Privacy policy
Applicable to the website riordesign.fr
Last updated: April 2025
Data controller
A Minimalist Home Ltd, an Irish company trading under the name Rior Design
Registered office: Ground Floor, 71 Lower Baggot Street, Dublin D02 P593, Ireland
Company number: 663697 – Companies Registration Office, Ireland
VAT number: IE3669486RH
Contact: info@riordesign.com
As an Irish-registered company, our lead supervisory authority under the GDPR is the Irish Data Protection Commission (DPC) — www.dataprotection.ie. Consumers residing in other EU member states may also contact their local national data protection authority.
1. General
Unless otherwise stated in this policy, providing your personal data is not a legal or contractual obligation. You are not required to provide your data. Failure to do so will generally have no consequences, except as indicated in specific sections below.
"Personal data" means any information relating to an identified or identifiable natural person.
2. Server log files
You can visit our website without providing any personal information. Each time our website is accessed, usage data is transmitted by your browser to our hosting provider and recorded in log files. This data includes: the name of the page accessed, the date and time of access, the IP address, the volume of data transferred, and the internet service provider. This processing is based on Article 6(1)(f) GDPR, on the basis of our legitimate interest in ensuring the smooth operation of our website and improving our services. Your data may be transferred to Canada. Transfers to Canada benefit from an adequacy decision by the European Commission.
3. Contact
3.1 Contact by email
When you contact us by email, we collect your personal data (name, email address, message content) only to the extent you provide it. This processing is for the purpose of handling and responding to your enquiry. If your enquiry relates to pre-contractual measures or an existing contract, this processing is based on Article 6(1)(b) GDPR. In other cases, it is based on Article 6(1)(f) GDPR on the basis of our legitimate interest in handling your enquiry. In the latter case, you have the right to object to this processing at any time on grounds relating to your particular situation. Your email address is used solely to respond to your enquiry. Your data is subsequently deleted in accordance with applicable legal retention periods.
3.2 Contact form
When you use our contact form, we collect your personal data (name, email address, message content) only to the extent you provide it. The legal bases and conditions applicable are identical to those described in section 3.1 above.
3.3 WhatsApp Business
If you contact us via WhatsApp, we use the business version WhatsApp Business provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). For users residing outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). This processing is for the purpose of handling and responding to your enquiry. We collect your mobile phone number, your name if available, and any other information you share. We use a dedicated mobile device whose address book contains only data from users who have contacted us via WhatsApp. Your data may be transferred to Meta (Facebook) servers in the USA. In the absence of an adequacy decision for the USA, transfers are based on standard contractual clauses available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. This processing is based on Article 6(1)(b) GDPR where your enquiry relates to a contract, or on Article 6(1)(f) GDPR (legitimate interest in providing a quick and easy means of contact) in other cases. You have the right to object at any time. For more information: https://www.whatsapp.com/legal/privacy-policy
4. Customer account and orders
4.1 Customer account
When you create a customer account, we collect your personal data to the extent indicated during registration. This processing is for the purpose of improving your shopping experience and simplifying order processing. It is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of prior processing. Your customer account will then be deleted.
4.2 Order processing
When you place an order, we collect and process your personal data only to the extent necessary for the fulfilment and processing of your order and for handling your enquiries. Providing this data is necessary for the conclusion of the contract; without it, no contract can be concluded. This processing is based on Article 6(1)(b) GDPR. Your data may be shared with carriers and logistics providers, payment processors, order processing service providers, and IT service providers. In all cases, we strictly comply with applicable legal requirements. The volume of data transferred is limited to the strict minimum. Your data may be transferred to Canada, which benefits from an adequacy decision by the European Commission.
5. Reviews and marketing
5.1 Reviews and comments
When you submit a review or comment, we collect your personal data (name, email address, comment content) only to the extent you provide it. This processing is for the purpose of enabling and displaying reviews. It is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time. Your personal data will then be deleted. The name and email address you provide may be published alongside your review.
5.2 Email newsletter
We use your email address, independently of order processing, solely for our own promotional purposes for sending our newsletter, subject to your explicit consent. This processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time via the unsubscribe link in any newsletter or by contacting us directly. Your email address will then be removed from our mailing list. Your data is passed to an email marketing service provider as part of a processing agreement. No transfer to other third parties takes place.
5.3 Use of Klaviyo
We use Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA) for sending our newsletters, as part of a data processing agreement. We share with Klaviyo the information you provided when signing up for the newsletter (email address, first and last name where applicable). This processing is for the purpose of sending newsletters and their statistical analysis. To evaluate newsletter campaigns, sent newsletters may contain a tracking pixel (1x1 image) or tracking link, allowing us to determine whether you opened the message and whether you clicked on any embedded links. We may collect personal data such as IP address, browser and device type, and the time of access. Pseudonymised usage profiles may be created from this data. The data collected is not used to identify you personally and is used solely for statistical analysis to improve our campaigns. Your data is generally transferred to Klaviyo servers in the USA. The USA benefits from an adequacy decision (Trans-Atlantic Data Privacy Framework – TADPF). Klaviyo is TADPF-certified and has committed to complying with European data protection principles. This processing is based on Article 6(1)(f) GDPR on the basis of our legitimate interest in a targeted and effective newsletter system. You have the right to object at any time. For more information: https://www.klaviyo.com/legal/privacy-notice
5.4 SMS marketing
We use your mobile phone number, independently of order processing, solely for our own promotional purposes for sending SMS marketing messages, subject to your explicit consent given via an unchecked opt-in checkbox at checkout or via a dedicated sign-up form. This processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time by replying STOP to any message received. Your number will then be removed from our list. Your mobile phone number is shared with an SMS service provider as part of a data processing agreement. We do not share your opt-in data or SMS consent with third parties, except for messaging partners required to operate the programme. Our website uses cookies to track items you add to your cart, including abandoned carts. This information is used to determine when to send cart reminder messages via SMS.
6. Carriers and logistics
6.1 Transmission of email address to the carrier
We share your email address with the carrier as part of order fulfilment, subject to your explicit consent during the order process. This is for the purpose of informing you by email about the status of your delivery. This processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us or the carrier.
6.2 Shopify – order management system
We use the order management system of Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada, as part of a data processing agreement. Your personal data collected during the order process is transmitted to Shopify for this purpose. Transfers to Canada benefit from an adequacy decision by the European Commission.
7. Payment service providers
7.1 PayPal and PayPal Express
We use the PayPal Express payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg) on our website. This processing is for the purpose of offering you payment via PayPal Express. To integrate this service, PayPal collects, stores and analyses data when you visit the website (IP address, device type, operating system, browser type, device location). Cookies may also be used. When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal to fulfil the contract with your chosen payment method. This processing is based on Article 6(1)(b) GDPR. For more information: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
7.2 Klarna – personal data and payment options
In order to offer you the payment options of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden), we will share personal data such as your contact details and order information with Klarna. This allows Klarna to assess whether you are eligible for the payment options offered and to tailor them to your needs. This processing is based on Article 6(1)(b) GDPR.
For certain payment options (invoice, direct debit, instalment payment), Klarna reserves the right to carry out a creditworthiness assessment using mathematical and statistical methods involving credit reference agencies. For this purpose, Klarna transmits the personal data required for identity and creditworthiness verification (name, address, gender, email address, IP address, and order-related data) to a credit reference agency. The creditworthiness assessment may include score values calculated using scientifically recognised mathematical and statistical methods, including address data. This processing is based on Article 6(1)(f) GDPR on the basis of our legitimate interest in protecting against the risk of non-payment when Klarna makes advance payments. You have the right to object to this processing at any time directly with Klarna. Your personal data is processed by Klarna in accordance with its privacy policy available at: https://www.klarna.com/privacy/
8. Cookies
Our website uses cookies. Cookies are small text files stored by your internet browser on your computer system. When you visit a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that enables your browser to be uniquely identified when you return to the website. You have full control over the use of cookies. Via the technical settings of your internet browser, you can be notified before a cookie is set, choose to accept them individually, or prevent their storage and transmission. Cookies already stored can be deleted at any time. We advise you, however, that disabling cookies may limit your ability to use all the features of this website.
To manage cookies in the main browsers:
- Chrome: https://support.google.com/accounts/answer/61416?hl=en
- Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
- Microsoft Edge: https://support.microsoft.com/en-us/help/4027947
8.1 Strictly necessary cookies
Unless otherwise stated in this privacy policy, we use only strictly necessary cookies for the purpose of making our offering more user-friendly, effective and secure. These cookies enable our systems to recognise your browser after a page change and to offer you appropriate services. Some functions of our website cannot be provided without the use of cookies. This processing is based on Article 6(1)(f) GDPR on the basis of our legitimate interest in ensuring the optimal and user-friendly functioning of the website.
9. Analytics and advertising
9.1 Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. This processing is for the purpose of analysing our website and its visitors, and for marketing and advertising purposes. Google will use the information collected on our behalf to evaluate your use of the website, compile reports on website activity and provide other services relating to website and internet usage. Data collected may include: IP address, date and time of page visit, click path, browser and device information, pages visited, referrer URL, location data, and purchase activity. The IP address transmitted via Google Analytics is not combined with other Google data. With Google Analytics 4, the IP address is automatically collected and processed in anonymised form. Google uses technologies such as cookies, browser storage and counting pixels to analyse your use of the website. The information generated is generally transferred to and stored on Google servers in the USA. The USA benefits from an adequacy decision (TADPF), though Google is not TADPF-certified. Transfers are based on standard contractual clauses available at: https://policies.google.com/privacy/frameworks. Google and US government authorities may have access to your data. This processing is based on Article 6(1)(f) GDPR. You can prevent data collection by Google Analytics by downloading and installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout?hl=en. For more information: https://policies.google.com/privacy
9.2 Google Ads and Conversion Tracking
We use Google Ads and conversion tracking provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. When you click on a Google ad, a conversion tracking cookie is placed on your computer. These cookies have a limited validity period, contain no personal data and are not used to personally identify you. If you visit certain pages of our website before the cookie expires, Google and we can identify that you clicked on the ad and were directed to that page. This information is used to compile conversion statistics. We receive the total number of users who clicked on an ad, without being able to identify individuals. Transfers to the USA are based on standard contractual clauses. This processing is based on Article 6(1)(f) GDPR. You can disable personalised advertising in Google Ads settings: https://support.google.com/ads/answer/2662922?hl=en. For more information: https://policies.google.com/privacy
9.3 Google AdSense
We use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. This processing is for the purpose of displaying personalised, interest-based advertisements to visitors. Google uses cookies to analyse your use of the website. The information generated is transferred to Google servers in the USA. Transfers are based on standard contractual clauses. This processing is based on Article 6(1)(f) GDPR. You can disable the use of cookies by Google at: https://support.google.com/ads/answer/7395996?hl=en. For more information: https://policies.google.com/privacy
9.4 Google Remarketing and Similar Audiences
We use the remarketing and "Similar Audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. This is for the purpose of analysing visitor behaviour and interests in order to display targeted advertisements on the Google Display Network. Google uses cookies for this purpose. The data collected enables pseudonymised usage profiles to be created. No personal data enabling your identification is stored. Transfers to the USA are based on standard contractual clauses. This processing is based on Article 6(1)(f) GDPR. You can disable Google cookies at: https://support.google.com/ads/answer/7395996?hl=en. For more information: https://policies.google.com/privacy
9.5 Meta Pixel (Facebook)
We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on our website. Meta Platforms Ireland and we are joint controllers for the data collected upon integration of this service and its transmission to Meta. This joint controllership is governed by an agreement available at: https://www.facebook.com/legal/controller_addendum. This application is for the purpose of targeting website visitors with personalised advertising on Facebook. A Facebook remarketing tag has been implemented on our website. When you visit our site, a direct connection is established with Facebook servers, which receive information about the pages you have visited. Facebook associates this information with your personal Facebook account to display personalised advertisements to you. Your data may be transferred to the USA. Transfers are based on standard contractual clauses. This processing is based on Article 6(1)(f) GDPR. You can disable the "Custom Audiences" function here: https://www.facebook.com/ads/preferences. For more information: https://www.facebook.com/about/privacy/
9.6 Pinterest Tag
We use the Pinterest Tag provided by Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) on our website. This application is for the purpose of targeting visitors with personalised advertising on Pinterest and generating conversion statistics. When you visit our site via a Pin, a conversion cookie is placed on your computer. These cookies contain no personal data enabling your identification. Data collected may include: pages visited, searches conducted, cart contents, completed transactions. Your data may be transferred to the USA. Transfers are based on standard contractual clauses. This processing is based on Article 6(1)(f) GDPR. To disable personalised ads: https://www.pinterest.com/settings/privacy. For more information: https://policy.pinterest.com/en/privacy-policy
9.7 TikTok Pixel
We use the TikTok Pixel provided by TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom), joint controllers (hereinafter "TikTok"), on our website. This processing is for the purpose of identifying and analysing website visits, targeting advertising and evaluating the effectiveness of ads on TikTok. TikTok uses technologies such as cookies and pixels enabling recognition of your browser. Data collected may include: date and time of visit, browser and device type, screen resolution, IP address. TikTok may associate this information with your TikTok account. Pseudonymised profiles may be created. Your data may be transferred to third countries including the USA. Transfers are based on standard contractual clauses. This processing is based on Article 6(1)(f) GDPR. For more information: https://www.tiktok.com/legal/page/eea/privacy-policy/en
10. Tools and plugins
10.1 Google Tag Manager
We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. This tool is used to manage JavaScript and HTML tags used in particular for tracking and analytics tools. Google Tag Manager itself does not store cookies or process personal data. It does however enable the triggering of other tags that may collect personal data. This processing is for the purpose of designing and optimising our website. For more information: https://policies.google.com/privacy
10.2 Google reCAPTCHA
We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. This service is for the purpose of distinguishing human input from automated input. Your input is transmitted to Google and used further. The IP address and other data required for the reCAPTCHA service are also transmitted to Google. This data is processed within the European Union and may also be transferred to the USA. Transfers are based on standard contractual clauses. This processing is based on Article 6(1)(f) GDPR on the basis of our legitimate interest in protecting our website against automated abuse and spam. For more information: https://policies.google.com/privacy
10.3 YouTube
We use the YouTube video embedding function provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. YouTube is a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This function displays YouTube videos in an iFrame on our website. The enhanced privacy mode is activated: YouTube does not store any information about website visitors until you watch the video. When you play a video, information is transmitted to and stored by YouTube. Your data may be transferred to the USA. Transfers are based on standard contractual clauses. This processing is based on Article 6(1)(f) GDPR. For more information: https://www.youtube.com/t/privacy
11. Social media presence
11.1 Social plugins
To enable our website visitors to interact with social networks (share, like and similar buttons) and to make our offering more attractive, we use social plugins from the following networks:
- Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) — Privacy policy: https://www.facebook.com/privacy/explanation
- Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) — Privacy policy: https://help.instagram.com/519522125107875
- Pinterest (Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) — Privacy policy: https://policy.pinterest.com/en/privacy-policy
We advise you that visiting our website results in a connection being established with the above-mentioned social networks, which receive information that you have visited the corresponding page. If you interact with a plugin (clicking, liking) while logged into the relevant social network, your data may be directly associated with your account on that network. We have no influence over the data collected by social networks or their processing. We recommend consulting the privacy policies of each social network for information on your rights and privacy protection options.
11.2 Social media pages and accounts
We maintain pages and accounts on Facebook (facebook.com), Instagram (instagram.com) and Pinterest (pinterest.com) in order to provide information and offers within these platforms and to offer you additional ways to contact us.
a) Data we process: In the context of competitions or promotional activities, we collect the data necessary for their organisation, including the username, and for winners, the full name, postal address and, where applicable, email address. This processing is based on Article 6(1)(b) GDPR. Consent may be withdrawn at any time by deleting the relevant comment or post. In the case of contact via private messaging or direct message, we process your username and any information you provide us in order to handle your enquiry. This processing is based on Article 6(1)(f) GDPR.
Important — Competitions: Our competitions are not affiliated with Instagram, Facebook or Pinterest and are in no way sponsored, endorsed or organised by these platforms. The organiser and recipient of the information provided is Rior Design / A Minimalist Home Ltd.
b) Statistical data: We receive aggregated statistics (Insights) from Facebook and Instagram concerning our pages, including the total number of page views, likes, interactions and reach. These statistics contain only aggregated data and do not enable the identification of individuals.
c) Data processed by social networks: Social networks collect and process data about visitors to our pages, even without a user account (technical data, cookies). We have no control over such processing. We invite you to consult the privacy policies of each platform:
- Facebook / Instagram: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/
- Pinterest: https://policy.pinterest.com/en/privacy-policy
12. Retention periods and data subject rights
12.1 Retention periods
Following full completion of the contract, data is retained for the duration of the statutory guarantee period, then in accordance with applicable legal retention periods under tax and accounting law, before being deleted upon expiry of those periods, unless you have consented to further processing.
12.2 Data subject rights
Subject to the applicable legal conditions, you have the following rights under Articles 15 to 20 GDPR:
- Right of access to your personal data;
- Right to rectification of inaccurate or incomplete data;
- Right to erasure ("right to be forgotten");
- Right to restriction of processing;
- Right to data portability;
- Right to provide instructions regarding your data after your death.
You also have the right to object, pursuant to Article 21(1) GDPR, to processing based on Article 6(1)(f) GDPR, as well as to processing for direct marketing purposes. To exercise your rights, please contact us at info@riordesign.com or at the postal address indicated in our Legal Notice.
12.3 Right to lodge a complaint with a supervisory authority
In accordance with Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not in compliance with applicable regulations. You may in particular contact:
- The Irish Data Protection Commission (DPC) — www.dataprotection.ie (lead supervisory authority)
- The national data protection authority of your country of residence
12.4 Right to object
Where the personal data processing operations described in this policy are based on our legitimate interest pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing at any time with effect for the future, on grounds relating to your particular situation. Following your objection, we will cease processing the data concerned, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.