Privacy Policy
Last updated: 2026-05-15. This policy describes how UNISHOP LLC (for US orders) and SAS VIRAGE (for EU orders), both trading as "Gigi France", collect, use and protect your personal data. It complies with GDPR (Regulation EU 2016/679) and, for US residents, includes CCPA-aware notices.
1. Data controller
US orders: UNISHOP LLC, 102 Gold Ave SW # 399, Albuquerque, NM 87102, USA (EIN 98-1752228, New Mexico registration no. 7380690).
EU orders: SAS VIRAGE, registered office 10 Rue Louis Vicat · 75015 Paris · France.
Data protection contact: privacy@gigifrance.com.
2. Information we collect
Identity (first and last name), contact details (email, phone, postal address), order information, technical data (cookies, IP address, browser).
Payment data (card number) is never collected or stored by Gigi — it is transmitted directly to Stripe (PCI-DSS Level 1).
3. Purposes and legal bases
Processing your order and performing the contract (basis: contract performance).
Replying to your inquiries via the contact form (basis: pre-contractual measure or legitimate interest).
Sending newsletter and marketing communications (basis: consent, revocable at any time).
Anonymized site analytics (basis: legitimate interest or consent depending on the tool).
Complying with legal obligations (accounting, fraud prevention).
4. Retention
Order data: 10 years (accounting obligations).
Prospect data: 3 years from last active contact.
Cookies: 6 months maximum (see Cookie Policy).
5. Recipients
Your data is never sold. It is accessible to the authorized Gigi team and to our processors: Stripe (payment), Sanity (CMS), our professional hosting provider (infrastructure), Resend (transactional emails), each bound by GDPR-compliant data processing agreements.
6. US residents (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect, to request deletion, to opt-out of the sale or sharing of personal information (we do not sell your data), and to non-discrimination.
To exercise these rights, contact privacy@gigifrance.com. We respond within 45 days.
7. Your rights (GDPR)
Access, rectification, erasure, objection, restriction of processing, and portability.
To exercise these rights, contact privacy@gigifrance.com. We respond within 30 days.
You may also lodge a complaint with the CNIL (cnil.fr) or with your local data protection authority.
8. Security
We use appropriate technical and organizational measures: TLS encryption, restricted data access, regular backups, admin access logging.
9. Changes
This policy may be updated to reflect legal or technical changes. The current update date is at the top. Material changes are notified by email to active customers.
Last updated: