Privacy policy

Last updated: February 2026

Coral Raw is committed to ensuring absolute transparency. We apply the utmost rigor to the protection of your personal information. This policy precisely defines how your data is collected, processed, secured, and deleted within our systems, in strict compliance with the General Data Protection Regulation (GDPR) and French legislation.

SECTION 1 – POLICY OVERVIEW
Coral Raw collects your identity information, transactional data, and browsing data for the exclusive purpose of processing your orders, ensuring the security of your transactions, and optimizing our website. Your data is shared only with partners strictly necessary for our operations (such as Shopify for hosting and our logistics providers). We categorically refuse the sale of your data to third parties. As a user, you retain permanent control over the access, modification, or deletion of your information.

SECTION 2 – DATA COLLECTION AND TYPOLOGY
When you browse the Coral Raw website, we only collect data that is strictly necessary for our services. This collection occurs either directly through your inputs or automatically via tracking technologies (cookies) during your browsing. The categories of data concerned are as follows:

  • Identification information: Your first and last name, billing and shipping address, email address, and phone number.

  • Transactional data: Your order history, the contents of your shopping cart, and payment confirmations. (Security note: your payment information, such as credit card numbers, is encrypted and processed directly by our secure payment gateways; it is never transmitted in clear text and is not stored on our servers).

  • Technical data: Your IP address, device and browser characteristics, as well as your browsing data on our site, used to analyze and improve our platform.

SECTION 3 – PROCESSING AND PURPOSES
Each piece of collected data serves a specific purpose. The processing of your information is legally based on the performance of the contract between us when you make a purchase, on our legitimate interest in securing and improving our services, or on your explicit consent. We use your data to prepare and ship your orders, manage your returns, and provide responsive customer support. From a security standpoint, this information allows us to authenticate accounts and prevent fraud. Finally, subject to your prior consent, we use your contact information to send you our communications (newsletters) regarding our brand's news.

SECTION 4 – RECIPIENTS AND TRANSFERS
Coral Raw is the data controller of your personal data. Access to your information is strictly limited to authorized personnel of our brand and our service providers. This includes Shopify (which hosts our store and processes data on our behalf), our logistics partners (for the delivery of your packages), and our payment processors. To provide these services, your data may be transferred and stored outside the European Economic Area (specifically on Shopify's servers in North America). In such cases, we guarantee that these transfers are governed by legal mechanisms validated by the European Commission (such as Standard Contractual Clauses), ensuring a level of protection equivalent to European standards.

SECTION 5 – DATA RETENTION AND SECURITY
 Your personal information is retained only for the duration necessary to fulfill the purposes detailed in this policy, or to comply with our legal obligations. Data related to your orders is retained for the duration of our commercial relationship and until the expiration of legal warranties, then archived for accounting purposes for a standard duration of 10 years (under French law). Data used for commercial prospecting purposes is deleted within 3 years after your last contact with our brand. Browsing data (cookies) is retained for a maximum duration of 13 months. To protect your data, we implement rigorous security measures, including encryption protocols (SSL) and strict access restrictions. However, as the transmission of information over the Internet cannot be entirely infallible, we recommend that you maintain the confidentiality of your login credentials.

SECTION 6 – YOUR RIGHTS (GDPR)
In accordance with the General Data Protection Regulation and the French "Informatique et Libertés" law (Data Protection Act), you have the following rights regarding your information:

  • Right of access and rectification: You may request full access to your data and the correction of any inaccurate information.

  • Right to erasure (Right to be forgotten): You may request the deletion of your data from our systems, subject to our legal retention obligations.

  • Right to object and withdrawal of consent: You may at any time refuse the use of your data for marketing purposes, particularly via the unsubscribe link provided in our emails.

  • Right to data portability: You may request to retrieve your data in a structured and machine-readable format.

  • Post-mortem directives: You may define directives regarding the retention, deletion, and communication of your data after your death.

SECTION 7 – CHANGES TO THIS POLICY
We may update this privacy policy to reflect changes in our practices or regulations. Any revisions will be published on this page with the corresponding update date in the header. We encourage you to review it regularly to stay informed about how we protect your information.

SECTION 8 – CONTACT AND RECOURSE
For any questions regarding the management of your personal data or to exercise your rights, you can contact Coral Raw directly by email at contact@coralraw.com or by mail at 244 Chemin de Vic à Vielle, 30260 Crespian, France. If, after contacting us, you believe that the processing of your data does not comply with the applicable legal framework, you have the right to lodge a complaint with the competent supervisory authority in France, the Commission Nationale de l'Informatique et des Libertés (CNIL), via their website at www.cnil.fr.