Privacy policy
Last updated: 31 October 2026
This page explains which personal data we collect when you visit www.monde-singulier.com (the "Shop"), create an account, place an order or write to us, why we use it, how long we keep it, who we share it with and how to exercise your rights. It applies the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the French Data Protection Act of 6 January 1978.
It replaces the previous versions.
1. Who is responsible for your data?
MONDE SINGULIER, a French simplified joint stock company (société par actions simplifiée) with a share capital of €3,570.80, registered with the Paris Trade and Companies Register under number 912 338 431, whose registered office is at 73 rue du Faubourg Poissonnière, 75009 Paris, France ("Monde Singulier", "we").
For any question about your data: contact@monde-singulier.com.
The Shop runs on the platform of Shopify International Limited (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland), which hosts it and processes the Shop's data (accounts, orders, payments) on our behalf. For certain processing it carries out for its own purposes, in particular fraud prevention, Shopify acts as a separate controller: see Shopify's privacy policy.
2. What data do we collect?
- Your account: first name, last name, email address, telephone, company, website, preferred language; for a professional account, the intra-EU VAT number, the SIREN or SIRET number and the result of the check of that VAT number; your password, which we do not know (we keep only an encrypted fingerprint of it); the dates your account was created, activated and last visited.
- Your addresses: the billing and delivery addresses you save.
- Your projects: projects, selections, liked pieces, carts and quotes.
- Your orders: pieces ordered, amounts, billing and delivery addresses, VAT number, chosen payment method, payment status, invoices. Card numbers are entered directly with our payment provider, Shopify Payments (whose provider is Stripe): we do not see them and do not keep them.
- Your requests and messages: what you send us through the contact form, a quote or lead time request from a product page, an application to the MS Pro programme, the partnership form or by email (name, email, telephone, company, country, piece concerned, message).
- The newsletter: your email address.
- Technical data: your IP address, and the browser and device used to visit the Shop or sign in to your account; the information collected by cookies and trackers (see section 8).
- For the designers we present: name, photo and biography.
We collect no so-called sensitive data (health, opinions, etc.). When a piece of information is required, the form says so.
3. Why do we use your data, on what basis and for how long?
- Create and manage your account (sign-in, addresses, projects, selections). Basis: performance of a contract. Duration: as long as you use your account; after three years without use, we close it (see section 4).
- Handle your orders: quotes, making, shipping, payment (authorisation then collection from your card), delivery, after-sales service and warranty. Basis: performance of a contract. Duration: for the time of the order and its warranty, then archived as stated in the next line.
- Invoice and keep our accounts. Basis: legal obligation. Duration: ten years from the end of the financial year (article L123-22 of the French Commercial Code and article L102 B of the French Tax Procedures Code), then deleted.
- Check the VAT number of a professional client. Basis: legal obligation. Duration: with the order, ten years as above; on the account, until it is closed.
- Answer your requests: contact, quote, lead time, MS Pro, partnership. Basis: steps taken at your request before a contract, or our legitimate interest in answering you. Duration: for the time needed to handle your request, then as in the next line.
- Follow our relationship with our clients and with the people who contacted us. Basis: our legitimate interest in developing our business. Duration: three years after your last purchase or your last exchange with us.
- Send you our newsletter. Basis: your consent. Duration: until you unsubscribe, at most three years after your last exchange with us.
- Write to you about a cart or selection left pending, or about pieces similar to those you bought. Basis: our legitimate interest. Duration: until you unsubscribe, at most three years after your last exchange with us.
- Protect the Shop and its payments against fraud and abuse. Basis: our legitimate interest in keeping the Shop secure. Duration: the time needed for this prevention, according to the periods set by Shopify and its payment provider.
- Offer the currency and delivery country that suit your visit. Basis: our legitimate interest. Duration: the country inferred from your IP address is kept in a cookie in your browser (see section 8); we do not keep the IP address itself for this purpose.
- Measure the Shop's audience and, if we switch them on, show relevant advertising. Basis: your consent. Duration: see section 8.
- Present the designers we work with. Basis: our contract with the designer. Duration: for the time of our collaboration.
- Answer requests to exercise your rights. Basis: legal obligation. Duration: proof of identity, if asked for, is deleted as soon as it has been checked; your objection to receiving our emails is kept for three years, so that we respect it.
You can unsubscribe from our information emails at any time through the link in each of them. Emails about your account or your orders (confirmation, tracking, invoice, notice of account closure) are still sent, as they are needed for the service.
4. Your account: when and how we close it
If you do not use your account for three years (no sign-in, order, cart, request, quote or project), we close it. We chose three years rather than two because our clients, professionals in particular, often follow projects over several years.
We email you thirty days before, then seven days before: simply signing in keeps your account. If you would like a copy of your data before it is closed, simply reply to one of these emails.
When it closes, your details, addresses, selections, projects and sign-in credentials are erased from the Shop, and your record is deleted from our customer relationship tool. We do not delete the account line itself: it remains, emptied of your personal data (this is called pseudonymisation), so that archived orders stay attached to it. The orders and invoices the law requires us to keep remain archived for ten years from the end of the financial year, with only the billing and delivery details they contain (name, company, address, VAT number), under restricted access, and are then deleted. We also keep the dates the account was created and last visited and the dates of the emails that warned you, so that we can show the closure was due and that you were told.
An account is not closed while an order is under way, a payment is still due or a sales discussion with us is open.
You can also ask us at any time to close your account at once, as soon as no order is under way and no payment is due, by writing to contact@monde-singulier.com.
5. Who receives your data?
- The Monde Singulier team (sales, operations, finance), each for what their role requires.
- The designers, workshops and carriers who make and deliver your order, for what they need.
-
Our service providers, who process your data on our behalf, on our instructions and under contract:
- Shopify International Limited: operation and hosting of the Shop, accounts, orders, order emails, payments (Shopify Payments), cookie consent banner. Data: Ireland (European Union); Shopify Inc. (Canada) and its sub-processors may access it from Canada, the United States or other countries.
- Stripe: provider of Shopify Payments (card payment) and secure payment of our invoices. Data: European Union (Ireland), with possible transfers to the United States.
- Amazon Web Services and Hasura: hosting of, and access to the database of, our internal tool for managing orders, clients and invoices, and of the invoice payment page. Data: United States (Northern Virginia) for AWS; United States for Hasura.
- Pennylane: invoicing and accounting. Data: France.
- HubSpot: customer relationship and forms. Data: European Union (Germany), parent company in the United States.
- Resend: sending of certain emails (for example invoices). Data: United States.
- Slack: internal team messaging (alerts about requests and orders). Data: United States.
- Our advisers (chartered accountant, lawyer), bound by professional secrecy, and the authorities (tax administration, courts) when the law requires it.
We never sell your data.
6. Is your data transferred outside the European Union?
Yes: several of our providers, and Shopify and its sub-processors, are established in, or host data in, Canada, the United States or elsewhere outside the European Union. Each transfer is protected: either the country benefits from an adequacy decision of the European Commission, or the provider is certified under the EU–US Data Privacy Framework, or it has signed the standard contractual clauses adopted by the European Commission (article 46 GDPR). You can ask us for a copy of these safeguards at contact@monde-singulier.com.
7. Your rights
At any time, you can:
- access your data and obtain a copy of it, in a common machine-readable format (right of access and right to data portability);
- have it corrected if it is inaccurate or incomplete; most of it can be changed directly in your account;
- have it erased, except what the law requires us to keep (your orders and invoices, see section 4);
- object to its use based on our legitimate interest, and at any time, without giving a reason, to receiving our information emails;
- ask for its use to be restricted, for example while a dispute is checked;
- withdraw your consent (newsletter, cookies) at any time, without affecting what was done before;
- set instructions on what happens to your data after your death.
To exercise these rights, write to contact@monde-singulier.com or to MONDE SINGULIER, 73 rue du Faubourg Poissonnière, 75009 Paris, France. We answer within one month. If we have reasonable doubts about your identity, we may ask you to confirm it.
If you believe your rights are not respected, you can lodge a complaint with the CNIL (the French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the data protection authority of the country where you live.
8. Cookies and trackers
Some cookies are essential for the Shop to work and do not require your consent: your sign-in session, your cart, your language and delivery country, payment security, and the memory of your cookie choices.
The others (preferences, audience measurement, marketing) are set only with your consent, collected by Shopify's consent banner shown on your first visit. You can refuse them as easily as accept them ("Reject all" / "Accept all"), and change your mind at any time with the "Manage cookies" link at the bottom of every page.
Your choice is kept by Shopify for a maximum of twelve months, after which the banner asks you again. Trackers that require your consent last thirteen months at most, and the information they collect is kept for twenty-five months at most.
For details, see our cookie policy.
9. Security
The Shop is only reachable over an encrypted connection (HTTPS). Passwords are never stored in plain text. Our team's access to your data is limited according to each person's role, and our management tool requires two-factor authentication. Card payments are handled by Shopify Payments and Stripe, which are PCI DSS certified: we neither see nor keep your card numbers. Our data is backed up regularly.
10. Changes to this policy
We may change this policy, in particular to follow changes in our services or in the law. The date of the last update is shown at the top of this page. If a change is significant, we will tell you by email or by a message on the Shop.

