Privacy policy
This is a translation provided for convenience. In case of any discrepancy, the French version prevails.
CANI GOURMAND takes the protection of your personal data very seriously. This policy explains what data we collect on www.cani-ninja.com, why, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
1. Data controller
The data controller is CANI GOURMAND, SAS with a share capital of €500, RCS Périgueux 883 065 914, 3 Impasse de l'Artisanat, ZI La Borie, 24110 Saint-Astier (France), which operates the CANI NINJA brand.
For any question about your data: contact@cani-ninja.com or by post to the address above. CANI GOURMAND has not appointed a Data Protection Officer (DPO), as it is not required to do so.
2. Data collected, purposes and retention periods
We only collect the data needed for each purpose. Mandatory fields are marked with an asterisk; without them, we cannot process your request.
Purpose |
Data |
Legal basis (Art. 6 GDPR) |
Retention period |
|---|---|---|---|
Processing and delivering your orders, handling returns and withdrawals |
Surname, first name, addresses, email, phone, order contents |
Performance of the contract |
Duration of the business relationship, then 5 years as proof of the contract |
Invoicing and accounting |
Invoices, amounts, payment method used |
Legal obligation |
10 years (Article L123-22 of the French Commercial Code) |
Payment and fraud prevention |
Transaction data (card numbers are processed by the payment provider and never stored by us) |
Performance of the contract and legitimate interest |
For the duration of the transaction, then 13 months for disputes |
Customer account |
Login details, order history |
Performance of the contract |
Until the account is deleted, or 3 years after the last login |
Customer service and legal guarantees |
Correspondence, photos sent, order number |
Performance of the contract and legal obligation |
Duration of the legal guarantees (2 years), extended in the event of a dispute |
CANI NINJA newsletter and offers |
Email, first name, purchase history |
Consent (prospects); legitimate interest for similar products (customers) |
3 years after the last contact or purchase, or until you unsubscribe |
Birthday surprise (sending an offer on your birthday) |
Date of birth (optional, entered when subscribing to the newsletter), email, first name |
Consent |
Until you unsubscribe from the newsletter or ask us to delete it |
Push notifications |
Technical browser identifier |
Consent |
Until permission is withdrawn in the browser |
Customer reviews |
First name, initial of surname, review, rating, photos |
Consent |
For as long as the review is published (5 years) |
Statistics and advertising (cookies) |
Browsing data, cookie identifiers |
Consent |
13 months maximum; your choice is stored for 6 months |
You can unsubscribe from the newsletter at any time using the link in every email. Your date of birth is optional: you can ask us to delete it at any time by writing to contact@cani-ninja.com.
3. Recipients of the data
Your data is intended for the CANI GOURMAND team. It is also shared, strictly as needed, with the following service providers acting on our behalf. We never sell your data.
Provider |
Role |
Location |
|---|---|---|
Shopify International Ltd. |
Hosting of the website and store |
Ireland (with possible transfers, see section 4) |
Shopify Payments |
Online payment |
Ireland (with possible transfers, see section 4) |
Chronopost, GLS |
Parcel delivery |
European Union |
Judge.me |
Collecting and displaying reviews |
Servers in the United States |
PushOwl |
Push notifications |
Servers in the United States |
Affilae |
Tracking sales through our affiliate partners |
France |
Shopify Email / Brevo |
Sending the newsletter |
Ireland (with possible transfers, see section 4) / Servers in the United States |
Chartered accountant |
Accounting |
France |
Pennylane |
Accounting |
AWS servers in Ireland |
Your data may also be disclosed to the authorities where required by law.
4. Transfers outside the European Union
Some providers, including Shopify, may process data in Canada or the United States. These transfers are covered by an adequacy decision of the European Commission (Canada; United States for companies certified under the Data Privacy Framework) or, failing that, by the European Commission's standard contractual clauses. You can obtain a copy by writing to us.
5. Cookies and trackers
A cookie is a small file stored on your device when you visit a website. When you arrive on the Site, a banner lets you accept, refuse or customise non-essential cookies, just as easily in all three cases. Refusing does not prevent you from using the Site or placing an order.
Category |
Examples |
Consent required |
|---|---|---|
Strictly necessary |
Cart, currency, payment security, remembering your cookie choice (Shopify) |
No |
Preferences |
Remembering language and region |
Yes |
Statistics |
Shopify audience measurement |
Yes |
Marketing |
Affiliate sales tracking (Affilae), Meta, Google |
Yes |
Cookies last a maximum of 13 months. Your choice is stored for 6 months, after which the banner is shown again. You can change your choices at any time using the "Cookie preferences" link at the bottom of every page, or in your browser settings.
6. Your rights
You have the following rights over your data:
- access and rectification;
- erasure, unless the law requires us to keep it (invoices, for example);
- restriction of processing;
- objection, in particular to direct marketing, without having to give a reason;
- portability of the data you have provided to us;
- withdrawal of your consent at any time, without affecting processing already carried out;
- setting instructions regarding your data after your death.
To exercise these rights, write to contact@cani-ninja.com or to CANI GOURMAND, 3 Impasse de l'Artisanat, ZI La Borie, 24110 Saint-Astier, France. We reply within one month. If we have reasonable doubts about your identity, we may ask you for proof of identity.
If you believe your rights have not been respected, you can lodge a complaint with the CNIL (the French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at www.cnil.fr.
You can also register free of charge on the French telephone marketing opt-out list Bloctel.
7. Security, minors and changes
Security: the Site is secured (HTTPS protocol) and access to your data is limited to the people who need it. In the event of a data breach that poses a risk to you, we will inform the CNIL and, where necessary, the people concerned.
Minors: the Site is intended for adults. Minors under 15 may not subscribe to the newsletter without the consent of a holder of parental authority.
Changes: this policy may change. The version in force is the one published on the Site. In the event of a significant change, we will inform you by email or by a message on the Site.
Last updated: 14/10/2026.