Privacy
Version of 25 September 2026
Controller
The controller is CRAVE, 60 rue François 1er, 75008 Paris, France, contact@wearcrave.com. Crave has not appointed a data protection officer. Marketing emails are sent from hello@wearcrave.com and replies to them arrive at contact@wearcrave.com.
Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Processing your order, its payment and delivery, after-sales service and legal guarantees | Performance of the contract (art. 6(1)(b) GDPR) | Duration of the customer relationship, then 10 years in archive (art. L. 123-22 French Commercial Code) |
| Customer account | Performance of the contract | As long as the account exists, deleted on request |
| Newsletter and restock alert | Your consent (art. 6(1)(a) GDPR, art. L. 34-5 French Postal and Electronic Communications Code) | Until you unsubscribe, then 3 years after the last contact. If we ask you to confirm your newsletter subscription and you do not, your email address and the language of the page are deleted 30 days after your request. |
| Replies to your contact and withdrawal forms | Performance of the contract, or our legitimate interest in answering you | 3 years after the last exchange, or the retention of the order concerned |
| Fraud prevention, an automatic risk analysis by Shopify followed by a manual check by Crave, without automated decision | Our legitimate interest in preventing fraud | Retention of the order |
| Review invitation after a purchase | Our legitimate interest in knowing your opinion, with a right to object at any time | Retention of the order |
| Audience measurement, recordings of visits and advertising | Your consent, given through the cookie banner | Cookies 400 days at most, and retention per provider in the Cookies section |
Data collected
Identity, billing and delivery addresses, email address and telephone number. Content of the order, nail size and, where applicable, the per-finger difference in millimeters calculated by the size calculator, as well as the payment method. Account data and order history. Messages sent through the forms. Language of the site you use. Browsing data collected by cookies and, if you accept the Analytics category, recordings of your visits. The fields marked as required at checkout and in the forms are necessary to process your order or your request, which cannot be handled without them. The other fields are optional.
Recipients
Your data is processed by Crave and by the following providers, each for its own task.
- Shop hosting, orders, accounts, transactional emails, payment and fraud analysis. Shopify International Limited (Ireland), part of Shopify Inc. (Canada).
- Payment processing, each controller of its own processing. Stripe Payments Europe Ltd (Ireland), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg), Adyen N.V. (Netherlands) and Klarna Bank AB (Sweden).
- Shipping labels and tracking. Sendcloud B.V. (Netherlands).
- Carriers. Mondial Relay SAS, La Poste SA (Colissimo) and Chronopost SAS (France).
- Marketing emails and restock alerts. Klaviyo, Inc. (United States).
- Review invitations. Trustpilot A/S (Denmark).
- Advertising and measurement. Meta Platforms Ireland Limited (Ireland).
- Advertising and measurement. TikTok Technology Limited (Ireland).
- Advertising and measurement. Pinterest Europe Ltd (Ireland).
- Advertising and measurement. Google Ireland Limited (Ireland).
- Recordings of visits and heatmaps. Microsoft Ireland Operations Limited (Ireland).
- Anti-robot protection of the forms. hCaptcha, Intuition Machines, Inc. (United States).
- Hosting of our mailbox, where your messages are kept. Google Ireland Limited (Ireland).
- Accounting. Dougs (France).
Data is also disclosed when the law requires it, for example to a court or a public authority.
Transfers outside the European Union
Shopify Inc. (Canada) relies on the European Commission’s adequacy decision. Klaviyo, Meta, Pinterest, Google, Microsoft and Intuition Machines (hCaptcha) are certified under the EU-US Data Privacy Framework. Shopify’s subprocessors in the United States and TikTok rely on the European Commission’s standard contractual clauses. You can obtain a copy of these safeguards on request.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format and to set directives on what happens to it after your death. You can withdraw your consent at any time, for example with the unsubscribe link in each email, without affecting the lawfulness of earlier processing. Write to contact@wearcrave.com. We may ask you to confirm your identity and we reply within one month. You can also lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
Cookies
Cookies and similar trackers, called cookies below, are files or technologies that a site stores in your browser and reads on your next visits. The site uses four categories.
- Strictly necessary. Site operation, cart, checkout, your cookie choice and the anti-robot check of the forms. Shopify, hCaptcha. Up to 1 year. No consent is required.
- Personalization. Your nail size, the five measurements in millimeters used to calculate it and the date of that calculation, the last products viewed, and the date you closed the newsletter window or an indication that you signed up through it, kept in your browser’s local storage until you delete them. The five measurements stay in your browser. When you add a set to your cart after using the calculator, the difference in millimeters between your measurement and the size it recommends, for the fingers concerned, is sent with your cart and then saved with your order. The nail size leaves your browser only with your cart and then your order, or with your restock alert. Crave, Klaviyo. Subject to your choice in the preferences panel. If you refuse this category, the site remembers neither your nail size, nor the products viewed, nor these details about the newsletter window.
- Analytics. Audience measurement of the store and recordings of visits, with your consent. Shopify, with _shopify_y and _shopify_analytics for 1 year and _shopify_s for 30 minutes. Google Analytics, with _ga, _ga_3P6Y4H5MSD and _ga_8FQ5N9XD3E for 400 days, whose measurement data we keep 14 months. Microsoft Clarity, with _clck for 1 year and _clsk for 1 day. Clarity records clicks, scrolling and mouse movements on the pages, masks all the text shown and everything typed into a field, and never records checkout. Recordings are kept 30 days, and up to 9 months for a random sample and for those we mark as favorites. Microsoft is an independent controller of this data and uses it under its own privacy statement.
- Marketing. Measurement of our campaigns and advertising on partner platforms, with your consent. Shopify, with _shopify_marketing for 1 year, and shopify_client_id for 1 year when you accept all categories. Meta, with _fbp for 90 days. TikTok, with _ttp, ttcsid and ttcsid_DAKT3KJC77U6O7H546RG for 90 days. Pinterest, with _pin_unauth for 1 year, and _pinterest_ct_ua for 1 year on the Pinterest domain. Klaviyo, with __kla_id for 400 days. Google, with _gcl_au for 90 days. Microsoft, when Clarity also runs, with MUID and SRM_B for 390 days, MR for 7 days, ANONCHK for 10 minutes and SM for the session, on Microsoft domains, and Clarity then also shares data with Microsoft Advertising. If you accept this category, the email address, telephone number, name and address given at checkout are sent in hashed form to Meta, TikTok, Pinterest and Google, so that they can link your purchase to an ad you saw (advanced matching and enhanced conversions). If you accept only one of these two categories, Google still receives, for the other one, signals without cookies (pages and products viewed, cart additions, searches), without the details given at checkout.
The site also keeps a few temporary details in your browser’s session storage, such as the number of pages viewed before the newsletter pop-up opens and an indicator that shows the animation inviting you to scroll a carousel only once per session. They are cleared when the tab’s session ends, normally when you close it. Your cart, nail size, and measurements may remain accessible from the browser you used. On a shared or public computer, someone else using the same browser profile may be able to access them. Clearing the site data in your browser removes what is stored there, but not data already sent with an order.
On your first visit, a banner lets you accept, refuse or customize cookies. Your choice is kept for 12 months. You can change it at any time with the Cookie settings link, here or in the Legal menu in the footer of every page, which opens the preferences panel with your current choices.