Privacy policy

Last updated on 03/11/2026.

PREAMBLE

This privacy policy informs you of the manner in which SAS ORPAÏ uses and protects the information you provide to us when you use this website, accessible at the following URL: orpai-studio.com (hereinafter the « Site »).

Please note that this privacy policy may be amended or supplemented at any time by SAS ORPAÏ, in particular in order to comply with any legal or technological developments. In such a case, the date of its update will be clearly identified at the top of this policy. These amendments are binding on the user once they have been informed that the updated privacy policy has been published online and have accepted it.

ARTICLE 1. PARTIES

This privacy policy applies between the publisher of the Site, hereinafter « the Publisher », and any person connecting to the Site, hereinafter « the User ».

ARTICLE 2. DEFINITIONS

« Site Contents » : items of any kind published on the Site, whether or not protected by an intellectual property right, such as texts, images, designs, presentations, videos, diagrams, structures, databases or software.

« Publisher » : SAS ORPAÏ, SAS acting in its capacity as publisher of the Site.

« User » : any person connecting to the Site.

« Site » : the website accessible at the URL orpai-studio.com, together with the related sub-sites, mirror sites, portals and URL variations.

ARTICLE 3. SCOPE OF APPLICATION

This privacy policy applies to every User. Clicking on « I accept » when registering on the Site constitutes your full and complete acceptance of this policy. Likewise, clicking on « I accept » in the cookie information banner displayed on the Site confirms this acceptance, while allowing you to customise which cookies will or will not be applied to you. You thereby acknowledge that you have read it in full and accept it without restriction.

The User acknowledges the evidential value of the Publisher’s automatic recording systems and, unless the User provides evidence to the contrary, waives the right to contest them in the event of a dispute.

Acceptance of this privacy policy presupposes that Users have the legal capacity required to do so or are at least 16 years of age, or failing that, that they have the authorisation of a guardian or curator if they lack legal capacity, or of their legal representative if they are under 16 years of age, or that they hold a mandate if they are acting on behalf of a legal entity.

ARTICLE 4. PERSONAL DATA

In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on 14 April 2016 and with the national legislation in force, the Publisher provides you with the following information:

4.1. Identity of the data controller

The data controller responsible for the collection and processing of data on the Site is SAS ORPAÏ, whose registered office is located at 238B avenue du Général de Gaulle, 30390 ARAMON, registered with the RCS Nimes under number B 894 201 995.

4.2. Data collection by the Publisher

4.2.1. Data collected

4.2.1.1 Data collected while browsing the Site

While browsing the Site, you consent to the Publisher collecting information relating to : the content you view and click on; demographic data; the device used and its software environment; your location; your connection data (times, IP address…).

4.2.1.2. Data collected when using the contact form or the contact e-mail address

Use of the contact form or of the contact e-mail address by the User entails the collection by the Publisher of the following personal data : surname, first name, e-mail address*, telephone number.

Personal data followed by an asterisk are mandatory in order to use the contact form. Users who do not wish to provide the information required to use the contact form will not be able to send a message to the Publisher directly from the Site.

4.2.1.3. Data collected when registering on the Site

Use of the registration form by the User entails the collection by the Publisher of the following personal data : surname*, first name*, postal address*, e-mail address*, telephone number.

Personal data followed by an asterisk are mandatory in order to register on the Site. Users who do not wish to provide the information required to use the registration form will not be able to register directly from the Site.

4.2.1.4. Data collected when using the newsletter form

When the newsletter form is used, the Publisher may collect and process : your e-mail address.

4.2.1.5. Data collected when using the Site’s chat

The Site offers an instant messaging service provided by Shopify (Shopify Inbox), which may reply by means of an automated agent based on artificial intelligence. Use of the chat entails the collection of the messages exchanged, of the first name, surname and e-mail address where the User provides them, and of the pages viewed during the conversation. These data are processed by the Publisher to respond to requests, and by Shopify to provide the service, generate the automated replies and improve its agent. Conversations can be read by the Publisher’s team.

4.2.1.6. Data collected when placing an order

Placing an order on the Site entails the collection by the Publisher of the following personal data: surname*, first name*, delivery address*, billing address*, e-mail address*, telephone number, products ordered, chosen payment method and delivery information. Payment data (card number, bank details) are processed directly by the payment providers and are never stored by the Publisher.

4.2.2. Purposes of the collection of personal data

Data collected while browsing are subject to automated processing for the purpose of:

Verifying the identity of persons ;
Ensuring and improving the security of the services ;
Developing, operating, improving, providing and managing the Site ;
Contextualising and improving the User’s experience ;
Sending information to and contacting persons, including by e-mail ;
Targeting advertising content ;
Preventing any unlawful or illegal activity ;
Enforcing the terms governing use of the Site.

Data collected when using the contact form or the contact e-mail address are subject to automated processing for the purpose of:

Verifying the identity of persons ;
Ensuring and improving the security of the services ;
Contextualising and improving the User’s experience ;
Sending information to and contacting persons, including by e-mail ;
Targeting advertising content ;
Preventing any unlawful or illegal activity.

Data collected upon registration are subject to automated processing for the purpose of:

Performing its contractual commitments ;
Verifying the identity of persons ;
Ensuring and improving the security of the services ;
Developing, operating, improving, providing and managing the Site ;
Contextualising and improving the User’s experience ;
Sending information to and contacting persons, including by e-mail ;
Preventing any unlawful or illegal activity ;
Enforcing the terms governing use of the Site.

Data collected when using the newsletter form are subject to automated processing for the purpose of :

sending newsletters to the User.

Data collected when using the chat are processed for the purpose of responding to the User’s requests, assisting the User in browsing and making purchases, and improving the service.

Data collected when an order is placed are processed for the purpose of fulfilling the order (preparation, delivery, invoicing, after-sales service) and of complying with the Publisher’s legal and accounting obligations.

4.2.3. Legal bases for processing

The legal basis for the data collected while browsing is the Publisher’s legitimate interest, namely analysing behaviour on the Site and achieving improved security and operation of the Site. Some of these data, such as those resulting from the placement of certain cookies, may have the consent of the persons concerned as their legal basis.

The legal basis for the data collected when using the contact form or the contact e-mail address is the consent of the data subjects.

The legal basis for the data collected upon registration is a contractual relationship.

The legal basis for the data collected when using the newsletter form is the consent of the data subjects.

The legal basis for the data collected when using the chat is the consent of the data subjects and the Publisher’s legitimate interest in responding to the requests addressed to it.

The legal basis for the data collected when an order is placed is the performance of the contract of sale and compliance with the Publisher’s legal obligations.

4.2.4. Recipients of the data

The data collected may be viewed only by the members of the Publisher’s management, by the staff responsible for preparing your order and by the staff responsible for managing the Site, as well as by the technical service providers listed in article 4.4.1, and are never made freely viewable by any third-party natural person.

4.2.5. Retention period of personal data

Personal data collected while browsing are retained for a reasonable period necessary for the proper administration of the Site and for a maximum of 12 months, or until the data subjects withdraw their consent.

Personal data collected when using the contact form or when writing to the contact e-mail address are retained for a reasonable period necessary for the proper handling of the User’s request, and for a maximum of 12 months.

Data collected upon registration are retained for the duration of the contractual relationship between the Publisher and the User.

Data collected when using the newsletter form are retained until the data subjects withdraw their consent.

Chat conversations are retained for a maximum period of 12 months.

Data relating to orders and invoicing are retained for 10 years from the close of the financial year, in accordance with the Publisher’s accounting and tax obligations.

At the end of each of these periods, the Publisher will archive these data and retain them for as long as its liability may be engaged.

Once this retention period has elapsed, the Publisher undertakes to permanently delete the data of the persons concerned.

4.2.6. Security and confidentiality of personal data

Personal data are stored under secure conditions, using current technical means, in compliance with the provisions of the General Data Protection Regulation and the national legislation in force.

4.2.7. Minimisation of personal data

The Publisher may also collect and process any data voluntarily provided by a User, in particular via the free-text field of the contact form.

The Publisher guides Users as far as possible when they provide unnecessary or superfluous personal data.

The Publisher undertakes to retain and process only the data strictly necessary for its activities, and will delete any unnecessary data received as soon as possible.

4.3. Respect for rights

You have the following rights regarding your personal data, which you may exercise by writing to us at our postal address or by sending an e-mail to the following address : hello@orpai-studio.com.

4.3.1. Right to information, access and communication of data

You have the right to access the personal data concerning you.

Owing to the obligation of security and confidentiality in the processing of personal data incumbent on the Publisher, your request will only be processed if you provide proof of your identity, in particular by producing a scan of your valid identity document (for requests made by e-mail) or a signed photocopy of your valid identity document (for requests made in writing), both accompanied by the statement « I hereby certify that this copy of my identity document is a true copy of the original. Done at … on … », followed by your signature.

To assist you in this process, you will find here a template letter drawn up by the CNIL.

4.3.2. Right to rectification, erasure and right to be forgotten

You have the right to request the rectification, updating, blocking or erasure of your personal data which may, as the case may be, prove inaccurate, erroneous, incomplete or outdated.

You may also set general and specific instructions regarding the fate of your personal data after your death. Where applicable, the heirs of a deceased person may require that the death of their relative be taken into account and/or that the necessary updates be made.

To assist you in this process, you will find here a template letter drawn up by the CNIL.

4.3.3. Right to object to data processing

You have the right to object to the processing of your personal data.

To do so, you should send an e-mail to the following address : hello@orpai-studio.com. In this e-mail, you must specify the data you wish to have deleted and the reasons justifying this request, except in cases of commercial prospecting.

4.3.4. Right to data portability

You have the right to receive the personal data you have provided to us in a transferable, open and readable format.

4.3.5. Right to restriction of processing

You have the right to request that the processing of your personal data by the Publisher be restricted. Your data may then only be stored and no longer used by the Publisher.

4.3.6. Withdrawal of consent

Your consent is essential to the processing of your data by the Publisher. However, you may withdraw it at any time. Such withdrawal will result in the deletion of the personal data concerning you.

Services requiring the processing of your data by the Publisher will nevertheless no longer be accessible.

4.3.7. Response times

The Publisher undertakes to respond to your request for access, rectification or objection, or to any other request for further information, within a reasonable period which shall not exceed 1 month from receipt of your request.

4.3.8. Complaint to the competent authority

If you consider that the Publisher is not complying with its obligations regarding your personal information, you may lodge a complaint or a request with the competent authority. In France, the competent authority is the CNIL, to which you may submit a request here.

4.4. Transfer of the data collected

4.4.1. Transfer to partners

The Publisher informs you that we use authorised service providers to facilitate the collection and processing of the data you have communicated to us. These service providers may be located outside the European Union and receive the data collected on the Site.

The Publisher has previously ensured that its service providers have implemented adequate safeguards and comply with strict conditions regarding the confidentiality, use and protection of data, for example through the European Commission’s standard contractual clauses or the EU-US data protection framework (EU-US Data Privacy Framework).

The User consents to the data collected being transmitted by the Publisher to its partners and processed by those partners in the context of third-party services, namely :

Shopify International Ltd : hosting of the shop, payment, instant messaging and automated agent ;
Klaviyo : sending of the newsletter ;
Alma and PayPal : payment ;
Meta Platforms and Google : audience measurement and advertising ;
Microsoft Clarity : audience measurement.

4.4.2. Transfer upon requisition or court order

The User also consents to the Publisher communicating the data collected to any person, upon requisition by a state authority or by court order.

4.4.3. Transfer in the context of a merger or acquisition

If the Publisher is involved in a merger, a sale of assets, a financing transaction, a liquidation or bankruptcy, or in an acquisition of all or part of its business by another company, the User consents to the data collected being transmitted by the Publisher to that company and to that company carrying out the personal data processing operations referred to in this privacy policy in place of the Publisher.

ARTICLE 5. TRACKERS/COOKIES POLICY

When you first connect to the Publisher’s Site, a banner at the bottom of your screen informs you that information relating to your browsing may be recorded in files called « cookies ». Our cookie policy helps you to better understand the measures we implement with regard to browsing on our Site. In particular, it informs you of all the cookies present on our Site and their purpose, and tells you how to configure them.

5.1. Use of trackers/cookies

The Publisher of this Site may place a cookie or other tracker on the hard drive of your device (computer, tablet, mobile, etc.) in order to ensure smooth and optimal browsing on our website.

« Cookies » (or connection tokens) are small text files of limited size which allow us to recognise your computer, tablet or mobile in order to personalise the services we offer you.

To help you better understand the information that cookies identify, you will find below a table listing the different types of cookies that may be used on the Publisher’s site, their name, their purpose and their retention period.

5.2. Purposes of the trackers

With the help of the information contained in the trackers and cookies used, the Publisher can analyse the traffic and use made of the Site and, where applicable, facilitate and improve browsing, carry out prospecting operations, compile commercial statistics or display targeted advertisements.

5.3. Trackers used

Partner	Purpose of processing	Partner’s terms
Shopify	Access to secure areas, management of browsing history	https://www.shopify.com/legal/cookies
Google (Analytics, Tag Manager)	Audience measurement, advertising	https://policies.google.com/technologies/cookies
Meta (Facebook, Instagram)	Advertising, conversion measurement	https://www.facebook.com/policies/cookies
Microsoft Clarity	Audience measurement, browsing analysis	https://privacy.microsoft.com/privacystatement
Klaviyo	Newsletter, tracking of sign-ups	https://www.klaviyo.com/legal/cookies

5.4. Configuring your cookie preferences

When you first connect to the Publisher’s Site, a banner briefly presenting information relating to the placement of cookies and similar technologies appears at the bottom of your screen. This banner allows you to choose which cookies you accept or refuse to have placed on your device. You will be deemed to have consented to the placement of cookies by clicking on the « Accept all » button. Conversely, you will be deemed to have refused the placement of non-essential cookies by clicking on « Continue without accepting ». If no choice is made, you will be deemed to have refused the placement of cookies. Your decision will be recorded for 12 months and may be changed at any time.

5.4.1 Cookies exempt from consent

In accordance with the recommendations of the Commission Nationale de l’Informatique et des Libertés (CNIL), certain cookies are exempt from the prior collection of your consent insofar as they are strictly necessary for the operation of the website or have the sole purpose of enabling or facilitating communication by electronic means. These include, in particular, session identifier cookies, authentication cookies, load-balancing session cookies and cookies for the personalisation of your interface. These cookies are fully subject to this policy insofar as they are issued and managed by the Publisher.

5.4.2 Cookies requiring the prior collection of your consent

This requirement applies to cookies issued by third parties which are classed as « persistent » insofar as they remain on your device until they are deleted or reach their expiry date.

As such cookies are issued by third parties, their use and placement are subject to their own privacy policies. This family of cookies includes audience measurement cookies, advertising cookies and social network sharing cookies (such as Facebook , Twitter, Youtube and Instagram).

Audience measurement cookies compile statistics on the traffic and use of the various elements of the Site (such as the content/pages you have visited). These data contribute to improving the ergonomics of the Publisher’s Site.

5.5. Maximum retention period of trackers

Trackers are intended to be stored on the User’s computer for a period of up to 12 months. These data are stored under secure conditions, using current technical means, in compliance with the provisions of the General Data Protection Regulation and the national legislation in force.

5.6. Objection to the use of trackers

5.6.1. Option to object to the use of trackers

You may accept or refuse the placement of cookies at any time.

The User may delete or disable the use of trackers whenever they wish by changing their browser settings. It is possible to browse the Site without trackers. Certain ancillary functions of the Site may nevertheless not work if the User has disabled the use of trackers, such as form autocompletion or browsing indicators.

5.6.2. Settings

For further information on cookie management tools, you may consult here the dedicated page on the CNIL website.

5.6.2.1. Browser settings

Each Internet browser offers its own cookie management settings. The User may configure their browser software so that cookies are rejected, either systematically or according to their issuer. The User may also configure their browser software so that they are asked to accept or refuse cookies on a case-by-case basis, before a cookie can be stored on their device.

For the management of cookies and the User’s choices, each browser is configured differently. This is described in the browser’s help menu, which will explain how to change your cookie preferences:

ARTICLE 6. INTELLECTUAL PROPERTY

6.1. Legal protection of the Site Contents

The Site Contents may be protected by copyright and database law. Any representation, reproduction, translation, adaptation or transformation, in whole or in part, carried out unlawfully and without the consent of the Publisher or its successors or assigns constitutes an infringement of Books I and III of the French Intellectual Property Code and may give rise to legal proceedings for infringement

6.2. Contractual protection of the Site Contents

The User contractually undertakes towards the Publisher not to use, reproduce or represent, in any manner whatsoever, the Site Contents, whether or not protected by an intellectual property right, for any purpose other than their reading by a robot or a browser. This prohibition does not apply to indexing robots whose sole purpose is to scan the content of the Site for indexing purposes.

ARTICLE 7. FINAL PROVISIONS

7.1. Amendments

This Privacy Policy may be amended at any time by the Publisher. The terms applicable to the User are those in force at the time of their connection to the Site. Any substantial amendment to this privacy policy will be notified upon the User’s first connection following its entry into force. This new privacy policy must then be accepted anew.

7.2. Severability

The nullity of any clause of this contract shall not entail the nullity of the other clauses of the contract or of the contract as a whole, which shall retain their full effect and scope. In such a case, the parties shall, as far as possible, replace the annulled provision with a valid provision corresponding to the spirit and purpose of these terms.

7.3. No waiver

The failure of the Publisher to exercise the rights granted to it hereunder shall in no case be interpreted as a waiver of the right to assert those rights.

7.4. Languages

These terms are offered in French.

7.5. Unfair terms

The provisions of these terms apply subject to compliance with the mandatory provisions of the French Consumer Code concerning unfair terms in contracts concluded between a professional and a consumer.

ARTICLE 8. DISPUTES

8.1. Applicable law

This Privacy Policy is governed by French law and by European regulations, in particular the European General Data Protection Regulation.

8.2. Disputes

Pursuant to Ordinance No. 2015-1033 of 20 August 2015, any dispute that may arise in connection with the performance of these general terms and for which no amicable solution has been found beforehand between the parties must be submitted.

Since 1 January 2016, mediation has been mandatory for all. Thus, any professional selling to private individuals is required to communicate the contact details of a competent Mediator in the event of a dispute, regardless of whether they sell at a distance or in a physical shop (Source: FEVAD).

Médiation de la Consommation et Patrimoine (MCP Médiation) / www.mcpmediation.org