This page explains what data we collect, why, who we share it with and what your rights are. Click a section to open it.
Last updated: 14 September 2026
1. Data controller
This website, saliagold-paris.com, is published by JOAILLERIE SETAYESH NIAYESH, whose registered office is at 22 Rue Vignon, 75009 Paris, France.
- SIRET: 904 853 702 00036
- Contact: info@saliagold-paris.com
- Telephone: +33 1 71 28 40 62
We have not appointed a data protection officer (DPO), as this is not mandatory given the nature of our activity.
2. Principles
We collect only the data required for the purposes described below. We neither sell nor rent your personal data to third parties. We do not use it for marketing without your agreement.
3. Data we collect
When you place an order
We collect your first and last name, your e-mail address, your telephone number, your billing and delivery addresses, the details of your order (items, amounts, date) and, where applicable, your company name.
Payment data: your card number is never stored on our servers. It is entered in a secure form provided by our payment processor and sent directly to them. We keep only the payment confirmation, the last four digits of the card and the transaction reference.
When you create an account
Our site allows you to create a customer account without a password, using a one-time code sent by e-mail or SMS. We then keep your e-mail address or telephone number, the address book you save and your order history. The one-time code expires after ten minutes.
When you contact us
The contact form records your name, your e-mail address, your telephone number and the content of your message.
Browsing data
Subject to your consent, we measure site traffic and analyse browsing: IP address (anonymised), pages viewed, time spent, device and browser type, and referral source.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing and delivering your orders | Performance of the contract |
| Managing your customer account | Performance of the contract |
| Responding to your enquiries | Legitimate interest |
| Accounting and tax obligations | Legal obligation |
| Preventing fraud and securing the site | Legitimate interest |
| Measuring traffic and analysing browsing | Consent |
| Advertising and measurement on social networks | Consent |
5. Who receives your data
We use service providers who act on our behalf or as independent controllers:
| Provider | Role | Data concerned |
|---|---|---|
| IONOS (France) | Website hosting | All site data |
| Stripe / WooPayments | Payment processing | Payment and billing |
| Google (Analytics) | Traffic measurement | Browsing |
| Microsoft (Clarity) | Behaviour analysis | Browsing, session recording |
| Meta (Facebook) | Advertising measurement | Browsing |
| OpenStreetMap | Map display | IP address |
| Carriers | Delivery | Name, address, telephone |
The three measurement and advertising tools are activated only after your consent. Your data may also be disclosed to the competent authorities where the law requires it.
6. Cookies and trackers
No traffic measurement or advertising cookie is placed before you consent. Only cookies strictly necessary for the site to work (basket, session, security) are placed without consent, as permitted by the regulations. You can accept or refuse these trackers at any time: refusing is as simple as accepting.
Details of the cookies used are set out in our Cookie policy.
7. Transfers outside the European Union
Some of our providers (Google, Microsoft, Meta, Stripe) may transfer data to the United States. Such transfers are governed by the European Commission standard contractual clauses and, where applicable, by the EU–US Data Privacy Framework.
8. Retention periods
| Data | Period |
|---|---|
| Orders and invoices | 10 years (accounting obligation) |
| Customer account | Until deleted, then 3 years of inactivity |
| Contact enquiries | 3 years from the last exchange |
| One-time sign-in code | 10 minutes |
| Cookies and trackers | 13 months maximum |
| Traffic data | 25 months maximum |
9. Security
The site is protected by a TLS certificate: your exchanges with us are encrypted. Access to the back office is restricted to authorised staff and regular backups are made. Payment data is handled exclusively by our PCI-DSS certified provider.
10. Your rights
Under the General Data Protection Regulation and the French Data Protection Act, you have the following rights:
- right of access: obtain a copy of the data we hold about you;
- right to rectification: correct inaccurate data;
- right to erasure, subject to our legal retention obligations;
- right to restriction of processing;
- right to object, in particular to processing based on our legitimate interest;
- right to portability of your data;
- right to withdraw your consent at any time.
To exercise these rights, write to us at info@saliagold-paris.com. We reply within one month. Proof of identity may be requested in the event of reasonable doubt.
If you consider that your rights are not being respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.
11. Minors
The site is not intended for people under the age of 15 and we do not knowingly collect their data.
12. Changes
We may update this policy. The date of the last update appears at the top of this page. In the event of a substantial change, we will inform you on the site.
Translated from French. In the event of any discrepancy, the French version prevails.