⛱️ SUMMER SALE: -10% on the Whole Shop with code SUN
Limited stock, limited time
🔥 BLACK Days: -20% on the Whole Shop with code BD20
ends this Monday 2 Dec at 23:59

Privacy Policy

Last updated: 8 October 2026

This privacy policy explains, clearly and transparently, how Air d'Orient collects, uses, stores and protects your personal data, in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the amended French Data Protection Act (Loi Informatique et Libertés).

It applies to all activities of the site https://airdorient.fr/en/: online sale of physical products, order processing, delivery by third-party suppliers, newsletter and audience measurement.

Article 1: Data Controller

The controller of the personal data collected on this site is:

  • Name: Cyril PIERRI
  • Business: Air d'Orient
  • Legal form: Sole trader (entreprise individuelle)
  • SIRET: 91127245800025
  • Country: France
  • Address: 9 rue des Colonnes, 75002 Paris, France
  • Contact email: contact@airdorient.fr

The controller, who is also the person in charge of the protection of personal information, undertakes to reply to any request concerning personal data within a maximum of 30 days.

The controller undertakes to protect the personal data collected, not to pass them on to third parties without the user having been informed, and to respect the purposes for which the data were collected.

If the integrity, confidentiality or security of the user’s personal data is compromised, the controller undertakes to inform the user by any appropriate means.

Article 2: Purpose of Our Privacy Policy

Our privacy policy aims to be fully transparent about how we collect, process and use our users’ personal data.

In accordance with the General Data Protection Regulation (GDPR) of 27 April 2016, our objective is to guarantee the security and confidentiality of the personal information entrusted to us by the site’s users.

This privacy policy explains to the site’s users:

  • The types of data collected by the business.
  • The way their personal data are collected and processed.
  • The purpose of collecting the data.
  • Who their personal data may be passed on to.
  • The retention period of the data
  • The controller of the personal data
  • The users’ rights
  • The use of cookies

Article 3: General Principles for the Collection and Processing of Data

In accordance with Article 5 of the EU General Data Protection Regulation 2016/679, the collection and processing of the data of the site’s users comply with the following principles:

  • Lawfulness, fairness and transparency: data are collected and processed only on one of the legal bases listed below and detailed in Article 6. Whenever personal data are collected, the user is told that their data are being collected and why.
  • Purpose limitation: data are collected and processed for one or more purposes set out in this privacy policy.
  • Data minimisation: only the data needed to achieve the purposes pursued by the site are collected.
  • Storage limitation: data are kept for a limited period, of which the user is informed. Where this information cannot be given, the user is informed of the criteria used to determine the retention period.
  • Integrity and confidentiality of the data collected and processed: the controller undertakes to ensure the integrity and confidentiality of the data collected.

To be lawful, and in accordance with Article 6 of the EU General Data Protection Regulation 2016/679, the collection and processing of personal data may take place only if at least one of the following conditions is met:

  • The user has expressly consented to the processing.
  • The processing is necessary for the performance of a contract.
  • The processing is required to comply with a legal obligation.
  • The processing is necessary to protect the vital interests of the data subject or of another natural person.
  • The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
  • The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

Article 4: Definitions

  • “User”: any person who browses, reads, views or uses this website.
  • “Personal data”: any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, by data such as a name, first name, email address, location data, online identifier, etc.
  • “Processing“: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • “Controller”: the natural person who determines the purposes and means of the processing of personal data.
  • “GDPR”: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation, the main legislation on the protection of personal data in the European Union
  • “Cookie”: a small text file sent to your browser by the website you visit. Thanks to this cookie, information about your visit is recorded by the website, making your next visit easier and keeping your connection secure.

Article 5: Types of Data Collected

The data collected vary according to how you interact with Air d'Orient.

5.1 — Browsing the site

  • IP address
  • Browser type and operating system
  • Pages visited and length of visits
  • Traffic source (through audience-measurement cookies, only with your prior consent)

5.2 — Signing up for the newsletter or getting a discount code

  • First name
  • Email address

5.3 — Placing an order

  • First name and surname
  • Email address
  • Delivery address (passed to the supplier responsible for shipping)
  • Billing address (if different from the delivery address)
  • Telephone number (required for delivery)
  • Payment data: processed exclusively by Stripe or PayPal — Air d'Orient does not store any bank details

As part of our sales activity, your delivery details (first name, surname, postal address, telephone) are passed directly to our suppliers located abroad, solely so that your order can be shipped. These transfers are described in Articles 7 and 9.

Article 6: Purposes and Legal Bases of Processing

Personal data are collected at different points in your interaction with Air d'Orient, so that we can provide our services effectively. In accordance with Article 6 of the GDPR, all processing is based on a specific legal basis.

6.1 — Consent (Art. 6(1)(a) GDPR)

  • Sending the newsletter and promotional emails
  • Placing non-essential cookies (analytics, behavioural analysis)

You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

6.2 — Performance of a contract (Art. 6(1)(b) GDPR)

  • Processing and shipping your order
  • Passing your delivery details to the supplier responsible for shipping
  • Handling returns, refunds and customer service
  • Order tracking and communications about your purchase

6.3 — Legal obligation (Art. 6(1)(c) GDPR)

  • Keeping accounting data and invoices (10 years — Article L.123-22 of the French Commercial Code)

6.4 — Legitimate interest (Art. 6(1)(f) GDPR)

  • Improving the user experience and the site
  • Preventing fraud and securing transactions
  • Handling any legal claims

Article 7: Recipients and Processors

Air d'Orient is the main recipient of your data. To provide its services, some data pass through third-party service providers, chosen for their reliability and their compliance with data protection rules.

7.1 — Website hosting

  • o2switch (France) — the site’s hosting provider, running on the WordPress CMS. Data stored in France.
  • WordPress — the CMS used to run the site and manage orders (first name, surname, address, email, telephone).
  • o2switch privacy policy: o2switch.fr

7.2 — Shipping suppliers

Because of the way we work, orders are shipped directly by our partner suppliers. For this reason, your delivery details (first name, surname, postal address, telephone number) are passed to the supplier responsible for preparing and shipping your order, solely for delivery purposes.

  • Shipping suppliers based outside the European Union, mainly in China and elsewhere in Asia — these suppliers may use your data only to ship your order. Article 9 explains how this transfer outside the EU works.

7.3 — Online payment

  • Stripe — secure payment provider. Card details are encrypted and sent directly to Stripe. Air d'Orient does not store any bank details. Policy: stripe.com/privacy
  • PayPal — alternative payment provider. Transactions take place directly on the PayPal platform. No bank or credit card information is passed to Air d'Orient. Policy: paypal.com

7.4 — Email marketing and automation

  • ConvertKit / Kit (United States) — collects: email address, first name, segmentation tags. Used to send newsletters and promotional emails. Transfer outside the EU covered by Standard Contractual Clauses (SCCs). Policy: convertkit.com/privacy
  • Systeme.io (Ireland — ITACWT Limited, subject to Irish law and the GDPR) — collects: email address, first name, sales funnel data. The data are hosted by Amazon Web Services in Ireland and remain in the European Union. Policy: systeme.io/privacy-policy

7.5 — Audience measurement and behavioural analysis

  • Google Analytics (United States) — collects browsing data (pages visited, time spent, traffic source) for statistical purposes. These data are collected only with your prior consent through the cookie banner. Transfer outside the EU covered by Standard Contractual Clauses (SCCs). Policy: policies.google.com/privacy
  • Microsoft Clarity (United States) — behavioural analysis tool that collects, in anonymised form: time spent on pages, browser used, pages visited, heatmaps and session recordings. These data are collected only with your prior consent through the cookie banner. Policy: privacy.microsoft.com

Please note that these tools and providers have their own privacy policies and security measures. We encourage you to read them to understand how these third parties handle your data.

Firm commitment: Air d'Orient undertakes never to disclose, sell or share the data collected without the user’s explicit consent.

Article 8: Data Retention Periods

Data are kept only for as long as strictly necessary for the purpose for which they were collected:

  • Order and customer relationship data (name, address, email, telephone): for the duration of the customer relationship + 3 years from the last active interaction, for customer follow-up purposes.
  • Accounting data and invoices: 10 years from the date of the transaction (legal obligation — Article L.123-22 of the French Commercial Code).
  • Prospects and newsletter subscribers: 3 years from the last contact or last active interaction.
  • Payment data: Air d'Orient does not store any bank details. This information is encrypted and sent directly to Stripe or PayPal.
  • Browsing data and cookies: 13 months maximum from the time they are placed.
  • Proof of newsletter consent: 3 years from opt-in.

Where processing is based on the user’s consent, the user may withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

When these periods expire, your data are deleted or irreversibly anonymised.

Article 9: Data Transfers outside the European Union

Some service providers used by Air d'Orient are established outside the European Union, in particular in the United States and in Asia. The framework that applies to each transfer is set out below.

Providers involved in a transfer outside the EU:

  • Shipping suppliers (mainly based in China and elsewhere in Asia) — your delivery details (first name, surname, postal address, telephone) are passed to our partner suppliers solely so that they can ship your order. China is not covered by an adequacy decision of the European Commission, so your data may not enjoy the same level of protection there as in the European Union. This is why we pass on only the data strictly necessary for delivery.
  • ConvertKit / Kit (United States) — transfer covered by the European Commission’s Standard Contractual Clauses (SCCs).
  • Google Analytics (United States) — transfer covered by the European Commission’s Standard Contractual Clauses (SCCs).
  • Microsoft Clarity (United States) — transfer covered by the European Commission’s Standard Contractual Clauses (SCCs).
  • Stripe and PayPal (United States) — transfers covered by the EU-U.S. Data Privacy Framework (DPF), adopted by the European Commission in July 2023 and upheld by the General Court of the EU in September 2025. These providers are self-certified under the DPF. Should the legal framework change, the transfers would be covered by SCCs instead.

Providers with no transfer outside the EU:

  • o2switch — French hosting provider, data stored in France.
  • Systeme.io — Irish company (ITACWT Limited), data hosted by AWS in Ireland, remaining in the European Union.

You can obtain more information about these safeguards, or a copy of them where they exist, by contacting us at contact@airdorient.fr.

Article 10: Controller of Personal Data

The controller of personal data is Cyril PIERRI, who can be contacted by email at the following address: contact@airdorient.fr, or by telephone on +33 7 67 79 70 94, from 9 am to 6 pm (Paris time), Monday to Friday.

The controller determines the purposes and means of the processing of personal data.

The controller undertakes to protect the personal data collected, not to pass them on to third parties without the user having been informed, and to respect the purposes for which the data were collected.

In addition, the controller undertakes to notify the user of any rectification or erasure of their data, unless this would involve disproportionate formalities, costs or effort.

If the integrity, confidentiality or security of the user’s personal data is compromised, the controller undertakes to inform the user by any appropriate means.

Article 11: Users' Rights

Under Articles 15 to 22 of the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights:

  • Right of access (Art. 15): to find out whether data concerning you are being processed and to obtain a copy of them.
  • Right to rectification (Art. 16): to have inaccurate or incomplete data corrected.
  • Right to erasure / right to be forgotten (Art. 17): to have your data deleted, subject to legal retention obligations.
  • Right to restriction of processing (Art. 18): to ask that your data be kept but no longer actively processed.
  • Right to data portability (Art. 20): to receive your data in a structured, machine-readable format, or to have them sent to another controller.
  • Right to object (Art. 21): to object to the processing of your data, in particular for direct marketing purposes.
  • Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
  • Right not to be subject to automated decision-making (Art. 22): to object to any decision based solely on automated processing that produces legal effects concerning you.
  • Right to give instructions for after your death: to decide what happens to your data after your death (Article 85 of the French Data Protection Act — Law No. 2016-1321 of 7 October 2016).

How to exercise your rights

Please send any request to: contact@airdorient.fr with the subject line “Exercising my rights — personal data”. You will receive a reply within 30 days (this may be extended by a further 60 days for complex requests, in which case we will let you know).

11.1 — Right of access, rectification and erasure
Send an email to contact@airdorient.fr stating clearly what your request is about. Example: “Request to delete my personal data”.

11.2 — Right to data portability
Send your request to contact@airdorient.fr, specifying the data concerned.

11.3 — Right to restriction and right to object
Send your request to contact@airdorient.fr. We may refuse only if we can demonstrate compelling legitimate grounds.

11.4 — Minors
In accordance with Article 8 of the GDPR, where processing is based on consent (for example the newsletter or optional cookies), only minors aged 16 or over may give their consent on their own. Under the age of 16, the consent of a parent or legal guardian is required. In South Africa, where the age of majority is 18, this consent is required under the age of 18 (Protection of Personal Information Act). Air d'Orient reserves the right to verify the user’s age by any appropriate means.

11.5 — Right to lodge a complaint with a supervisory authority
If you believe your rights have not been respected, you can lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — Tel.: +33 1 53 73 22 22. You may also contact the supervisory authority of the EU Member State where you live (Article 77 GDPR): in Ireland, the Data Protection Commission (www.dataprotection.ie); in Malta, the Office of the Information and Data Protection Commissioner (idpc.org.mt); in South Africa, you can lodge a complaint with the Information Regulator (inforegulator.org.za). If you live outside the European Union, we apply this same policy to your data, and any additional rights given to you by the law of your country also apply.

Article 12: Use of Cookies

In accordance with Article 82 of the French Data Protection Act and the recommendations of the CNIL, some trackers placed on your device require your prior and explicit consent. Simply browsing https://airdorient.fr/en/ does not count as consent.

12.1 — Strictly necessary cookies (no consent required)

  • WordPress session cookies (keeping you logged in and keeping your shopping basket)
  • Secure authentication cookie
  • Cookie that remembers your cookie choices

12.2 — Cookies that require your prior consent

  • Google Analytics — audience measurement and analysis of browsing behaviour (pages visited, time spent, traffic source). These cookies are placed only after you have explicitly agreed.
  • Microsoft Clarity — anonymised behavioural analysis (heatmaps, session recordings, time spent). These cookies are placed only after you have explicitly agreed.

12.3 — Your choices

A consent banner is displayed on your first visit to https://airdorient.fr/en/. You can:

  • Accept all cookies
  • Reject all non-essential cookies — in a single click, as easily as accepting them, as required by the CNIL
  • Customise your choices by category and change them at any time using the cookie settings link in the footer

Your consent is valid for 13 months maximum, after which you will be asked for your choice again.

You can also set your browser to block cookies: see your browser’s help pages or the CNIL’s advice.

Article 13: Data Security

Air d'Orient implements appropriate technical and organisational measures to protect your data against loss, alteration, unauthorised access or disclosure:

  • SSL/TLS encryption of communications (HTTPS protocol)
  • Secure hosting with o2switch (France)
  • Access to data restricted to authorised persons only
  • Regular backups of the site’s data

In the event of a personal data breach likely to result in a risk to your rights and freedoms, Air d'Orient undertakes to notify the CNIL within 72 hours of becoming aware of it, in accordance with Article 33 of the GDPR. If the breach is likely to result in a high risk to you personally, you will be informed directly and as quickly as possible at contact@airdorient.fr.

Article 14: Changes to This Privacy Policy

Users can consult this privacy policy at any time.

Air d'Orient reserves the right to amend this privacy policy at any time, to keep it in line with changes in the law or in the processing we carry out.

In the event of a substantial change, you will be informed by email (if you subscribe to the newsletter) and/or by a notice displayed on the site.

The current version can always be consulted on https://airdorient.fr/en/, together with the date it was last updated.

Last updated: 8 October 2026

Contact

For any question about this policy or about exercising your rights:

  • Email: contact@airdorient.fr
  • Subject line: “Personal data — (your request)”
  • Guaranteed response time: 30 days maximum.

Air d'Orient — Privacy Policy — Version of 8 October 2026