Privacy Policy

TYNEGO SAS (Treelys brand) attaches paramount importance to the protection of your personal data. This Privacy Policy describes how we collect, use, store, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the amended French Data Protection Act of January 6, 1978.

1. Data Controller

The data controller is:
TYNEGO SAS – Treelys brand
66 Avenue des Champs-Élysées, 75008 Paris, France
Email: contact@treelys.com

2. Data Collected

2.1 Data you provide us directly

• First name and last name
• Email address
• Shipping and billing postal address
• Phone number (if provided)
• Payment information (processed directly by our secure payment providers)
• Content of your messages when you contact us

2.2 Automatically collected data

• IP address
• Browsing data (pages visited, visit duration, clicks)
• Data about the device used (browser type, operating system)
• Cookies and similar tracking technologies

3. Purposes and Legal Bases of Processing

3.1 Contract performance

• Processing and tracking of your orders
• Management of deliveries and returns
• After-sales service and complaint management
• Creation and management of your customer account (if applicable)

3.2 Legitimate interest

• Fraud prevention and transaction security
• Improvement of our site and services
• Analysis of browsing behavior (via Google Analytics/GA4, Hotjar/Microsoft Clarity)

3.3 Consent

• Sending our newsletter and commercial communications (Klaviyo, Mailchimp)
• Use of advertising and tracking cookies (Meta Pixel, TikTok Pixel, Google Ads/Tag Manager)
• Personalization of your online experience

3.4 Legal obligation

• Retention of accounting and tax data
• Responding to requests from competent authorities

4. Recipients of the Data

Your data may be transmitted to the following third parties in the course of our activity:

• Shopify Inc. – e-commerce platform and payment processing (Shop Pay)
• Google LLC – Google Analytics/GA4, Google Ads, Tag Manager (analytics and advertising)
• Meta Platforms Ireland Ltd – Meta Pixel (Facebook/Instagram targeted advertising)
• TikTok Technology Ltd – TikTok Pixel (TikTok targeted advertising)
• Klaviyo Inc. – management of marketing emails
• Mailchimp (Intuit Inc.) – management of marketing emails
• Hotjar Ltd / Microsoft Corporation – user behavior analysis (heatmaps)
• Logistics and transport providers – for the delivery of your orders
• Payment providers – for securing financial transactions

Some of these providers are established outside the European Union (notably in the United States). Data transfers outside the EU are governed by appropriate safeguards (standard contractual clauses of the European Commission, EU-U.S. Data Privacy Framework, or equivalent mechanisms).

5. Data Retention Period

• Customer data (orders): 5 years from the order (legal accounting obligations)
• Customer account data: until account deletion, then 3 years
• Commercial prospecting data (newsletter): 3 years from the last contact
• Browsing data and cookies: maximum 13 months

6. Your Rights

In accordance with the GDPR, you have the following rights:

• Right of access: to obtain a copy of your personal data
• Right to rectification: to correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): to request the deletion of your data
• Right to restriction of processing: to restrict the use of your data
• Right to data portability: to receive your data in a structured format
• Right to object: to object to the processing of your data for legitimate reasons
• Right to withdraw your consent at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at: contact@treelys.com
We will respond to your request within 30 days.
You also have the right to lodge a complaint with the CNIL: www.cnil.fr

7. Data Security

TYNEGO SAS implements all appropriate technical and organizational measures to ensure the security of your personal data, including: data encryption, restricted access, HTTPS protocols, PCI DSS compliance for payment data.

8. Policy Modifications

TYNEGO SAS reserves the right to modify this Privacy Policy at any time. Any substantial modification will be notified to users by email or via a visible notice on the site.

Last updated: May 2025