GDPR

The data controller is:

Sole trader (EI) – Trade name: KINKY BOY

Rue du Chariot d’Or, 69004 Lyon – France

E-mail: contact@kinky-boy.com

Data collected:

Depending on how the site is used, KINKY BOY may collect, in particular:

full name, postal address, e-mail address, telephone number, delivery information, order history, transaction-related information, customer service inquiries, and technical data;

browsing information, cookie preferences, and data voluntarily provided via forms.

Full banking details are not stored directly by KINKY BOY when processed by a secure payment service provider.

Data may be processed in order to:

create and manage customer accounts, record and process orders, process payments, prepare and deliver orders, manage returns and refunds, provide after-sales service, respond to customer inquiries, prevent fraud, comply with legal, tax, and accounting obligations, improve the site, measure audience metrics (where permitted), and send marketing communications (where regulations allow).

Legal bases

Depending on the specific processing activity, the legal bases may be:

– performance of the contract; – pre-contractual measures; – compliance with a legal obligation; – consent; – legitimate interest, where validly applicable.

Recipients

Data is accessible only to recipients who require it.

It may, in particular, be transmitted to:

hosting and online store providers, payment service providers, carriers, logistics providers, technical service providers necessary for the site's operation, and legally authorized authorities where required by law.

Transfers outside the European Union

Certain technical service providers may process data outside the European Union or the European Economic Area.

In such cases, KINKY BOY ensures that these transfers rely on a mechanism recognized by applicable regulations and that appropriate safeguards are implemented where required.

Retention period

Data is retained only for the duration necessary to fulfill its purpose, and is subsequently archived or deleted in accordance with legal obligations.

Documents relating to orders, invoicing, and accounting are retained for the applicable statutory periods.

Data used for commercial prospecting purposes is retained for the duration authorized by regulations.

Your rights

In accordance with the GDPR and applicable regulations, you may, depending on the circumstances, exercise the following rights:

right of access, right to rectification, right to erasure, right to restriction of processing, right to object, right to data portability (where applicable), and the right to withdraw your consent at any time where processing is based on consent.

To exercise your rights:

contact@kinky-boy.com

Proof of identity may be requested only when necessary to verify the identity of the requester.

You may also lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL). Security

KINKY BOY implements reasonable and appropriate measures to protect personal data against loss, unauthorized access, alteration, or disclosure.