Privacy Policy

Last updated: 31 October 2026

This policy explains how your personal data is processed when you use the website loovraofficial.com ("LOOVRA Paris"), in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978 (Data Protection Act).

1. Data controller

TRTS CORP, sole trader (entrepreneur individuel, EI), LOOVRA Paris
231 rue Saint-Honoré, 75001 Paris, France
SIREN: 920 128 691
Contact: contact@loovraofficial.com

2. Data collected

• Identity and contact details: title, last name, first name, email address, postal address, phone number.
• Customer account: login and password (stored encrypted).
• Orders: order number, products, amounts, history, returns and complaints.
• Exchanges with customer service.
• Browsing: IP address, pages visited and data from cookies, according to your choices (see Article 7).

Card details are entered and processed directly by PayPal: we never have access to them.

3. Purposes and legal bases

• Processing, delivering and invoicing your orders, handling returns and guarantees: performance of the contract (Art. 6.1 b GDPR).
• Answering your requests and complaints: performance of the contract and legitimate interest (Art. 6.1 b and f GDPR).
• Meeting our accounting and tax obligations: legal obligation (Art. 6.1 c GDPR).
• Preventing fraud and securing the website: legitimate interest (Art. 6.1 f GDPR).
• Emailing you offers on products similar to those you bought: legitimate interest, unless you object (Article L34-5 of the French Postal and Electronic Communications Code). You can unsubscribe at any time using the link in each email.
• Measuring website audience and advertising performance: your consent (Art. 6.1 a GDPR and Article 82 of the French Data Protection Act).

4. Recipients

Your data is accessible only to TRTS CORP and, solely for the purposes described above, to:

• our logistics partner, based in Spain, which prepares and ships orders;
• the carrier GLS, which delivers parcels;
• PayPal, our payment provider;
• our hosting provider, o2switch (France);
• Google and Meta, only for the cookies you have accepted (see Article 7).

We never sell your data.

5. Transfers outside the European Union

Our logistics partner is located in the European Union. Google and Meta may transfer certain data to the United States. These transfers are covered by the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) and, where applicable, by standard contractual clauses (Art. 45 and 46 GDPR).

6. Retention periods

• Customer account: until it is deleted, or 3 years after your last activity.
• Order data: 5 years after the order (limitation period, Article 2224 of the French Civil Code).
• Invoices: 10 years (Article L123-22 of the French Commercial Code).
• Email offers: 3 years after your last purchase, or until you unsubscribe.
• Exchanges with customer service: 3 years after the last exchange.
• Cookies: 13 months maximum; your choice (acceptance or refusal) is kept for 6 months.

7. Cookies and trackers

Necessary cookies (no consent required): basket, account login, security, storing your cookie choices.

Cookies subject to your consent:

• Audience measurement: Google Analytics (Google Ireland Ltd / Google LLC), to understand how the website is used.
• Advertising: Google Ads (Google Ireland Ltd / Google LLC), to measure the effectiveness of our ads and show you relevant advertising.
• Advertising: Meta Pixel (Meta Platforms Ireland Ltd), to measure our Facebook and Instagram campaigns and show you relevant advertising.

These cookies are only set after you agree. On your first visit, the cookie banner lets you accept all, refuse all or choose by category. Refusing is as easy as accepting and does not prevent you from ordering. You can change your choice at any time from the website's cookie manager or by deleting cookies in your browser.

8. Your rights

You have the rights of access, rectification, erasure, restriction, objection (in particular to marketing, at any time) and portability of your data (Art. 15 to 22 GDPR). You can withdraw your consent at any time and set instructions for what happens to your data after your death (Article 85 of the French Data Protection Act).

To exercise these rights: contact@loovraofficial.com or by post to TRTS CORP, 231 rue Saint-Honoré, 75001 Paris, France. We reply within one month (Art. 12.3 GDPR). If there is reasonable doubt about your identity, we may ask for proof.

If you believe your rights are not respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr).

9. Security

The website is protected by an encrypted connection (HTTPS). Passwords are stored encrypted and access to data is limited to those who need it.

10. Changes

This policy may be updated. The date of the last update is shown at the top of this page.