Privacy Policy

This Privacy Policy (the “Policy”) describes how PARADIGME SASU, a company incorporated under French law and headquartered in Paris, France (“PARADIGME”, the “Company”, “we”, “our”, or “us”), collects, uses, stores, discloses, and otherwise processes personal data in connection with the use of the website https://paradigme.co (the “Website”), as well as any related services, applications, or communications operated or provided by PARADIGME.

At PARADIGME, discretion, precision, and responsibility are integral to the way we design, operate, and communicate. Personal data is handled with the same rigor, restraint, and care that guide our creative direction, operational standards, and long-term vision.

This Policy is established in accordance with applicable French and European data protection laws, including Regulation (EU) 2016/679 (the General Data Protection Regulation – GDPR), and reflects our commitment to lawful, transparent, and proportionate data processing.

Effective Date: 14 December 2025

For the purposes of this Policy, personal data refers to any information relating to an identified or identifiable natural person. A person may be identified directly or indirectly, in particular by reference to identifiers such as a name, identification number, location data, online identifier, or elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

Depending on the nature of your interaction with the Website or our services, PARADIGME may collect personal data that you choose to provide voluntarily.

This may include information necessary to create or manage a customer relationship, such as your name, email address, telephone number, internal account identifiers, and records of correspondence with our customer service teams.

When placing an order, additional information may be collected, including billing and shipping addresses, order details, purchase history, and delivery-related data. Payment-related information is processed exclusively by certified and secure third-party payment service providers and is not stored by PARADIGME.

Personal data may also be collected in connection with customer service or after-sales requests, including inquiries, returns, exchanges, or repair-related communications, insofar as such information is required to process and respond to your request.

Where optional information is requested, its provision remains entirely voluntary.

When you access or browse the Website, certain technical and usage-related information may be collected automatically. This may include your IP address, approximate geographic location, device identifiers, browser type, operating system, language preferences, pages viewed, navigation paths, interaction data, log files, timestamps, referral URLs, and information collected through cookies or similar technologies.

Such data is collected to ensure the security, integrity, and proper functioning of the Website, as well as to analyze and improve its performance and usability.

Personal data may be collected through direct submission via the Website, including contact forms, checkout processes, and account creation; through email or other direct communications initiated by you; through automated technologies such as cookies, pixels, and server logs; and through authorized service providers acting on behalf of PARADIGME and under its instructions.

PARADIGME processes personal data solely for explicit, legitimate, and proportionate purposes. These purposes include managing customer accounts and relationships, processing orders, payments, deliveries, returns, and exchanges, providing customer service and after-sales assistance, ensuring Website security and preventing fraud or misuse, improving services and user experience, conducting internal analytics and performance assessments, sending informational or promotional communications where consent has been provided, and complying with applicable legal, regulatory, and contractual obligations.

Personal data is never processed for purposes incompatible with those described herein.

Personal data is processed in accordance with the GDPR on the basis of contractual necessity, compliance with legal obligations, legitimate interests pursued by PARADIGME—such as security, fraud prevention, and service optimization—or your consent, where required, particularly in relation to marketing or advertising technologies.

Where processing is based on consent, such consent may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

PARADIGME does not sell, rent, or otherwise commercialize personal data.

Personal data may be disclosed to a limited number of carefully selected third-party service providers strictly for the purposes described in this Policy. These may include providers of website hosting and e-commerce infrastructure, secure payment processing and fraud prevention services, logistics and delivery services, analytics and performance measurement tools, and customer communication or relationship management solutions.

All such service providers are contractually bound to process personal data solely on the instructions of PARADIGME and to implement appropriate technical and organizational safeguards in accordance with applicable data protection laws.

PARADIGME may use data-driven technologies for analytics, advertising measurement, and audience engagement, including through platforms such as Meta and TikTok.

Such processing is carried out exclusively to measure campaign performance, improve the relevance and coherence of communications, and enhance the overall user experience offered through the Website.

PARADIGME does not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals within the meaning of Article 22 of the GDPR. No automated processing is used to make decisions affecting an individual’s legal rights, contractual position, access to services, or financial circumstances.

Where required, advertising-related processing is conducted only after valid user consent has been obtained and always with appropriate safeguards and meaningful human oversight.

In the context of its operations, personal data may be transferred outside the European Union. In such cases, PARADIGME ensures that appropriate safeguards are implemented, including the use of Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

Personal data is retained only for the duration necessary to fulfill the purposes for which it was collected. Contractual and transactional data is retained in accordance with applicable legal and accounting obligations. Customer service data is retained for as long as required to manage the relationship. Marketing-related data is retained until consent is withdrawn.

Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymized.

PARADIGME implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures include access controls, encryption protocols, internal governance policies, and regular security assessments.

While no system can guarantee absolute security, PARADIGME maintains a level of protection consistent with industry best practices.

In accordance with applicable data protection laws, you may exercise rights relating to your personal data, including the right of access, rectification, erasure, restriction of processing, objection, data portability, and withdrawal of consent. You also have the right to lodge a complaint with a competent supervisory authority.

Requests may be addressed to info@paradigme.co. For security purposes, identity verification may be required.

PARADIGME reserves the right to amend or update this Privacy Policy to reflect legal, technical, or operational developments. Any material changes will be communicated through the Website or by other appropriate means.