Privacy & Cookie Policy

The data controller responsible for your personal data is:
Shenvo S.à r.l. — Luxembourg, Grand Duchy of Luxembourg
Email: contact@shenvo.com

Shenvo is committed to protecting your personal data in accordance with the GDPR (Regulation EU 2016/679).

Shenvo collects the following categories of data:

• Identification data: name, first name, email address, phone number
• Delivery and billing data: full postal address
• Payment data: processed securely via Stripe/PayPal
• Browsing data: IP address, browser type, pages visited
• Account data: order history, preferences, wishlist

Shenvo processes your personal data for the following purposes:

• Order processing and delivery management
• Customer account management and commercial relationship
• Payment processing and fraud prevention
• Sending order confirmations and notifications
• Website improvement and experience personalisation
• Sending marketing communications (with your consent)

The processing of your data is based on the following legal grounds (GDPR Art. 6):

• Contract performance (Art. 6.1.b): order processing, delivery, payment
• Legal obligation (Art. 6.1.c): invoicing, accounting
• Legitimate interest (Art. 6.1.f): fraud prevention, website security
• Consent (Art. 6.1.a): newsletter, non-essential cookies

Shenvo retains your personal data for the following periods:

• Customer account data: duration of the commercial relationship + 3 years
• Order and invoice data: 10 years (legal accounting obligation)
• Browsing data and cookies: maximum 13 months
• Marketing data (newsletter): until unsubscription
• Fraud data: 5 years

After these periods, your data is deleted or anonymised.

Shenvo may share your personal data with the following third parties:

• Payment providers: Stripe, PayPal
• Carriers: for the delivery of your orders
• Hosting provider: OVH SAS (secure data storage)
• Analytics tools: for traffic analysis (anonymised data)

Shenvo never sells your personal data to third parties.

In accordance with the GDPR, you have the following rights:

• Right of access (Art. 15)
• Right of rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction (Art. 18)
• Right to portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent at any time

To exercise these rights: contact@shenvo.com (response within 30 days).
You can also lodge a complaint with the CNPD: cnpd.public.lu

A cookie is a small text file stored on your device. Shenvo uses the following categories:

🔒 Essential cookies (always active)
Necessary for the website: cart, session, security, language.

📊 Analytics cookies (with consent)
Audience analysis and site improvement. Anonymised data.

📣 Marketing cookies (with consent)
Personalised advertising and campaign measurement.

Manage your preferences via the cookie banner. Maximum storage: 13 months.

Shenvo implements technical and organisational measures to protect your personal data:

• SSL/TLS encryption of data in transit
• Secure storage at OVH
• Internal access controls
• Regular security audits

Payment transactions are processed by Stripe and PayPal, certified PCI-DSS Level 1.

For any questions relating to the protection of your personal data or to exercise your rights, contact us:

Email: contact@shenvo.com
Subject: [Data Protection]

We respond within a maximum of 30 days.

If you believe your rights are not being respected, you can lodge a complaint with the CNPD:
cnpd.public.lu