VAHINE TAHITI
Privacy Policy
Policy
Privacy Policy
Our statement. Last updated: November 2026.
Your trust matters to us as much as a good swell. This policy explains, in plain words, which personal data we collect when you visit our website or order from us, why we use it, who we share it with, how long we keep it, and how you stay in control. We follow the EU General Data Protection Regulation (GDPR) and the applicable French and Portuguese data protection laws.
1. Who is responsible for your data
The data controller is [Legal name of the business], [legal form], registration number [SIRET or NIF], [business address], trading as Vahine Tahiti.
For any question about your data: leroy.roxane.pro@gmail.com.
As a small business, we are not required to appoint a Data Protection Officer, but we take care of every request personally.
2. The data we collect
Data you give us:
- When you order: your name, email address, phone number, delivery and billing addresses, the items and sizes you choose, and your order history.
- When you pay: payment details are entered directly with our payment provider. We only see the payment method type and the last digits of your card, never your full card number.
- When you join our pre-order list, newsletter or escapes list: your name, email address and the information you choose to share in the form (for example your favourite print, sizes or surf level).
- When you contact us: your name, email address and your message.
- When you use the Vahine Fruit Size Guide™: your fruit and sizes are only used on the page to select your sizes. We don't store them, and they are not linked to your identity.
Data collected automatically:
- Technical data: IP address, device and browser type, language, approximate location (country or city), pages visited, and actions on the site (such as adding a product to your cart).
- Cookies and similar technologies: see section 7.
We never ask for sensitive data, such as health information. Your body is beautiful, but your measurements are your business: our size guide works without them.
3. Why we use your data, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Processing, making and delivering your orders and pre-orders, sending order and shipping emails | Performance of our contract with you |
| Handling returns, exchanges, refunds and warranty claims | Performance of the contract and legal obligation |
| Answering your messages and requests | Our legitimate interest in helping you, or steps before a contract |
| Keeping invoices and accounting records | Legal obligation |
| Preventing fraud and keeping the website secure | Our legitimate interest |
| Sending our newsletter, pre-order news and escapes news | Your consent |
| Emailing previous customers about similar products | Our legitimate interest, and you can opt out at any time |
| Measuring audience and improving our website | Your consent (cookie banner) |
| Showing you our ads on Instagram, Facebook and TikTok, and measuring their results | Your consent (cookie banner) |
4. Who we share your data with
We never sell your data. We only share it with trusted service providers who help us run the shop, and only what they need:
- Shopify: hosting of our website, online shop, checkout and payments (Shopify Payments).
- Payment providers offered at checkout, to process your payment securely.
- La Poste / Colissimo and, if needed, other carriers and their local partners: to deliver your parcel.
- Tally: our online forms (pre-order list, escapes list).
- Our email service: to send order emails and, with your consent, our newsletter.
- Meta (Instagram, Facebook) and TikTok: only if you accept advertising cookies.
- Our accountant and the authorities, when the law requires it.
These providers only use your data on our instructions or under their own privacy policies, and must protect it.
5. Transfers outside the European Union
Some of our providers, such as Shopify, Meta or TikTok, may process data outside the European Union, for example in Canada or the United States. In that case, your data is protected by the safeguards required by the GDPR: a European Commission adequacy decision (for example for Canada, or for US companies certified under the EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
6. How long we keep your data
| Data | How long |
|---|---|
| Customer account and order data | For the time of our relationship, then up to 3 years after your last order or contact for customer service and marketing |
| Invoices and accounting records | As long as the law requires (up to 10 years) |
| Proof of warranty and returns | For the duration of the legal guarantee and the legal limitation period |
| Newsletter and pre-order list | Until you unsubscribe, or 3 years without any interaction |
| Messages you send us | Up to 3 years after our last exchange |
| Cookies and your cookie choices | 13 months maximum |
7. Cookies & tracking
Cookies are small files stored on your device. We use three kinds:
- Essential cookies: they make the shop work (cart, checkout, security, remembering your cookie choice). They don't need your consent.
- Statistics cookies: they help us understand how the site is used, so we can improve it. Only with your consent.
- Advertising cookies and pixels (Meta Pixel, TikTok Pixel): they measure the results of our ads and show our surfwear to people who might love it. Only with your consent.
When you first visit, our cookie banner lets you accept, refuse or customise your choice, as easily as one another. Refusing has no impact on your ability to shop. You can change your choice at any time through the cookie settings link on our website, or in your browser settings.
8. How we protect your data
Our shop runs on Shopify, which uses encrypted connections (HTTPS) and meets the PCI DSS security standard for payments. We limit access to your data to what is strictly necessary, and use strong passwords and two-step verification on our accounts.
9. Your rights
Under the GDPR, you can at any time:
- Access your data and get a copy of it;
- Correct data that is wrong or incomplete;
- Delete your data, unless we must keep it by law (for example invoices);
- Limit how we use your data;
- Object to our use of your data based on our legitimate interest, and to marketing at any time;
- Receive your data in a portable format, or have it sent to another company;
- Withdraw your consent at any time, for example by clicking "unsubscribe" in our emails or changing your cookie choices;
- If you live in France, give instructions about what happens to your data after your death.
To use your rights, just email us at leroy.roxane.pro@gmail.com. We reply within one month. We may ask you to confirm your identity, only if we have a reasonable doubt.
If you feel your rights have not been respected, you can file a complaint with your data protection authority: the CNIL in France (cnil.fr), the CNPD in Portugal (cnpd.pt), or the authority of the country where you live.
10. Minors
Our shop is meant for adults. If you are under 15 (or the age set by the law of your country), please ask a parent or guardian before sharing your data with us. If we learn that we have collected data from a child without permission, we delete it.
11. Links to other websites
Our website links to other sites, such as Instagram, TikTok or our forms on Tally. When you visit them, their own privacy policies apply.
12. Changes to this policy
We may update this policy, for example when we add a new tool. We will always show the date of the last update at the top, and let you know by email of any important change that affects you.
13. Contact
A question, a doubt or a request about your data? Write to us at leroy.roxane.pro@gmail.com or through our contact page. A real person will answer you, promise 🌺
See also our Terms of Use & Sale and our Return & Exchange policy.