Privacy Policy

1. Data controller

The controller responsible for personal data processed through Karioska is S2KA, 166 Rue du Ménil, 92600 Asnières-sur-Seine, France.

For any privacy-related request, you can contact us at hello@karioska.com.

2. Data we collect

Depending on how you use Karioska, we may collect identification and contact details, account information, billing and delivery addresses, order history, messages sent to customer service, technical security information and information necessary to process payments.

Karioska does not intentionally collect sensitive personal data through the standard storefront.

3. Account & authentication

Karioska uses passwordless authentication. When you create or access an account, your email address is used to send a temporary verification code.

A secure authentication cookie is used to keep you signed in for a limited period. Security information may also be processed to prevent automated or abusive authentication attempts.

4. Orders & customer service

Personal data necessary to process orders includes customer identity, contact information, billing and delivery details, purchased products, amounts paid and order history.

We also process information you provide through the Message Us form or other customer-service communications in order to answer questions, manage orders, returns and complaints.

5. Payments

Payments are processed through secure payment providers made available at checkout.

Karioska does not store complete card numbers on its own storefront servers. Payment providers process the payment information necessary to authorize, secure and complete the transaction.

6. Care Guide & MailPoet

Access to the private Care Guide requires a Karioska account.

When an authenticated customer accesses the Care Guide, the email address may be added to the dedicated MailPoet Care Guide access list in order to manage access-related records.

This technical Care Guide list is separate from marketing consent. Receiving newsletters or promotional communications requires the appropriate consent or other valid legal basis.

7. Purposes & legal bases

• To create and secure customer accounts: performance of the requested service and legitimate security interests.
• To process and deliver orders: performance of the sales contract.
• To process payments and prevent fraud: performance of the contract, legal obligations and legitimate security interests.
• To answer customer requests: performance of the contract or legitimate interest in providing customer service.
• To comply with accounting, tax and legal obligations: compliance with legal obligations.
• To send marketing communications where applicable: consent or another lawful basis permitted by applicable law.

8. Recipients & service providers

Personal data is accessible only where necessary to S2KA/Karioska and service providers involved in operating the website and fulfilling customer requests.

These providers may include WordPress and WooCommerce infrastructure, hosting and deployment providers, payment providers, MailPoet, email-delivery services, logistics carriers and professional advisers where necessary.

Delivery information is shared with the carrier responsible for transporting your order.

9. International transfers

Some service providers or logistics partners may process personal data outside the European Economic Area.

Where required, such transfers must rely on an appropriate legal mechanism under applicable data-protection law, such as an adequacy decision or standard contractual clauses.

10. Data retention

Personal data is retained only for as long as necessary for the purpose for which it was collected and to comply with applicable legal, accounting, tax, security and dispute-management obligations.

Account information is generally retained while the account remains active and for an appropriate period afterwards where necessary.

Order and transaction records may be retained for the periods required by accounting and tax law.

Customer-service messages are retained only for the time reasonably necessary to manage the request and any related dispute.

11. Cookies & local storage

Karioska uses technical cookies and similar storage mechanisms necessary for essential functions such as authentication, shopping-cart continuity, checkout, security, language selection and market preferences.

These strictly necessary mechanisms may operate without consent where permitted by applicable law.

Any analytics, advertising or other non-essential traceters requiring consent must only be activated after the user has made the required choice.

12. Your rights

Depending on the circumstances and applicable law, you may have rights of access, rectification, erasure, restriction, objection and data portability, as well as the right to withdraw consent where processing is based on consent.

You may exercise your rights by contacting hello@karioska.com. We may request reasonable information to verify your identity before responding.

13. Complaints

If you believe your personal data has not been handled appropriately, please contact Karioska first so that we can investigate your request.

You also have the right to lodge a complaint with the French data-protection authority, the CNIL.

14. Security

Karioska implements reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration or disclosure.

No internet-based system can provide an absolute guarantee of security.

15. Updates to this policy

This Privacy Policy may be updated to reflect changes to Karioska services, providers or legal requirements.

The current version and its update date are published on this page.