Privacy policy.

KLIP'S, Paris, France. Contact: hello@klips.watch. Full company registration details on the legal notice page.

• Order data: name, shipping address, billing address, email, phone (optional, only for carrier delivery), order content.
• Payment data: handled and stored by our payment processor (PCI-DSS Level 1 certified, EU/EEA). KLIP'S never sees, transmits or stores card numbers.
• Email correspondence: the content of any message you send us, kept for as long as needed to handle your request and to evidence after-sale.
• Technical data: server logs (IP address, user agent, timestamp), kept for up to 12 months for security and fraud prevention.
• Cookies: only strictly necessary cookies are used by default. See cookies policy.

• Date of birth, gender, marital status.
• Banking details (handled by the payment processor only).
• Identity documents (we do not run KYC for retail orders).
• Any "profile" of you for advertising or marketing purposes.

• Performance of the sales contract (Art. 6.1.b GDPR): order processing, shipping, after-sale.
• Legal obligations (Art. 6.1.c GDPR): accounting, tax, consumer law record-keeping.
• Legitimate interest (Art. 6.1.f GDPR): security, fraud prevention, basic aggregated analytics.

• Order records: 10 years (French commercial code).
• Email correspondence: up to 3 years after last contact, then archived without personal identifiers.
• Server logs: up to 12 months.
• Payment processor records: governed by the processor's own retention policy (typically 13 months after the last transaction).

We share data only with the strict minimum of processors needed to operate the shop:

• Hosting (EU region only).
• Payment processor (PCI-DSS certified, EU/EEA).
• Carriers (Colissimo, Mondial Relay, DHL Express) — only the address fields they need.
• Email provider — to send transactional emails (order confirmation, shipping notice).

We never sell, rent, share or transmit your data for advertising, profiling or third-party marketing.

Under GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw any consent you may have given. Write to hello@klips.watch and we will reply within one month, free of charge. If you are not satisfied with our reply, you may file a complaint with your national supervisory authority (in France: the CNIL, www.cnil.fr).

Right to erasure is subject to our legal obligation to retain order records for 10 years; in that case we anonymise instead of deleting.

None as a default. If a processor is ever based outside the EU/EEA, we use standard contractual clauses approved by the European Commission and disclose it on this page within 30 days of the change.

All data in transit is protected by TLS 1.3. All data at rest in our database is encrypted at the disk level. Access to personal data inside KLIP'S is limited to two people on a need-to-know basis. We log every access and review the log monthly. We have no record of any data breach to date; if one occurs, we will notify the CNIL within 72 hours and the affected individuals as soon as practical.

KLIP'S is not aimed at children under 16 and we do not knowingly collect data from them. If you are under 16, please do not place an order without parental supervision.