Privacy
Privacy Policy
Last updated: June 26, 2026
Effective Date : [TO BE FILLED ON LAUNCH DAY — YYYY-MM-DD] Last updated : [TO BE FILLED ON LAUNCH DAY — YYYY-MM-DD]
This Privacy Policy describes how UNISHOP LLC ("we", "us", "our", or "GIGI FRANCE") collects, uses, discloses, and protects personal information when you visit, browse, or purchase from gigifrance.com (the "Site"). It applies to visitors and customers in the United States, with specific provisions for residents of California and other states with comprehensive privacy laws.
By using the Site, you acknowledge that you have read and understood this Privacy Policy.
1. Who we are
| Legal entity | UNISHOP LLC, a New Mexico Limited Liability Company |
| Registered address | 102 Gold Ave SW #399, Albuquerque, NM 87102, United States |
| Trademark exploited | GIGI FRANCE® (registered with the U.S. Patent and Trademark Office) |
| Website | https://gigifrance.com |
| Contact email for privacy matters | contact@gigifrance.com |
UNISHOP LLC is the entity responsible for processing your personal information under this Privacy Policy. We are not legally required to designate a Data Protection Officer under U.S. law.
2. Categories of personal information we collect
We collect only the personal information necessary to operate our Site, process your orders, communicate with you, and comply with our legal obligations.
2.1 Browsing and analytics data (all visitors)
When you browse the Site, we automatically collect: IP address (truncated for analytics), browser type and version, operating system, approximate geographic location (country/state, derived from IP), pages visited, time spent, referrer URL, and device type. This data is collected through our privacy-friendly analytics provider Plausible, which does not use cookies and does not track individuals across websites (see Section 9).
2.2 Order and customer data (purchasers)
When you place an order, we collect: full name; shipping address; billing address (if different); email address; phone number (if voluntarily provided for shipping coordination); order content (SKUs, quantities, prices); order date and identifier; and a payment confirmation token from Stripe. We do not store credit card numbers, CVV, or full bank details — these are handled exclusively by Stripe under PCI-DSS compliance.
2.3 Contact form and support correspondence
When you contact us at contact@gigifrance.com or through a contact form, we collect your name, email address, the content of your message, and any attached files.
2.4 Admin account data (internal staff only)
The administrative interface (/admin) is restricted to authorized UNISHOP staff. We collect for the admin account: email address, hashed password (bcrypt, never plain text), encrypted short-lived session tokens, and login timestamps and IP addresses (for security audit). This category does not apply to customers or visitors.
3. Purposes for processing
| Purpose | Categories used |
|---|---|
| Display the Site and ensure technical functioning | Browsing data |
| Measure aggregated site traffic | Browsing data (anonymized) |
| Process and fulfill your order | Order and customer data |
| Send order confirmation, shipping notifications, warranty information | Order data, email |
| Respond to your inquiries | Contact form data |
| Issue refunds and handle warranty claims | Order data |
| Comply with tax, accounting, and consumer protection laws | Order data |
| Prevent fraud and abuse | Browsing data, order data |
| Secure the Site and the admin interface | Admin data, browsing data |
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not use your personal information to train any machine learning model, including large language models.
4. Third parties and sub-processors
To operate the Site, we work with a small number of service providers who act as sub-processors, processing personal information only on our instructions, under contract.
| Sub-processor | Role | Data shared | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, sales tax calculation | Name, billing address, email, payment data (handled directly by Stripe) | USA (PCI-DSS Level 1) |
| Amazon.com Services LLC (MCF) | Order fulfillment and shipping | Name, shipping address, order content, phone (if provided) | USA |
| Resend (Resend.com Inc.) | Transactional emails | Email address, order data shown in email body | USA |
| Plausible Insights OÜ | Privacy-friendly analytics (no cookies, no personal identifiers) | Aggregated, anonymous traffic data | European Union (hosting) |
| Hostinger International Ltd. | Web hosting (VPS) | Site data stored on the server | U.S. data center |
| Sentry (Functional Software Inc.) | Server-side error monitoring | Stack traces, server-side error context | USA |
| Backblaze, Inc. | Encrypted backups | Encrypted backup files | USA |
We do not share personal information with advertising networks, data brokers, social media platforms, or any other third party for marketing purposes. We do not engage in "data sales" as defined under California, Colorado, Connecticut, Virginia, Utah, or other state privacy laws.
In the rare event of a legal request from a competent authority (subpoena, court order, valid government request), we will comply with applicable law and, where legally permitted, notify the affected user.
5. Where data is processed
UNISHOP LLC is a U.S. entity and all primary data processing takes place in the United States. One analytics sub-processor (Plausible) hosts aggregated, anonymous data on servers in the European Union; no personal identifiers are involved in that processing.
6. How long we retain personal information
| Data category | Retention period |
|---|---|
| Browsing/analytics data (Plausible) | Aggregated, 24 months max |
| Server logs (raw IP) | 14 days |
| Order data (name, address, items, amount) | 7 years (U.S. tax and accounting recordkeeping) |
| Stripe payment tokens | As required by Stripe under PCI-DSS (typically 7 years post-transaction) |
| Contact form correspondence | 24 months from last interaction (7 years if tied to a warranty claim) |
| Warranty claim data | 7 years from claim resolution |
| Admin account data | Active duration of the operator role + 1 year |
| Backups (Backblaze) | 30 days (daily); 12 months (weekly) |
After retention periods expire, data is permanently deleted or anonymized.
7. Your rights (U.S. state privacy laws)
Depending on your state of residence, you have the following rights. These rights apply free of charge and we will respond within the time limit set by applicable law (typically 45 days from receipt, extendable once by an additional 45 days where reasonably necessary).
7.1 Universal rights
- Right to know / access — request a copy of the personal information we hold about you
- Right to correct — request correction of inaccurate personal information
- Right to delete — request deletion (subject to legal retention obligations such as tax records)
- Right to opt out of sale or share — although we do not sell or share for behavioral advertising, you may submit this request as a formal record
- Right to non-discrimination — we will not deny service or provide different quality because you exercised your privacy rights
7.2 Additional rights for California residents (CCPA / CPRA)
- Right to know categories and specific pieces of personal information collected
- Right to know categories of sources and of third parties with whom information has been shared
- Right to limit use of sensitive personal information — we do not knowingly collect sensitive personal information in normal operation
- Right to opt out of automated decision-making — we do not use automated decision-making with legal or similarly significant effects
- Right to recognize Global Privacy Control (GPC) signals — our Site honors GPC signals for opt-out requests where applicable
7.3 Additional rights for Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other applicable state residents
The rights granted by each state's comprehensive privacy law are substantially similar to those above. You may exercise your applicable rights using the methods in Section 7.4.
For Connecticut residents: we confirm that we do not collect, use, or sell personal data for the purpose of training large language models.
7.4 How to exercise your rights
Send an email to contact@gigifrance.com with the subject "Privacy Request — [right requested]", including your full name, the email address used on the Site (if you placed an order), your state of residence, and a clear description of the right you wish to exercise. We will verify your identity only enough to ensure we don't release someone else's data. You may designate an authorized agent with written authorization.
7.5 Appeal process
If we decline to act on your request, you may appeal by emailing contact@gigifrance.com with the subject "Privacy Appeal". We will respond within 60 days. If your appeal is denied, you may file a complaint with your state's Attorney General or, for California residents, with the California Privacy Protection Agency at https://cppa.ca.gov.
8. Do Not Sell or Share My Personal Information
UNISHOP LLC does not sell personal information for monetary or other valuable consideration, and does not share personal information for cross-context behavioral advertising, under the CCPA, CPRA, and equivalent state laws.
You may confirm this preference by emailing contact@gigifrance.com with the subject "Do Not Sell or Share — Confirmation". Since we do not engage in sales or behavioral sharing, no operational change is required, but we will provide written confirmation within 15 business days. A persistent "Do Not Sell or Share My Personal Information" link is provided in the Site footer.
9. Cookies and tracking technologies
The Site uses a minimal number of cookies and does not use third-party advertising cookies, social media tracking pixels, behavioral retargeting, or cross-web tracking. Our analytics provider Plausible is cookieless and anonymous. Because we use only strictly necessary cookies and a cookieless analytics solution, we do not display an intrusive cookie consent banner; a discreet footer notice informs visitors of this minimal usage. For full details, see the Cookie Policy.
10. Security
We implement reasonable administrative, technical, and physical safeguards, including: HTTPS/TLS 1.2+ on all traffic; bcrypt hashing (rounds = 12) for the admin password; HTTP security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options); rate limiting on the login endpoint; encrypted backups (AES-256 at rest); SSH-key-only server access; logging of authentication attempts; and Stripe's PCI-DSS Level 1 payment flow (no payment card data ever touches our server).
No system can be guaranteed 100% secure. We commit to notifying affected users and the appropriate regulators promptly in the event of a personal data breach, in accordance with applicable state and federal laws.
11. Children's privacy
The Site is intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13, in compliance with the Children's Online Privacy Protection Act (COPPA). We also do not knowingly market or sell to minors under 16 without verifiable parental consent, in accordance with applicable state laws. If you believe we have inadvertently collected a minor's information, contact contact@gigifrance.com and we will delete it promptly.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" and "Last updated" above, post the updated policy at least 14 days before it takes effect, and — for active customers — send a notice to the email used for orders if the change materially affects how their data is used.
13. Contact
Email : contact@gigifrance.com (subject line: "Privacy") Postal mail : UNISHOP LLC, 102 Gold Ave SW #399, Albuquerque, NM 87102, United States