Privacy Policy

SUNAYA SARL ("SUNAYA", "we") attaches the highest importance to the protection of personal data of users of its website sunaya-home.fr. This policy describes how we collect, use and protect your data, in accordance with Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act.

1. Data controller

The data controller is:
SUNAYA SARL, 149 avenue du Maine, 75014 Paris, France
Contact : contact@sunaya-home.fr

2. Data collected

We collect the following categories of data:

Identity: last name, first name;
Contact details: shipping and billing postal address, email, phone number;
Order data: products ordered, purchase history, invoices;
Payment data: processed exclusively by our providers (Stripe, Alma). SUNAYA never stores bank card numbers;
Navigation data: IP address, browser type, pages visited, via cookies (see section 7).

3. Purposes and legal bases

Performance of the contract (Art. 6(1)(b) GDPR): order processing, delivery, customer service;
Legal obligations (Art. 6(1)(c)): invoicing, accounting, retention for tax purposes;
Legitimate interest (Art. 6(1)(f)): security, fraud prevention, site improvement;
Consent (Art. 6(1)(a)): non-essential and marketing cookies.

4. Data recipients

Your data may be accessed by:

SUNAYA and its employees;
Our service providers: hosting provider (OVH), payment providers (Stripe, Alma), carrier and logistics suppliers, acting as processors or independent controllers for their specific mission;
Authorities, upon legal request.

We never sell your data to third parties.

5. Transfers outside the EU

The website is hosted by OVH in France (European Union). Payment providers (Stripe, Alma) may process certain data outside the EU; in such cases, appropriate safeguards (standard contractual clauses, adequacy decisions) are applied in accordance with the GDPR.

6. Retention period

Inactive customer account: 3 years after the last activity;
Order data and invoices: 10 years (accounting and tax obligation);
Payment data: not retained by SUNAYA (processed by Stripe and Alma);
Cookies: 13 months maximum, or until consent is withdrawn.

7. Cookies

The website uses a runtime cookie banner that appears on your first visit and allows you to accept, refuse or configure cookies. Strictly necessary cookies (cart, session) are placed without consent. Audience measurement and marketing cookies require your consent, collected via this banner.

8. Your rights

In accordance with the GDPR, you have the following rights:

Right of access to your data;
Right to rectification;
Right to erasure ("right to be forgotten");
Right to restriction of processing;
Right to object to processing;
Right to data portability;
Right to withdraw your consent at any time;
Right to give instructions on the fate of your data after your death.

To exercise these rights, write to us at contact@sunaya-home.fr with a copy of an identity document. We reply within one month, extendable by two months for complex requests.

You may file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.

Last updated: August 12, 2026