Legal information

Privacy Policy

Last updated: 31/07/2026

Data Controller: Clenshops — Clément Marty

Address: 1310 rue Ontario E, H2L 0H2 Montréal, Canada

Contact: [email protected]

1. Data We Collect

When you browse and shop on clenshops.com, we collect the following information:

  • Personal data: first and last name, email address, phone number.
  • Shipping data: full postal address.
  • Payment data: processed directly by our payment provider (Stripe). Clenshops does not store any card details.
  • Technical data: IP address, browser type, pages visited, session duration, cookie identifiers.

2. How We Use Your Data

Your data is used to:

  • Process and ship your orders, manage billing and customer support.
  • Prevent fraud and ensure site security.
  • Improve our website and analyze browsing behavior (with your consent).
  • Send marketing communications (newsletters, promotions) — only if you have opted in.

3. Legal Basis

  • Contract performance for everything related to order management.
  • Consent for newsletters and analytical/marketing cookies.
  • Legitimate interest for security and fraud prevention.
  • Legal obligation for retention of accounting records.

4. Data Sharing

Your data may be shared with:

  • Stripe — payment processing.
  • Carriers (Colissimo, DHL, etc.) — order delivery.
  • Analytics tools (Google Analytics) — only with your consent.

Your data is never sold to third parties.

5. Your Rights (GDPR)

Under the GDPR, you have the following rights:

  • Right of access, rectification, and erasure of your data.
  • Right to object to processing and direct marketing.
  • Right to data portability.
  • Right to withdraw your consent at any time.

To exercise these rights, contact us at [email protected]. We respond within 30 days.

6. Cookies

We use three types of cookies:

  • Essential cookies: required for the site to function (cart, session). Cannot be disabled.
  • Analytical cookies: audience measurement (Google Analytics). Subject to your consent.
  • Marketing cookies: ad personalization (Facebook, Instagram, TikTok). Subject to your consent.

7. Data Retention

Your data is retained for the duration of the business relationship, then archived in accordance with legal obligations (6 years for accounting data). Marketing data is deleted upon request or after 3 years of inactivity.

8. Security

The site uses SSL/TLS encryption for all data exchanges. Passwords are hashed and never stored in plain text.

9. Contact

For any questions: [email protected].