Privacy policy
Last updated: October 5, 2025
Haven Services operates this online e-book store (the “Services”), powered by Shopify. This Policy describes how we collect, use, share, and protect your personal data when you browse our site, create an account, make a purchase, or interact with us.
By using the Services, you acknowledge that you have read and understood this Policy.
1. Data controller
Haven Services – EURL registered with the Paris Trade and Companies Register under SIREN 919 237 099
Address: 155 B Rue de la Convention, 75015 Paris, France
Email: saad.belghmaidi@havenservices.fr
Phone: +33 (0)6 27 50 55 76
2. Data we process
- Identity & contact: name, email, postal address, phone number.
- Account: login details, preferences.
- Order & payment: purchased products, order number, amount, payment method, status (card numbers are processed by payment providers, not by us).
- Support: messages, attachments.
- Technical & usage: IP address, device/browser type, pages viewed, cookies/trackers, logs.
3. Sources of data
- Directly from you (forms, orders, account creation).
- Automatically (cookies, pixels, server logs).
- Service providers (e.g., Shopify, email/SMS, analytics) acting on our behalf.
4. Purposes & legal bases (GDPR)
- To sell and deliver e-books (order management, downloads, customer account) – contract performance (Art. 6-1-b).
- Customer support & security (assistance, fraud prevention, site security) – legitimate interests (6-1-f) / legal obligations (6-1-c).
- Billing & accounting obligations – legal obligation (6-1-c).
- Marketing (emails/SMS with your consent, advertising personalization via cookies) – consent (6-1-a) / legitimate interests (6-1-f) where permitted.
- Service improvement & analytics – legitimate interests (6-1-f).
5. Cookies & similar technologies
We use cookies and trackers for:
- website and checkout functionality;
- audience measurement;
- (optional) advertising personalization.
You can manage your preferences through our consent banner (https://havenservices.fr/policies/#shopifyReshowConsentBanner) and your browser settings. Without consent, only strictly necessary cookies are placed.
6. Recipients & processors
We share data with service providers who help us operate the Services:
- Shopify (hosting, checkout, payments via integrated providers, security, analytics associated with Shopify).
- Email/SMS provider: Klaviyo (for transactional and, with your consent, marketing communications).
- Payment providers: Shopify Payments / Stripe / PayPal (handle your payment data).
- Hosting, security, backup, analytics: Squarespace.
These providers act according to our instructions and under GDPR-compliant data processing agreements.
7. Transfers outside the EU/EEA
Some processing activities may occur outside the EU (e.g., Shopify, email/SMS providers).
When this happens, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses or rely on adequacy decisions. Additional details are available upon request.
8. Data retention
We keep your data for as long as necessary for the intended purposes:
- Account/order data: for the duration of the relationship, then 10 years for legal/accounting obligations.
- Marketing data: until consent is withdrawn or 3 years after last contact.
- Technical logs: 13 months (or as required by law).
9. Your rights
Under applicable data protection laws (EU GDPR, UK GDPR, etc.), you have the right to:
access, rectify, erase, restrict processing, object, data portability, withdraw consent (where processing is based on consent), and post-mortem directives (France).
To exercise your rights, contact: saad.belghmaidi@havenservices.fr.
We may verify your identity and will respond within the legal timeframe.
You can also object to targeted advertising via the cookie banner and/or your browser settings. If you use Global Privacy Control (GPC), we will treat the signal as an opt-out request where required by local law.
10. Security
We implement reasonable technical and organizational measures to protect your data. No system is completely secure; please avoid using unencrypted channels to transmit sensitive information.
11. Data concerning minors
Our store is not intended for minors. We do not knowingly collect data from individuals who have not reached the legal age. Contact us if you wish to request deletion.
12. Third-party services & external links
Our website may contain links to third-party sites. We are not responsible for their privacy practices. Please review their policies before interacting with them.
13. Relationship with Shopify
Our store is hosted by Shopify. Shopify may process certain data to provide and improve its services (security, fraud prevention, aggregated analytics across merchants).
For more information about Shopify’s data practices or to exercise your rights directly with them, visit: https://privacy.shopify.com/.
14. Contact & complaints
For any questions or privacy-related requests:
Haven Services
155 B Rue de la Convention, 75015 Paris, France
Email: saad.belghmaidi@havenservices.fr
You may also contact the relevant supervisory authority (in France: CNIL – www.cnil.fr).
15. Updates
We may update this Policy for legal, technical, or operational reasons.
The current version is published with the update date above.
If substantial changes are made, we will notify you through appropriate means.