Privacy policy

Last updated: September 2026.

This page explains what data Ouvli collects when you visit ouvli.com or order Body Reset Cleanse, why we use it and what rights you have. In plain language.

It applies to all our customers in mainland France, Belgium and Switzerland. In France and Belgium, your data is protected by the GDPR. In Switzerland, the Federal Act on Data Protection (nLPD) applies. Whatever your country, we handle your data according to the same rules.

Who we are

Ouvli is the controller of your personal data. We decide how it is used and are responsible for it.

For any questions or to exercise your rights, there is one email address: support@ouvli.com. A real person will reply within 24 hours, Monday to Friday.

The data we collect

We collect only what we need to deliver your order, answer you and, with your consent, measure our advertising. This includes:

  • Identity: first and last name.
  • Contact: email address and, if you provide it, phone number (useful for the carrier).
  • Delivery: delivery address and billing address.
  • Order: products ordered, amount, date, order number and purchase history.
  • Payment: processed by the provider of the payment method you choose from those offered at checkout. Ouvli never sees or stores your bank card number.
  • Support correspondence: the content of the emails you send us, so that we can follow up on your case.
  • Browsing: pages viewed, device, browser, IP address and interactions with our advertising, through the cookies and pixels (Meta, Google) detailed below.

Why we use it

Each use has a specific legal basis, shown in brackets.

  • Process and deliver your order, send your confirmation and tracking number (performance of the contract).
  • Provide customer service, answer your questions, manage the 90 day money back guarantee and, for customers living in the European Union, the right of withdrawal (performance of the contract and legal obligation).
  • Send you our marketing emails, only if you have agreed (consent). You can unsubscribe at any time using the link at the bottom of each email.
  • Measure website traffic and the effectiveness of our advertising (consent, given through the cookie banner).
  • Prevent fraud and secure payments (legitimate interest).
  • Keep invoices and meet our accounting and tax obligations (legal obligation).

Who we share it with

Your data is never sold, rented or exchanged. We share it only with providers essential to running the store, and each receives only what it needs:

  • Shopify (Shopify International Limited, Ireland), which hosts the website and your order data.
  • The provider of your chosen payment method, from the payment methods offered at checkout.
  • Carriers, which receive your name, address and contact details to deliver your order.
  • Our email service provider, which sends order confirmations, dispatch notifications and, with your consent, our newsletter.
  • Advertising platforms (Meta, Google), which receive browsing data through their pixels when you accept cookies.

Some providers process data outside the European Union and Switzerland. These transfers are covered by safeguards provided for under the GDPR and the nLPD, such as standard contractual clauses. We may also disclose data to authorities if required by law.

Cookies and tracking technologies

A cookie is a small file placed on your device when you visit the website. We use 3 categories:

  • Necessary cookies: these enable the basket, checkout and website security to work. They do not require consent.
  • Analytics cookies: these tell us which pages are viewed and where our visitors come from.
  • Advertising cookies: Meta and Google pixels, which measure our campaigns and help us show you more relevant advertising.

Analytics and advertising cookies are placed only with your consent, given through the banner displayed on your first visit. You can change your mind at any time using the “Manage cookies” link at the bottom of the page. You can also block or delete cookies in your browser settings (the “Privacy” section in Chrome, Safari, Firefox or Edge).

How long we keep it

We keep your data only as long as necessary.

  • Order data and invoices: 10 years from the order date, as required by French accounting regulations.
  • Marketing consent: until you unsubscribe.
  • Cookies: a maximum of 13 months, after which we ask for your consent again.

Other data is deleted as soon as it is no longer needed.

Your rights

The GDPR and the nLPD give you real control over your data. You can request the following at any time:

  • Access: find out what data we hold about you and obtain a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: have your data deleted, except for data the law requires us to keep (invoices, for example).
  • Restriction: pause the use of your data while a dispute is being handled.
  • Portability: receive your data in a readable format so that you can transfer it elsewhere.
  • Objection: object to processing based on our legitimate interest, particularly any direct marketing.

To exercise any of these rights, email support@ouvli.com with your request and the email address used for your order. We reply within 1 month. If there is any doubt about your identity, we may ask you for information to verify it.

If you believe your rights have not been respected, you can lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés) at cnil.fr, or with the data protection authority in your country of residence. If you live in Switzerland, you can contact the PFPDT (Federal Data Protection and Information Commissioner).

Security

Your data is protected by appropriate technical and organisational measures. Exchanges with the website are encrypted (HTTPS), payments are processed by PCI DSS certified providers, and Ouvli does not store any bank card numbers. Only the people handling your order or responding to you have access to your data. If a data breach presents a risk to you, we will notify you within the time limits required by law.

Changes

This policy may change if we change providers or if regulations change. The date at the top of the page indicates the latest version. If there is a significant change, we will notify you by email or through a visible notice on the website.