// Legal information

Privacy policy

Last updated: 26 October 2026

Data controller

[Name / company name and address] — contact: contact@swordsmoke.com

Data collected

• Order and payment: name, email, phone number, shipping and billing addresses, order details. Payment is processed by Stripe: SwordSmoke never has access to your bank details.
• Reservation request: the information entered in the form (name, contact details, address, message, cart contents).
• Browsing: the website uses no advertising cookies and no audience-measurement tools. Your cart is stored locally in your browser (storage strictly necessary for the shop to work). If you choose another language, a technical cookie (nf_lang) remembers that choice for 12 months.

Purposes and legal bases

• Processing, shipping and tracking your order, handling customer service, returns and guarantees — performance of the contract.
• Responding to a reservation request — pre-contractual steps taken at your request.
• Bookkeeping — legal obligation.
• Preventing fraud and securing the website — legitimate interest.

Recipients

Your data is intended for SwordSmoke and its service providers, strictly within the limits of their tasks: Stripe (payment), Netlify (website and form hosting), CJdropshipping (order preparation and shipping: name, shipping address and phone number), Resend (sending the emails about your order: name and email) and the carrier (delivery). Some providers may process data outside the European Union (notably in the United States and China); these transfers are covered by the safeguards provided for by the GDPR (adequacy decision or standard contractual clauses).

Retention periods

• Order and billing data: 10 years (accounting obligations).
• Reservation requests not followed by an order: 12 months maximum.
• Customer service exchanges: 3 years after the last contact.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, email contact@swordsmoke.com. You can also lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country of residence.