Privacy Policy

LAST UPDATED: May 25, 2026

Data Controller Information

The data controller responsible for processing your personal information is:

D&K PARTNERS S.A.S (operating as OEA PARIS)

• Legal form: Société par Actions Simplifiée (SAS)
• SIRET: 83460191600036
• RCS: 834 601 916 R.C.S. Paris
• VAT Number: FR50834601916
• EORI Number: FR83460191600036
• Registered Address: 21 Place de la République, 75003 Paris, France
• Email: info@oeaparis.com
• Phone: +33 6 65 59 92 64
• Website: https://oeaparis.com

For all data protection inquiries, please contact us at info@oeaparis.com.

Third-Party Service Providers and Data Processors

To deliver our Services, we share your personal information with carefully selected third parties who process data on our behalf under GDPR Article 28 Data Processing Agreements:

Service Provider	Purpose	Location
Shopify International Ltd.	E-commerce platform, payment processing, hosting	Ireland (EU)
Easyship	Shipping logistics, label generation, customs documentation	Hong Kong / Singapore
DHL Express, Colissimo, FedEx, Mondial Relay	Order delivery	EU / Global
GFFF Corp.	Fulfillment partner for non-EU orders (US, Asia, Oceania)	South Korea
Exponens	Accounting and tax compliance	France
BoxHero	Inventory management system	South Korea

Brand Licensing and Data Sharing Disclosure

OEA PARIS operates the "OEA" trademark under a formal Trademark License Agreement with GFFF Corp. (GFFF Co., Ltd.), the trademark owner based in Seoul, Republic of Korea (Business Registration Number: 322-81-03570).

Under this licensing arrangement:

• GFFF Corp. has a contractual right to receive monthly sales reports from D&K PARTNERS for royalty calculation purposes, including aggregated, non-identifiable sales data
• GFFF Corp. has read-only ("View-Only") administrative access to certain back-office tools (e.g., Shopify analytics) for license monitoring
• For non-EU orders, GFFF Corp. acts as our data processor for fulfillment purposes

Future Sale or Transfer: Under Article 8 of the license agreement, in the event of license termination or business transfer, GFFF Corp. holds a priority right to acquire the OEAPARIS.COM domain and associated customer data, subject to applicable data protection laws and an evaluation at fair market value. In such a scenario, you would be notified in advance and have the right to object or request data deletion in accordance with GDPR.

International Data Transfer to South Korea

For orders shipped from our Seoul fulfillment center (operated by GFFF Corp.), your shipping and order information will be transferred to South Korea. This applies to customers in the United States, Japan, Singapore, Hong Kong, Taiwan, Australia, New Zealand, and other Asia-Pacific countries.

Legal Basis for Transfer:

• Adequacy Decision: The European Commission has formally recognized South Korea as providing an adequate level of data protection (Adequacy Decision of December 17, 2021, under Article 45 GDPR). This means transfers to Korea are legally equivalent to transfers within the EU.
• Contract Performance: Transfer is necessary to fulfill your order (Article 49(1)(b) GDPR).

Data Transferred:

• Name, shipping address, email, phone number
• Order details (products, quantities)
• Order number for tracking

Korean Data Recipient:

• GFFF Corp. (GFFF Co., Ltd.)
• 2F, 217-7, 39, Dasan-ro 29-gil, Jung-gu, Seoul, Republic of Korea
• Purpose: Order fulfillment and shipping preparation only
• Retention: Data deleted within 30 days after order delivery confirmation

For orders fulfilled from our Paris facility (EU, UK, MENA customers), your data remains within the European Economic Area unless required by carriers for cross-border delivery.

Data Retention Periods

We retain your personal information only for as long as necessary:

Data Category	Retention Period	Legal Basis
Order and transaction records	10 years	French Commercial Code (Article L123-22)
Invoices and accounting records	10 years	French Tax Code
Customer account data	3 years after last activity	CNIL recommendation
Marketing data (with consent)	3 years from last interaction	Consent / CNIL recommendation
Cookies and tracking data	13 months maximum	ePrivacy Directive / CNIL
Customer support communications	3 years	Legitimate interest
Returns and refund records	10 years	French Commercial Code
Shipping data (at GFFF Korea)	30 days post-delivery	Data minimization principle

Your GDPR Rights (EU/EEA/UK Residents)

• Right of Access (Article 15): Request a copy of personal data we hold about you
• Right to Rectification (Article 16): Correct inaccurate data
• Right to Erasure / "Right to be Forgotten" (Article 17): Request deletion of your data
• Right to Restriction (Article 18): Limit how we process your data
• Right to Data Portability (Article 20): Receive your data in a machine-readable format
• Right to Object (Article 21): Object to processing for marketing or based on legitimate interest
• Right to Withdraw Consent (Article 7): At any time, for consent-based processing
• Right Regarding Automated Decision-Making (Article 22): Not to be subject to fully automated decisions

How to Exercise Your Rights:

• Email: info@oeaparis.com with subject "GDPR Rights Request"
• Response time: Within 30 days (extendable to 90 days for complex requests)
• Cost: Free of charge

Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority.

For French residents (and as our lead supervisory authority):

Commission Nationale de l'Informatique et des Libertés (CNIL)

• Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
• Phone: +33 1 53 73 22 22
• Website: www.cnil.fr/en

For other EEA residents: Contact your local data protection authority via EDPB Members

For UK residents: Information Commissioner's Office (ICO)

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your shopping experience. You can manage your cookie preferences via our cookie consent banner.

Cookie categories:

• Strictly Necessary: Essential for site functionality (cannot be disabled)
• Analytics: Help us understand site usage (require consent)
• Marketing: Enable personalized advertising (require consent)
• Functional: Remember your preferences (require consent)

About Our Services

OEA PARIS operates this store and website (the "Services"), powered by Shopify. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services.

Personal Information We Collect

• Contact details: name, address, billing address, shipping address, phone number, email
• Financial information: payment card information, transaction details (processed by Shopify Payments)
• Account information: username, password, preferences
• Transaction information: items viewed, cart, wishlist, purchases, returns
• Communications: customer support inquiries
• Device information: IP address, browser, device identifiers
• Usage information: site interaction, navigation patterns

How We Use Your Personal Information

• Service provision: process orders, manage accounts, fulfill shipments, handle returns
• Marketing (with consent): email campaigns, advertising, personalized recommendations
• Security and fraud prevention: authenticate accounts, prevent fraudulent transactions
• Communication: customer support, order updates
• Legal compliance: respond to legal requests, enforce terms

Relationship with Shopify

The Services are hosted by Shopify. Information you submit will be transmitted to and shared with Shopify and third parties to provide and improve the Services. For details, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Children's Data

The Services are not intended for children. We do not knowingly collect personal information from children under the age of majority. If you believe a child has provided us with personal information, please contact us for deletion.

Security of Your Information

We implement appropriate technical and organizational measures to protect your data. However, no security measures are perfect, and we cannot guarantee absolute security. We recommend not sending sensitive information through unsecure channels.

Marketing Communications

We may send you promotional emails. You may unsubscribe at any time using the link in our emails. Non-promotional emails (order confirmations, account notices) will still be sent.

Global Privacy Control

If you visit our website with the Global Privacy Control opt-out preference signal enabled, we will treat this as an opt-out request. Learn more at https://globalprivacycontrol.org/.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this website and update the "Last updated" date.

Contact Information

For privacy inquiries, please contact:

• Email: info@oeaparis.com
• Phone: +33 6 65 59 92 64
• Postal address: D&K PARTNERS S.A.S, 21 Place de la République, 75003 Paris, France
• SIRET: 83460191600036

For the purpose of applicable data protection laws, D&K PARTNERS is the data controller of your personal information.