Privacy Policy

Last updated: September 2025

1. Data Controller

Shopping by Night ("we", "our") operates the website shoppingbynight.com. For privacy-related questions, contact us at: hello@shoppingbynight.com.

Director: Suanyel Jiminian — Director & Product Owner

2. Data We Collect

We collect the following types of data:

• Browsing data: IP address, browser type, pages visited, session duration (via analytics cookies with your consent).
• Contact data: If you contact us by email, we store your email address and message content.
• Cookie preferences: We store your cookie consent in your browser (localStorage).

3. Purpose of Processing

• Improve user experience and site performance.
• Analyze traffic and usage patterns (with consent).
• Manage contact requests.
• Comply with legal obligations.

4. Legal Basis (Art. 6 GDPR)

• Consent: Non-essential and analytics cookies.
• Legitimate interest: Site security and fraud prevention.
• Contractual performance: Response to your requests.

5. Cookies

We use first-party and third-party cookies. Your preferences can be managed in our Cookie Policy. Strictly necessary cookies do not require consent.

CNIL Compliance: We respect CNIL recommendations regarding cookies, including the requirement for prior consent for non-essential cookies and the ability to withdraw your consent at any time.

6. Data Transfers

We do not sell your personal data. Data may be shared with:

• Google Analytics: Traffic analysis (with consent).
• Affiliate networks: Amazon, Awin, CJ, Rakuten (click data, not personal).
• Hosting provider: OVH (site hosting).

7. Your Rights (Art. 15-22 GDPR)

• Access: Know what data we hold about you.
• Rectification: Correct inaccurate data.
• Erasure: Delete your data ("right to be forgotten").
• Portability: Receive your data in a structured format.
• Objection: Object to processing.
• Restriction: Restrict processing in certain cases.

To exercise these rights, send an email to: hello@shoppingbynight.com. Response within 30 days.

Complaints: You have the right to lodge a complaint with the CNIL (www.cnil.fr) or your local data protection authority.

8. Security

We implement technical and organizational measures to protect your data: SSL/TLS encryption, restricted access, regular backups.

9. International Transfers

Some third parties (Google, Amazon) may transfer data outside the EEA. In such cases, appropriate safeguards apply (standard contractual clauses).

10. Retention Periods

• Browsing data: maximum 13 months (CNIL recommendation).
• Contact data: 3 years after last contact.
• Cookie preferences: maximum 13 months.

11. Changes

We may update this policy. The last revision date is indicated at the top of the page.