Privacy Policy

Last updated: June 23, 2026

This Privacy Policy describes how Ilyan AIT SAGHIR EL, entrepreneur individuel, operating under the brand STARLESS (“STARLESS,” “we,” “us,” or “our”), collects, uses, discloses, and protects your personal information when you visit, use, make a purchase from, or otherwise interact with our website, online store, products, and related services (collectively, the “Services”).

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

The data controller responsible for your personal information is:

Ilyan AIT SAGHIR EL, entrepreneur individuel
Brand: STARLESS
Address: 11 rue Marcel Fouqué, 78200 Mantes-la-Jolie, France
Email: support@getstarless.com

Our store is powered by Shopify. We also use selected third-party tools and service providers, including Shopify, Klaviyo, Hotjar, and Amose Bundle, to operate our store, communicate with customers, analyze site usage, and improve the shopping experience.

2. Personal Information We Collect

“Personal information” means information that identifies, relates to, describes, or can reasonably be linked to you.

Depending on how you interact with our Services, we may collect the following categories of personal information:

• Contact information – such as your name, email address, phone number, billing address, and shipping address.
• Order and transaction information – such as products viewed, added to cart, purchased, returned, exchanged, or otherwise interacted with, as well as order history.
• Payment information – such as payment method details and transaction identifiers. Payment card information is processed securely by our payment providers, and we do not store full payment card numbers.
• Account information – such as login details, saved preferences, and account settings if you create an account.
• Customer support and communications – such as emails, messages, contact form submissions, support requests, and other communications you send to us.
• Device, browsing, and usage information – such as IP address, browser type, operating system, device identifiers, language settings, referral URLs, pages viewed, time spent on pages, clicks, and general site interaction data.
• Marketing and engagement data – such as your interactions with our emails, forms, pop-ups, campaigns, and promotions.

3. Sources of Personal Information

We collect personal information from the following sources:

• Directly from you – when you place an order, contact us, subscribe to marketing, fill out a form, create an account, or otherwise interact with our Services.
• Automatically – through cookies, pixels, scripts, log files, and similar technologies used on our website.
• From our platform and service providers – including Shopify, payment processors, shipping partners, analytics tools, customer support providers, and marketing tools.
• From advertising and marketing partners – where permitted by law.

4. How We Use Your Personal Information

We may use your personal information for the following purposes:

• To provide, operate, and maintain our Services.
• To process, confirm, fulfill, and manage your orders.
• To arrange shipping, delivery, and order tracking through fulfillment and logistics partners.
• To communicate with you about your orders, support requests, and service-related matters.
• To improve, personalize, optimize, and secure our website and shopping experience.
• To analyze website performance, usage, and customer behavior.
• To detect, prevent, investigate, and address fraud, abuse, chargebacks, security incidents, and other harmful or illegal activity.
• To send marketing communications, offers, or promotional messages, where permitted by law and subject to your choices.
• To comply with legal, tax, accounting, regulatory, and contractual obligations.

5. Legal Bases for Processing (EEA / UK / Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information under one or more of the following legal bases:

• Performance of a contract – for example, to process and fulfill your order and provide customer support.
• Legitimate interests – for example, to improve our Services, prevent fraud, secure our store, and understand customer interactions.
• Consent – where required, for example for certain marketing communications or non-essential cookies and tracking technologies.
• Legal obligation – for example, to comply with tax, accounting, consumer protection, or other legal requirements.

6. Cookies and Similar Technologies

We use cookies, pixels, tags, scripts, and similar technologies to operate our website, remember preferences, understand user behavior, improve performance, and support marketing and analytics activities.

These technologies may be used by us and by third parties such as:

• Shopify – to operate and secure our storefront and checkout.
• Klaviyo – to power email sign-up forms, on-site pop-ups, and marketing communications.
• Hotjar – to understand how visitors use our website through analytics and behavioral insights.
• Amose Bundle – to provide bundle-related functionality and improve the merchandising experience.

Where required by applicable law, we will request your consent before placing or using non-essential cookies or similar technologies.

You can usually control cookies through your browser settings. Blocking some cookies may affect how the Services function.

7. Marketing and Advertising

We may use your personal information to send you marketing emails or similar communications about our products, offers, and updates, where permitted by law.

You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us at support@getstarless.com.

We do not sell personal information for money. However, certain data sharing involving cookies, pixels, or similar technologies used for analytics or advertising may be considered “sharing,” “targeted advertising,” or similar processing under some privacy laws. Where applicable, you may have the right to opt out of such processing.

8. How We Share Personal Information

We may disclose personal information to the following categories of recipients:

• Shopify, which powers our online store and certain store operations.
• Payment processors and fraud prevention providers, to process transactions and reduce fraud risk.
• Fulfillment, warehousing, and shipping partners, to pick, pack, ship, and deliver your orders.
• Customer support providers, where relevant to handle support requests.
• Analytics and technology providers, including Hotjar, to help us understand and improve our Services.
• Email and marketing providers, including Klaviyo, to manage sign-ups and communications.
• Merchandising or bundle app providers, including Amose Bundle, to power related on-site product functionality.
• Professional advisers, such as lawyers, accountants, auditors, or insurers where necessary.
• Governmental, regulatory, or legal authorities, if required by law or to protect our rights, users, or business.
• Successors in a business transaction, such as in the event of a merger, acquisition, financing, reorganization, or sale of assets.

9. Shopify

Our store is hosted by Shopify Inc. Shopify provides the e-commerce platform that allows us to sell our products and services to you. Shopify may process personal information in order to provide hosting, checkout, payment support, fraud prevention, analytics, and related services.

To learn more about how Shopify processes personal information, please visit: https://www.shopify.com/legal/privacy

10. International Data Transfers

Because we operate internationally and use service providers located in different countries, your personal information may be transferred to, stored in, or processed in countries other than the one in which you live, including countries that may not provide the same level of data protection.

Where required by applicable law, we use appropriate safeguards for such transfers.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide the Services and fulfill your orders;
• maintain records of transactions and customer service interactions;
• comply with legal, tax, accounting, and regulatory obligations;
• resolve disputes and enforce our agreements; and
• detect and prevent fraud or misuse.

The exact retention period depends on the nature of the information and the reason for processing.

12. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.

However, no data transmission or storage system can be guaranteed to be 100% secure, and we cannot guarantee absolute security.

13. Children’s Privacy

Our Services are not directed to children under the age of 16, and we do not knowingly collect personal information directly from children.

If you believe that a child has provided personal information to us, please contact us at support@getstarless.com, and we will take appropriate steps to investigate and, if necessary, delete the information.

14. Your Privacy Rights

For Customers in the EEA, UK, and Switzerland

Depending on your location and subject to applicable law, you may have the right to:

• request access to your personal information;
• request correction of inaccurate or incomplete personal information;
• request deletion of your personal information;
• request restriction of processing;
• object to certain processing;
• request data portability; and
• withdraw consent where processing is based on consent.

For Customers in Certain U.S. States

If you live in a U.S. state with applicable privacy laws, you may have rights such as the right to:

• know what personal information we collect, use, disclose, or share;
• access a copy of your personal information;
• request deletion of personal information;
• request correction of inaccurate personal information;
• opt out of targeted advertising, sharing, or certain profiling activities where applicable; and
• appeal a decision relating to a privacy request where applicable.

We will not discriminate against you for exercising any privacy rights available to you under applicable law.

15. Exercising Your Rights

To exercise any privacy rights or submit a privacy-related request, please contact us at:

Email: support@getstarless.com

Please include enough information for us to verify your identity and understand your request. We may need to request additional information before completing your request.

If applicable law gives you the right to appeal a decision on your request, you may do so by contacting us again at the same email address and writing “Privacy Appeal” in the subject line.

16. Do Not Track / Global Privacy Control

Because standards for browser-based “Do Not Track” signals are not uniform, our website may not respond to all such signals. However, where required by applicable law, we will honor legally recognized opt-out preference signals, such as Global Privacy Control, where technically supported and properly configured.

17. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy, security, or data practices of third parties. We encourage you to review their privacy policies before providing personal information to them.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, Services, legal obligations, or privacy practices. When we do, we will post the updated version on this page and revise the “Last updated” date above.

19. Contact Us

If you have questions, concerns, or requests about this Privacy Policy or our privacy practices, you can contact us at:

Ilyan AIT SAGHIR EL, entrepreneur individuel
Brand: STARLESS
Address: 11 rue Marcel Fouqué, 78200 Mantes-la-Jolie, France
Email: support@getstarless.com