Privacy policy

Last updated: 23 August 2026

Casemira.com operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, as a customer, with a personalised shopping experience (the "Services"). Casemira.com is a store powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you access or use the Services, make a purchase or any other transaction, or communicate with us by any other means. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy prevails with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing and using our Services, you acknowledge that you have read this Privacy Policy and that you understand the ways in which your information is collected, used and disclosed as described in this Privacy Policy.

The personal information we collect or process

When we use the term "personal information", we are referring to information that identifies you or that can reasonably be linked to you or to another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify you or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and to the extent permitted or required by applicable law:

• Contact details including your name, address, billing address, delivery address, phone number and email address.
• Financial information including credit card, debit card and bank account numbers, payment card information, bank account information, transaction details, form of payment, payment confirmation and other payment details.
• Account information including your username, password, security questions, preferences and settings.
• Transaction information including the items you view, put in your basket, add to your wish list, purchase, return, exchange or cancel, as well as your past transactions.
• Your communications with us including the information you include in your communications with us, for example when you send an enquiry to customer service.
• Device information including information about your device, browser or network connection, your IP address and other unique identifiers.
• Usage information including information about your interaction with the Services, in particular how and when you access or interact with the Services.

Sources of personal information

We may collect personal information from the following sources:

• Directly from you including when you create an account, access or use the Services, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services including from your device when you use our products or services or access our websites, and through the use of cookies and similar technologies;
• From our service providers including when we engage them to implement certain technologies and when they collect or process your personal information on our behalf;
• From our partners or other third parties.

How we use your personal information

Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:

• Providing, tailoring and improving the Services. We use your personal information to provide you with the Services, in particular to perform our contract with you, to process your payments, to process your orders, to remember your preferences and the items you are interested in, to send you notifications related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a personalised shopping experience, for example by recommending products related to your purchases. This may include using your personal information to tailor and improve the Services in a more relevant way.
• Marketing and advertising. We use your personal information for marketing and promotional purposes, for example to send you marketing, advertising and promotional communications by email, SMS or post, and to show you online advertisements for products or services on the Services or on other websites, in particular based on the items you have previously purchased or added to your basket, as well as your other activities on the Services.
• Security and fraud prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, to detect, investigate or take action regarding fraudulent, illegal, dangerous or malicious activity, to protect public safety and to secure our services. If you choose to use the Services and create an account, you are responsible for keeping your account credentials confidential. We strongly recommend that you do not share your username, password or any other access credentials with anyone.
• Communicating with you. We use your personal information to provide you with customer service, to respond to your requests, to offer you efficient services and to maintain our commercial relationship with you.
• Legal reasons. We use your personal information to comply with applicable law or to respond to valid legal proceedings, including requests from law enforcement or government agencies, to investigate or take part in civil discovery procedures, potential or ongoing litigation, or other contentious proceedings, and to enforce our terms or policies or investigate any breaches of them.

Artificial intelligence tools ("Vision & Advice")

We make available to you, on an optional basis, two tools based on the processing of your photograph by artificial intelligence. You are free to use them or not.

• Visualisation tool ("See the rug in your home"). You send us a photograph of your interior; an artificial intelligence model generates a visualisation of a rug in your space.
• Personalised advice tool. You answer a short questionnaire and, if you wish, you send a photograph; an artificial intelligence model analyses your space in order to suggest rug recommendations.

Data processed. The photograph(s) you voluntarily send us, your answers to the questionnaire (type of room, style and colour preferences, presence of pets or children), your email address if you choose to provide it, as well as the technical data necessary to process your request (including your IP address, used for security).

Purpose. To provide you, depending on the tool chosen, with a personalised visualisation and/or advice. Your photographs are never used for advertising purposes or to train artificial intelligence models.

Legal basis. Our legitimate interest (Article 6.1.f of the GDPR) in providing you with the functionality you request; you may object to this processing at any time. If you provide us with your email address in order to receive our advice and offers, this marketing processing is based on your consent (Article 6.1.a), which you may withdraw at any time (one-click unsubscribe).

Important recommendation. Please only send photographs of your space, without any identifiable person or sensitive information (documents, elements revealing opinions, beliefs or health data), and do not upload a photograph of a third party without their consent. These tools are not intended for persons under the age of 15.

Providers and processors. We use the following processors, each bound by a contract compliant with Article 28 of the GDPR:

• Google (Gemini technologies, including "Nano Banana"): image analysis and generation of the visualisation; a professional offering under which Google does not use your data to train its models;
• Render: hosting of our application (European Union);
• Resend: sending of our internal operational reports;
• Klaviyo: management of our emails (if you provide your address);
• Shopify: hosting of the store.

Transfers outside the European Union. Some providers (Google, Resend, Klaviyo) process data in the United States. These transfers are governed in accordance with Chapter V of the GDPR: under the EU-US Data Privacy Framework and/or the standard contractual clauses of the European Commission (Decision 2021/914).

Retention period. Your photographs and the generated visualisations are kept for the time strictly necessary for the service and deleted within a maximum of 24 hours. Your email address, if you have provided it, is kept for the period applicable to our commercial communications.

Your rights. You may exercise your rights of access, rectification, erasure, restriction and objection, and withdraw your consent (for marketing), by writing to us at contact@casemira.com.

Conversational assistant

A conversational assistant is based on an artificial intelligence model and answers your questions about our products, your orders, delivery, returns and care. Its use is entirely optional: it only activates if you write to it.

What is indicated from the very first screen

The assistant identifies itself as an artificial intelligence below its input field, in accordance with Article 50 of Regulation (EU) 2024/1689 on artificial intelligence.

Data processed

The content of the messages you write and of the answers given to you; a technical conversation identifier, generated at random, with no link to your identity; the page of the site from which you write; and an irreversible cryptographic fingerprint of your IP address, used solely to limit the number of messages per hour and to prevent abuse. Your IP address itself is not stored.

We do not ask for your name, your email address or any account data in order to use the assistant. If you spontaneously provide an email address, a phone number or an order number in a message, they are automatically removed from the content before anything is stored; other elements you might choose to write (your first name, for example) may, however, appear in the stored content. We recommend that you do not send sensitive data, bank details or identity documents through this channel: for any exchange of that nature, write to us at contact@casemira.com.

Photos shared with the assistant

If you wish, you can show your room to the assistant by attaching a photo (no more than three per conversation). The photo is reduced in size in your browser before being sent, read only for the time needed to compose the reply, then replaced by a simple text mention: it is never stored, not in the retained conversation, not in our internal tools, not anywhere else. No copy of it remains. The assistant's instructions also prohibit it from commenting on any people who might appear in the image.

Purpose

To answer you in real time, to improve the quality of the answers, and to prevent misuse of the service.

Legal basis

Our legitimate interest (Article 6.1.f of the GDPR) in providing you with online assistance and in protecting our service. You may object to this processing at any time; simply refrain from using the assistant and contact us by email or by phone.

Your exchanges are not used to train artificial intelligence models.

Providers and processors

Each is bound by a contract compliant with Article 28 of the GDPR:

- Anthropic (Claude model): generation of the answers; data transmitted via the programming interface is not used to train its models;

- Cloudflare: hosting of the assistant and temporary storage of the conversations;

- Shopify: hosting of the store on which the assistant is displayed.

Transfers outside the European Union

Anthropic and Cloudflare process data in the United States. These transfers are governed in accordance with Chapter V of the GDPR, under the EU-US Data Privacy Framework and/or the standard contractual clauses of the European Commission (Decision 2021/914).

Retention period

Retention period

The content of a conversation is kept for 90 days from the last message, then automatically deleted. Before anything is stored, any email addresses, phone numbers and order numbers appearing in your messages are automatically removed from them: the retained thread is used to understand the questions asked and to improve the service, not to identify you. The contact details you voluntarily leave in order to be called back are not affected by this removal: they are kept separately, under the conditions described in the "Call-back requests" paragraph below. This period allows us to monitor the quality of the service over a full quarter; beyond it, the conversation no longer exists and can no longer be disclosed.

The IP address fingerprint used to limit the number of messages expires after around one hour. When the assistant has not been able to answer, the question alone is kept for thirteen months so that our team can provide an answer to it; it is dissociated from any other data.

We also keep anonymous counts (how many questions relate to size, care or delivery, on which page and from which type of device) for thirteen months, in order to compare one season with the previous one and to enrich our product pages and help pages. These counts are not linked to any person. We also keep, for the same period, a few real question wordings for illustration purposes: they are redacted in the same way before anything is stored, so that they do not allow anyone to be identified. Daily usage counters are aggregated and likewise do not allow anyone to be identified.

Finally, if you indicate whether or not an answer was helpful to you, this feedback is kept for six months, without any identity data: it is used solely to improve the answers and the pages concerned.

Measuring the usefulness of the service

When an order is placed after an exchange with the assistant, we record the amount of that order against the technical identifier of the conversation, in order to know whether the service is genuinely useful. No identity data is used for this matching: no name, no address, no email, no basket details. The result is aggregated by day, no individual profile is created and no automated decision is taken about you. This processing is based on our legitimate interest (Article 6.1.f of the GDPR) in measuring the effectiveness of a tool we operate.

Call-back requests

From the assistant, you can ask to be called back: either via the form provided for that purpose, or by leaving your email address or phone number directly in the conversation, typically when the assistant does not have the answer and offers you this option. We then collect that contact method, your name if you have given it, and the subject of your request; the content of the conversation is passed on with the request to our customer service team, so that you do not have to explain everything again. The assistant never asks for your contact details on its own initiative: it is always you who chooses to leave them.

This information is used solely to contact you again: it is not fed into any marketing tool and is not reused for any commercial purpose. This processing is based on Article 6.1.b of the GDPR, which covers steps taken at your request prior to entering into a contract. Your contact details are kept for 90 days, the time needed to handle your request and keep a record of it, then deleted. We undertake to get back to you within 24 working hours. You may request the erasure of this information at any time at contact@casemira.com.

Storage on your device

The assistant does not use any cookies. It stores a technical conversation identifier in your browser's session memory, only after your first message, and this identifier disappears when the tab is closed.

Your rights

You may exercise your rights of access, rectification, erasure, restriction and objection by writing to us at contact@casemira.com. Given the 90-day retention period, a request concerning a conversation must reach us within that period for us to be able to identify it, indicating, if possible, the day and approximate time of the exchange.

Minors

The assistant is not intended for persons under the age of 15.

How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes, in accordance with this Privacy Policy. Such circumstances may include:

• With Shopify, service providers and other third parties who provide services on our behalf (for example IT management, payment processing, data analytics, customer service, cloud storage, fulfilment and shipping).
• With business and marketing partners in order to provide you with marketing services and to send you advertising. For example, we use Shopify to support personalised advertising through third-party services, based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to ask us not to share information about you for the purpose of showing you targeted advertising and marketing content based on your online activity with different merchants and websites. You can exercise your rights to opt out of these uses here
• When you instruct us, make a request to us or otherwise consent to the disclosure of certain information to third parties, for example in order to ship products to you or through your use of social media widgets or login integrations.
• With our affiliates or more generally within our group of companies.
• In connection with a business transaction such as a merger or bankruptcy filing, to comply with any applicable legal obligation (including in response to subpoenas, search warrants or similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights and the rights of our users or of third parties.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide the Services to you and to improve them. Information you submit to the Services will be transmitted to and shared with Shopify, as well as with third parties that may be located in countries other than the one in which you reside, in order to provide the Services to you and to improve them. In addition, in order to protect, develop and improve our business, we use certain enhanced Shopify features that incorporate data and information from your interactions with our Store, as well as with other merchants and with Shopify. To provide these enhanced features, Shopify may use personal information collected from your interactions with our store, with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including responding to your requests to exercise your rights regarding the use of your personal information for these purposes. To find out more about how Shopify uses your personal information and the rights you have, you can consult the Shopify Consumer Privacy Policy . Depending on where you live, you can exercise certain rights relating to your personal information here Shopify Privacy Portal link.

Third-party websites and links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites that are not affiliated with us or that we do not control, we recommend that you review their privacy and security policies as well as their other terms and conditions of use. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of the information found on them. Information you provide in public or semi-public spaces, including information you share on third-party social media platforms, may also be visible to other users of the Services and/or to users of those third-party platforms, without restriction as to its use by us or by a third party. Our inclusion of such links does not in itself imply any endorsement of the content of those platforms, or of their owners or operators, except as otherwise stated on the Services.

Children's data

The Services are not intended for use by children and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you can contact us using the contact details set out below to request its deletion. As of the effective date of this Privacy Policy, we are not aware that we "share" or "sell" (as those terms are defined by applicable law) personal information about persons under the age of 16.

Security and retention of your information

Please note that no security measure is perfect or impenetrable, and we cannot guarantee "perfect security". In addition, any information you send us may not be secure while in transit. We recommend that you do not use insecure channels to send us sensitive or confidential information.

How long we keep your personal information depends on various factors, such as the need to keep this information to manage your account, to provide you with the Services, to comply with our legal obligations, to resolve disputes or to enforce any other applicable contract or policy.

Your rights and choices

Depending on where you live, you may have some or all of the rights set out below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request to the extent permitted by law.

• Right of access/right to information. You may have the right to request access to the personal information we hold about you.
• Right to erasure. You may have the right to request the deletion of the personal information we hold about you.
• Right to rectification. You may have the right to request the rectification of inaccurate personal information we hold about you.
• Right to portability. You may have the right to receive a copy of the personal information we hold about you and to request its transfer to a third party, in certain circumstances and subject to certain exceptions.
• Managing communication preferences. We may send you promotional emails. You can choose to stop receiving them at any time by using the unsubscribe option included in our emails. If you unsubscribe, we may still send you non-promotional emails, for example concerning your account or orders you have placed.

You may exercise these rights in the places provided for that purpose on the Services or by contacting us using the contact details provided below. To find out more about how Shopify uses your personal information and the rights you may have, including rights relating to data processed by Shopify, you can consult https://privacy.shopify.com.

We will not penalise you for exercising any of these rights. We may need to verify your identity before we can process your requests, to the extent provided for or permitted by applicable law. In accordance with applicable law, you may designate an authorised agent to request to exercise your rights on your behalf. Before accepting such a request from an agent, we will require the agent to provide proof of the authorisation you have given them to act on your behalf, and we may ask you to verify your identity directly with us. We will respond to your request within the timeframes provided for by applicable law.

Complaints

If you wish to lodge a complaint about our processing of your personal information, please contact us using the contact details set out below. Depending on where you live, you may have the right to challenge our decision by contacting us using the contact details set out below, or by lodging a complaint with the competent data protection authority in your region. For the EEA, you can find a list of the supervisory authorities responsible for data protection here.

International transfers

Please note that we may transfer, store and process your personal information outside the country in which you reside.

If we transfer your personal information outside the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms, such as the standard contractual clauses of the European Commission or, where applicable, any equivalent contract issued by the competent authority of the United Kingdom, unless the data transfer is made to a country recognised as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy at any time, in particular to reflect changes to our practices or for other operational, legal or regulatory reasons. We will publish the revised Privacy Policy on this website, update the "Last updated" date and provide notice, in accordance with applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of the rights available to you, please call us on 02 59 66 01 35 , or send us an email at contact@casemira.com or contact us at 20 Avenue des Erables, 35310 Mordelles, FR For the purposes of applicable data protection legislation, we are the controller of your personal information.