necessary for the shop to work (cart, checkout, security) are used without consent. You can withdraw your consent at any time by deleting the cookies in your browser: the banner will then appear again.
Who receives your data
- Shopify (Shopify International Limited, Ireland, and its affiliates): hosting of the shop, payments (Shopify Payments), emails (Shopify Email) and automations (Shopify Flow).
- Kungfubuy (China): our order preparation and shipping partner. Kungfubuy receives your name, delivery address, your phone number if you provided it and the contents of your order, solely to ship your parcel.
- 17TRACK (China): the parcel tracking tool on our Track your order page. The tracking number you enter there is sent to 17TRACK to show the status of your parcel. This tool is only loaded on that page.
- Carriers: delivery and tracking of your parcel.
- Google (Google Analytics) and Meta (Meta Pixel): only if you consent.
- Authorities: where the law requires us to.
We do not sell your personal data.
Shopify Network Intelligence
Our shop uses Shopify Network Intelligence. With this feature, Shopify combines our customers' data with data from other merchants and from Shopify to generate insights. These insights power Shopify services such as Shopify Audiences, the Shop channel, Shopify Email, Shopify Collabs and Shopify Search & Discovery, for example to find new customers, personalise your experience and make our communications more relevant. Your data is not shared with other merchants. This processing is based on our legitimate interest in promoting and improving our shop. You can object to it at any time by emailing info@douxcocon.fr.
Transfers outside the European Union
Some recipients are located outside the European Union, including in Canada (Shopify), the United States (Google, Meta) and China (Kungfubuy, 17TRACK). These transfers take place to countries covered by an adequacy decision of the European Commission or are subject to appropriate safeguards, such as the standard contractual clauses adopted by the European Commission. You can ask us for information about these safeguards.
Retention periods
- Orders and invoices: 7 years, in line with our accounting and tax obligations.
- Contact with customer service: 3 years after the last contact.
- Customer account: until you delete it, or after 3 years of inactivity.
- Marketing emails: until you unsubscribe or withdraw your consent, and no later than 3 years after your last contact with us.
- Cookies: 13 months maximum.
Your rights
You can ask us at any time for access to, correction, erasure, restriction of processing or portability of your data, and object to its processing. You can also withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. If you live in France, you can also give instructions on what happens to your data after your death.
To exercise your rights, email info@douxcocon.fr. We reply within one month.
You can lodge a complaint with the data protection authority in your country of residence (in France: the CNIL; in Belgium: the Data Protection Authority) or in our country of establishment (in the Netherlands: the Autoriteit Persoonsgegevens).
Minors
Our shop is intended for adults. We do not knowingly collect data from people under 16.
Security
We take appropriate technical and organisational measures to protect your data against loss, unauthorised access and disclosure.
Changes
We may update this privacy policy. The date of the latest update is shown at the top of this page.
Contact
Questions about your personal data: info@douxcocon.fr, Burgemeester de Geusstraat 65, 5146 EA Waalwijk, the Netherlands.
