GDPR Privacy Policy

Our Privacy Policy was last updated on January 19, 2026.

NEW Haritage operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). NEW Haritage is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

Definitions

For the purposes of this Privacy Policy:

"Account" means a unique account created for You to access our Service or parts of our Service.
"Company" (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to NEW Haritage. For the purpose of the GDPR, the Company is the Data Controller.
"Country" refers to France.
"Data Controller", for the purposes of the GDPR, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
"Personal Data" is any information that relates to an identified or identifiable individual.
"Service" refers to the Website.
"Website" refers to NEW Haritage, accessible from https://www.newheritage.fr

Personal Information We Collect or Process

We may collect or process the following categories of personal information:

Contact details: name, address, billing address, shipping address, phone number, and email address.
Financial information: payment card information, transaction details, and payment confirmations.
Account information: username, password, security questions, and preferences.
Transaction information: items viewed, cart data, wishlists, and purchase history.
Device & Usage information: IP address, browser type, and interaction data.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. We process your data based on "legitimate interests" (preventing fraud, providing support, analytics) or based on your explicit consent.

Your Rights under the GDPR

The Company guarantees You can exercise Your rights:

Request access to Your Personal Data.
Request correction of incomplete or inaccurate information.
Object to processing for direct marketing or legitimate interest grounds.
Request erasure of Your Personal Data.
Request the transfer of Your data in a machine-readable format.
Withdraw Your consent at any time.

Security and Retention

We retain your personal information only as long as necessary to maintain your account, provide Services, or comply with legal obligations. While we strive to protect your data, no method of transmission over the Internet is 100% secure.

International Transfers

If we transfer your personal information out of the European Economic Area (EEA) or the United Kingdom, we rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at: