Privacy policy

PRIVACY POLICY

Last updated: September 15, 2026

KRIS VAN ASSCHE is operated by HVA - GVDE, a company established in France. HVA - GVDE operates this store and website, including all related information, content, features, tools, products and services, in order to provide you with a curated shopping experience (the "Services"). The Services are powered by Shopify, which enables us to provide them to you.

This Privacy Policy applies to customers and visitors worldwide and describes how we collect, use, disclose and otherwise process personal information when you visit or use the Services, make a purchase or other transaction, or communicate with us. Some rights and obligations described below apply only in particular countries or regions. Where local law provides greater protection, that law will apply.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of personal information. Please read it carefully. By using the Services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies, relates to, describes or can reasonably be linked to you or another person. It does not include information that has been collected anonymously or de-identified so that it cannot reasonably identify or be linked to you. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process:

  • Contact details including your name, billing address, shipping address, phone number and email address.
  • Payment and financial information needed to process a transaction, including payment method, payment confirmation, billing information and transaction details. Complete payment-card details are processed by Shopify and/or our payment providers and are not directly stored by us.
  • Account information including your username, password, preferences and settings.
  • Transaction and shopping information including items you view, place in your cart, add to a wishlist, purchase, return, exchange or cancel, and your past transactions.
  • Communications with us including information you provide when you contact customer support or otherwise communicate with us.
  • Device information including information about your device, browser or network connection, your IP address, cookie identifiers and other unique identifiers.
  • Usage information including how and when you interact with or navigate the Services.
  • Preferences and consent records such as marketing choices, cookie choices and other privacy settings.

Personal Information Sources

We may collect personal information:

  • Directly from you including when you create an account, place an order, use the Services, communicate with us or otherwise provide information to us.
  • Automatically through the Services including from your device when you use the Services, and through cookies and similar technologies.
  • From Shopify and our service providers including when they provide technology, payment, fulfilment, delivery, analytics, marketing or customer-support services on our behalf.
  • From partners or other third parties where permitted by law, including advertising, social-media and business partners.

How We Use Your Personal Information and Our Legal Bases

We use personal information for the purposes below. Where laws such as the GDPR, UK GDPR or Swiss data-protection law require a legal basis, we rely on the bases stated for each purpose.

Provide, tailor and improve the Services. We use personal information to process payments; fulfil orders; arrange shipping; handle returns, exchanges and cancellations; create and manage accounts; remember preferences; provide product recommendations; and operate, tailor and improve the Services. The legal bases are performance of our contract with you, our legitimate interests in operating and improving our business, and consent where required.

Marketing and advertising. We use personal information to send marketing and promotional communications and to display or measure advertising. We rely on consent where required, including for non-essential cookies and certain electronic marketing. Where permitted by law, we may rely on our legitimate interest in promoting our products to existing customers, subject to your right to object or opt out.

Security and fraud prevention. We use personal information to authenticate accounts, provide secure payment and shopping experiences, detect and investigate fraudulent, illegal, unsafe or malicious activity, protect public safety, and secure the Services. We rely on our legitimate interests in protecting our customers and business, and on legal obligations where applicable.

Communicating with you. We use personal information to respond to enquiries, provide customer support, send service or account notices, and maintain our relationship with you. We rely on performance of our contract and our legitimate interests in providing effective customer service.

Legal reasons. We use personal information to comply with applicable law and valid legal process, respond to lawful requests from public authorities, establish or defend legal claims, enforce our terms and investigate potential violations. We rely on legal obligations and our legitimate interests in protecting and enforcing our rights.

How We Disclose Personal Information

We may disclose personal information where reasonably necessary for the purposes described above, including:

  • Shopify and service providers to vendors and service providers that perform services on our behalf, such as payment processing, IT management, data analytics, customer support, cloud storage, fulfilment, shipping and professional advice.
  • Business, analytics and marketing partners to provide marketing services and advertising, including personalized advertising where you have consented or where otherwise permitted by law. These partners process information under their own privacy notices where they act independently.
  • At your direction or with your consent when you direct or authorize us to disclose information, such as for delivery, social-media widgets or login integrations.
  • Affiliates and members of our corporate group where relevant to operate our business.
  • Business transactions in connection with a merger, acquisition, financing, reorganization, insolvency or sale of all or part of our business or assets.
  • Legal and protective purposes where required to comply with law or legal process, enforce our terms, or protect the Services, our rights, our customers or others.

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services in order to provide and improve its services. Information you submit through the Services may be transmitted to Shopify and to service providers in countries other than where you live. Certain Shopify features may also use information about your interactions with our store, other merchants and Shopify. For processing that Shopify determines and carries out for its own purposes, Shopify is responsible for responding to applicable privacy requests. Please read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal to manage privacy choices relating to Shopify's own processing.

Cookies and Similar Technologies

We and our service providers use cookies, pixels, local storage and similar technologies to operate the Services, remember preferences, understand site use, prevent fraud, measure performance and, where permitted, personalize marketing and advertising. Strictly necessary technologies may be used without consent where permitted by law. Non-essential analytics, advertising and social-media technologies are used only with consent where applicable.

You can accept, refuse or change non-essential cookie choices through the cookie banner or the "Cookie Preferences" or "Privacy Choices" link made available on the Services. Withdrawing consent is as easy as giving it. Browser settings can also block or delete cookies, although some features may then work differently. Cookie lifetimes vary according to purpose and are shown, where required, in the cookie-preferences interface.

For more information about cookies used by Shopify, see the Shopify Cookie Policy. Depending on where you live, you may also use Your Privacy Choices to opt out of sale, sharing or targeted advertising where those rights apply.

Third-Party Websites and Links

The Services may link to websites or online platforms operated by third parties. If you follow a link to a site not affiliated with or controlled by us, please review its privacy and security policies and terms. We are not responsible for the privacy or security of those sites. Information you make public or semi-public on third-party platforms may be visible to others. The inclusion of a link does not by itself imply endorsement.

Children's Data

The Services are not directed to children under 16, or to a higher minimum age where required by local law, and we do not knowingly collect their personal information. If you are a parent or guardian and believe a child has provided personal information to us, please contact us to request its deletion. We do not knowingly sell or share, as those terms are defined by applicable law, the personal information of anyone under 16.

Security and Retention of Your Information

We use reasonable administrative, technical and organizational measures designed to protect personal information. No security measure is perfect or impenetrable, and information sent over the internet may not be secure while in transit. Please do not use unsecured channels to send sensitive or confidential information.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with legal, tax and accounting obligations, resolve disputes, prevent fraud and enforce agreements. Unless a longer or shorter period is required by applicable law, our principal retention periods are:

  • Orders, invoices and transaction records for the duration of our commercial relationship and for 10 years where required for accounting and transaction records.
  • Customer accounts and profiles while the account is active and generally for 3 years after the account becomes inactive or our commercial relationship ends, unless you ask us to delete it earlier and no exception applies.
  • Marketing information until you unsubscribe or withdraw consent, and generally no longer than 3 years after your last purchase or meaningful interaction. Records needed to respect an opt-out may be kept for 3 years.
  • Customer-service communications for as long as necessary to resolve the enquiry or claim and, where needed to establish or defend legal rights, for the applicable limitation period.
  • Payment-card information payment-card information is handled by payment providers and is not directly retained by us beyond the information needed to confirm and document the transaction.
  • Cookies and similar identifiers according to the lifetimes stated in the cookie-preferences interface and any limits imposed by applicable law.

When a retention period expires, information is deleted or anonymized, unless it must be preserved for a legal claim, investigation, security incident, backup cycle or other lawful reason.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights below. These rights are not absolute and may apply only in certain circumstances. We may decline a request where permitted by law.

  • Access / know: request access to, or information about, the personal information we hold about you.
  • Correction: request correction of inaccurate or incomplete personal information.
  • Deletion / erasure: request deletion or erasure of personal information, subject to lawful exceptions.
  • Portability: receive certain personal information in a portable format and, where applicable, request its transfer to a third party.
  • Objection and restriction: object to or request restriction of certain processing, including direct marketing, where applicable.
  • Withdrawal of consent: withdraw consent at any time where processing relies on consent, without affecting processing carried out before withdrawal.
  • Sale, sharing and targeted advertising: opt out of the sale or sharing of personal information, or of processing for targeted advertising, where those concepts and rights apply.
  • Appeal: appeal a decision we make about a privacy request, where applicable.

You may exercise these rights by emailing info@krisvanassche.com or through any privacy-choice link provided on the Services. You can opt out of promotional emails at any time using the unsubscribe link in each email. Even after opting out, you may still receive non-promotional messages about your account, orders or our relationship with you.

Where applicable, we honor recognized browser-based opt-out signals, including Global Privacy Control, for the browser and device sending the signal. Learn more at globalprivacycontrol.org. We do not currently respond to other browser "Do Not Track" signals.

We will not discriminate against you for exercising a privacy right. We may verify your identity before processing a request. Where allowed, you may use an authorized agent; we may request proof of authority and direct identity verification. We will respond within the period required by applicable law.

Complaints

If you have concerns about how we process personal information, please contact us first. You may also have the right to complain to the data-protection or privacy authority where you live or work, or where an alleged infringement occurred. HVA - GVDE's lead supervisory authority is the French Data Protection Authority (CNIL). For the EEA, a list of national supervisory authorities is available from the European Data Protection Board.

International Transfers

Because we sell worldwide and use international service providers, personal information may be transferred, stored or processed outside the country where you live. Those countries may have different data-protection laws.

Where required, we use recognized safeguards for cross-border transfers, such as adequacy decisions, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, or other mechanisms accepted by the relevant authority. We also require service providers to protect personal information in accordance with applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal or regulatory reasons. We will post the revised Policy on the Services, update the "Last updated" date and provide any additional notice required by applicable law.

Contact

If you have questions about this Privacy Policy or our privacy practices, or would like to exercise a privacy right, please email info@krisvanassche.com or write to: HVA - GVDE, Avenue Pierre Ier de Serbie, 75116 Paris, France.

KRIS VAN ASSCHE is operated by HVA - GVDE. For the purposes of applicable data-protection laws, HVA - GVDE is the controller of your personal information, except where another entity, such as Shopify, acts as an independent controller for processing it determines and carries out for its own purposes.