Personvernerklæring
Last updated: 8 August 2026
This policy explains what personal data we collect when you use ava-be.com or our app, why we collect it, how long we keep it, and what rights you can exercise.
Data controller
JOCHA, a French limited liability company (société à responsabilité limitée) with share capital of €1,000, 74 boulevard Périer, 13008 Marseille, France — Marseille Trade and Companies Register 908 692 767.
For any question about your data: hello@ava-be.com.
What we collect and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email address, postal address, phone number | Processing and delivering your order, keeping you informed, handling returns | Performance of the contract | 5 years from the order |
| Order and payment history | Accounting and tax obligations, handling disputes | Legal obligation | 10 years |
| Email address (newsletter sign-up) | Sending you our news and offers | Consent | 3 years after last contact, or until you unsubscribe |
| Phone number (if you sign up) | Sending you promotional text messages | Consent | 3 years after last contact, or until you text STOP |
| Customer account details | Letting you find your orders and wishlist | Performance of the contract | Until the account is deleted, then 3 years of inactivity |
| IP address, pages viewed, device and browser | Keeping the site secure, measuring audience, improving navigation | Legitimate interest or consent, depending on the tool | 13 months maximum |
| Push notification token (mobile app) | Sending you notifications if you have accepted them | Consent | Until you turn them off or uninstall the app |
We never store your card details. They are handled directly by our payment providers, which are PCI-DSS certified.
Who has access to your data
We do not sell your data. We share it only with the providers that allow us to operate, and only as far as their task requires:
- Shopify — store hosting, customer accounts, order emails
- Payment providers — secure processing of transactions
- UPS and DHL — delivering your orders
- Amphora Logistics — order fulfilment, returns portal and tracking
- Microsoft Clarity — audience measurement and navigation analysis
- Google — audience measurement and advertising
- Meta (Facebook, Instagram) — advertising and performance measurement
- TikTok — advertising and performance measurement
- OneSignal — mobile app notifications
- Judge.me — collecting and displaying customer reviews
- Trustpilot — store reviews
- Wishlist Power — managing your wishlist
- Moast — displaying community videos
- T-Lab — translating site content
Your data may also be disclosed to administrative or judicial authorities where the law requires it.
Transfers outside the European Union
Some of these providers are established outside the European Union, notably in the United States and Canada. These transfers are covered by the safeguards provided for by the GDPR: European Commission standard contractual clauses, or certification under the EU–US Data Privacy Framework.
Cookies and trackers
A cookie is a small file placed on your device when you visit. We use three kinds.
Necessary cookies make the site work: they remember your basket, your session, your language and your country. They cannot be turned off and do not require your consent.
Analytics cookies tell us which pages are viewed and where navigation gets stuck. They are placed by Microsoft Clarity and Google.
Advertising cookies let us show you our products on other sites and measure how our campaigns perform. They are placed by Meta, TikTok and Google.
The last two categories are only placed with your consent. You can give it, refuse it or withdraw it at any time from the cookie banner, or through your browser settings.
Your rights
Under the General Data Protection Regulation, you have the following rights over your personal data:
- Access — obtain a copy of the data we hold about you
- Rectification — correct inaccurate information
- Erasure — ask us to delete your data, subject to our legal retention obligations
- Objection — object to processing based on our legitimate interest, and to direct marketing at any time
- Restriction — ask us to temporarily freeze processing you are contesting
- Portability — receive your data in a machine-readable format
- Withdrawal of consent — at any time, without affecting what was done beforehand
To exercise these rights, write to hello@ava-be.com. We reply within one month. Proof of identity may be requested if we have serious doubts about who you are.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris — cnil.fr.
Security
We put in place appropriate technical and organisational measures to protect your data: encrypted connections, access restricted to those who need it, hosting on secure servers. As no system is infallible, we would inform you without delay of any breach likely to create a high risk to your rights.
Minors
Our products are intended for an adult audience. We do not knowingly collect data relating to anyone under sixteen. If you believe a minor has given us their data, write to us and we will delete it.
Changes
This policy may change, in particular if we add a new tool. The date of the last update appears at the top of this page. We will let you know of any substantial change by email or through a message on the site.
Contact
JOCHA — 74 boulevard Périer, 13008 Marseille, France
hello@ava-be.com