Privacy policy
Last updated: 20 September 2026
This policy describes how Pixel Production processes the personal data of visitors and customers of polarstar.fr, in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No 78-17 of 6 January 1978 as amended.
1. Data controller
Pixel Production, SASU with share capital of €1,000, 92 rue Saint-Honoré, 75001 Paris, France. SIREN 883 592 545. Represented by Nicolas Queuche, President.
Contact for any question about personal data: hello@getpolarstar.com, or by post to the address above.
Pixel Production has not appointed a data protection officer, as this is not mandatory given its activities.
2. Processing operations, purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Order management, delivery and after-sales service | Identity, billing and delivery addresses, email, phone, order details | Performance of the contract (Art. 6.1.b) | 3 years from the end of the commercial relationship, then archiving |
| Accounting and tax obligations (invoices) | Identity, address, amounts | Legal obligation (Art. 6.1.c) | 10 years (Art. L. 123-22 French Commercial Code) |
| Customer account | Identity, email, order history | Performance of the contract | Until account deletion, or 3 years of inactivity |
| Responding to contact requests | Identity, email, message content | Legitimate interest in responding (Art. 6.1.f) | 3 years from last contact |
| Newsletter and marketing communications | Email, first name, interests inferred from purchases | Consent (Art. 6.1.a); legitimate interest for existing customers on similar products | 3 years from last contact, or until unsubscribe |
| Prize draws | Identity, email | Consent | Duration of the draw, then 1 year |
| Audience measurement and statistics | Browsing identifiers, pages viewed, referral source | Consent (non-exempt trackers) | Trackers 13 months maximum; data 25 months maximum |
| Targeted advertising and campaign measurement | Advertising identifiers, browsing and purchase events | Consent | Trackers 13 months maximum |
| Customer reviews | First name, email, review content | Legitimate interest, then consent for the invitation | 3 years |
| Payment fraud prevention | Transaction data, IP address | Legitimate interest | As per payment provider rules |
| Handling of data subject requests | Identity, proof where applicable | Legal obligation | 1 year (3 years if ID document provided) |
Fields marked as mandatory in our forms are necessary for the stated purpose; without them, the order or request cannot be processed. Other fields are optional.
3. Recipients and processors
Data is neither sold nor rented. It is accessible to authorised staff of Pixel Production and shared with the following providers, acting as processors or joint controllers as the case may be:
| Provider | Role | Country of establishment |
|---|---|---|
| Shopify International Ltd. | Store hosting and order processing | Ireland (Canadian group) |
| Shopify Payments / Stripe, PayPal | Payment processing | Ireland, Luxembourg, United States |
| Carriers and logistics providers | Order delivery | European Union |
| Google Ireland Ltd. (Analytics, Ads, Tag Manager) | Audience measurement and advertising | Ireland / United States |
| Meta Platforms Ireland Ltd. (Facebook and Instagram pixel) | Advertising and conversion measurement | Ireland / United States |
| TikTok Technology Ltd. | Advertising and conversion measurement | Ireland / outside the EU |
| Hotjar Ltd. | Browsing behaviour analysis | Malta |
| Microsoft Ireland (Clarity) | Browsing behaviour analysis | Ireland / United States |
| Taboola | Advertising | Israel / European Union |
| Trustpilot A/S | Collection and publication of customer reviews | Denmark |
| Consentmo | Collection and storage of tracker choices | European Union |
| Google Workspace | Email and office tools | Ireland / United States |
Data may also be disclosed to administrative or judicial authorities where required by law.
4. Transfers outside the European Union
Some of the providers above belong to groups established in the United States and may transfer data there. Such transfers are governed:
- either by the European Commission adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, for certified providers;
- or by the standard contractual clauses adopted by the European Commission, together with supplementary measures.
A copy of the applicable safeguards can be obtained on request at hello@getpolarstar.com.
5. Trackers and cookies
On your first visit, a banner lets you accept, refuse or configure trackers, purpose by purpose. No tracker that is not strictly necessary is placed before you make your choice. Refusing is as easy as accepting.
- Strictly necessary trackers (placed without consent, as essential to operation): basket, session, language and currency preferences, security, storage of your tracker choice.
- Audience measurement: Google Analytics.
- Behavioural analysis: Hotjar, Microsoft Clarity.
- Advertising and conversion measurement: Google Ads, Meta pixel, TikTok, Taboola.
Trackers subject to consent have a lifetime of no more than thirteen (13) months, after which consent is requested again. You can change or withdraw your choices at any time by reopening the cookie management panel from the site footer.
6. Your rights
Under the conditions set out in the GDPR, you have the following rights:
- Right of access (Art. 15).
- Right to rectification (Art. 16).
- Right to erasure (Art. 17).
- Right to restriction of processing (Art. 18).
- Right to data portability (Art. 20).
- Right to object at any time to processing based on legitimate interest, and without condition for direct marketing (Art. 21).
- Right to withdraw consent at any time, without affecting the lawfulness of prior processing.
- Right to give directions on what happens to your data after your death.
To exercise these rights: hello@getpolarstar.com or by post to Pixel Production, 92 rue Saint-Honoré, 75001 Paris, France. We respond within one month, extendable by two months for complex requests. Proof of identity will be requested only where there is reasonable doubt as to your identity.
If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the French data protection authority, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at www.cnil.fr. You may also contact the supervisory authority of your own country of residence.
7. Security
Pixel Production implements appropriate technical and organisational measures: encryption in transit (HTTPS), access limited to authorised staff, authentication of administration accounts, use of providers meeting industry standards, and regular backups. Bank card data never passes through our servers and is handled by PCI-DSS certified providers.
8. Automated decision-making
No decision producing legal effects concerning you is taken solely on the basis of automated processing, apart from fraud detection mechanisms operated by our payment providers.
9. Minors
The site is not directed at children under 15 and does not knowingly collect their data. Should such data reach us, it will be deleted upon notification to hello@getpolarstar.com.
10. Changes
This policy may be updated. The date of the latest update appears at the top of the page. In the event of a substantial change, data subjects are informed by appropriate means.