Privacy policy


Last update: 24/08/2026

This Privacy Policy explains how MY PILOT COLLECTION (“MPC”) collects and processes personal data when you visit www.mypilotcollection.com (the “Website”), contact us, create a customer account, request a quotation, place an Order, participate in a custom project, subscribe to marketing communications or otherwise interact with MPC.

It should be read together with our Cookie Policy, which explains the use of cookies, pixels and similar technologies.

Using the Website does not constitute general consent to the processing of personal data. MPC processes personal data only where an appropriate legal basis applies.

1. Data Controller

The data controller is:

Léa CRUSEL, individual entrepreneur, trading as MY PILOT COLLECTION (“MPC”)

  • SIREN / RCS Albi: 918 974 940
  • 38 rue Édouard Branly, 81000 Albi, France
  • Email: contact@mypilotcollection.com
  • Telephone: +33 7 60 03 92 51

Requests concerning personal data or the exercise of your rights may be sent to the email address above.


2. Personal Data We Collect

Depending on how you interact with MPC, we may collect:

  • Identity and contact information: name, company, professional position, postal address, email address and telephone number;
  • Order and transaction information: Products ordered or considered, quotations, invoices, billing and delivery information, payment status, transaction references, returns, complaints and customer-service history;
  • Customer account information: email address, authentication information, account preferences and Order history;
  • Custom project information: briefs, specifications, personalisation instructions, photographs, files, approvals, correspondence and other information necessary to prepare or perform a commissioned project;
  • Delivery and installation information: delivery address, collection details, access requirements, appointments and information necessary to identify an authorised recipient;
  • Communications: information provided through email, telephone, Website forms, WhatsApp, Instagram, Facebook or other communication channels;
  • Technical and usage information: IP address, browser and device information, approximate location, Website interactions, advertising identifiers and similar information, subject to applicable cookie and consent rules;
  • Compliance information: where required by law, identity documents, company information, beneficial ownership information or information concerning a transaction.

MPC does not normally receive or store complete payment-card details. These are processed by the relevant payment service providers. MPC may receive payment confirmation, transaction references, payment status and limited information necessary to administer the transaction.


3. How We Obtain Personal Data

We collect personal data:

  • directly from you when you use the Website, place an Order, request a quotation or communicate with MPC;
  • automatically through the Website and authorised cookies or similar technologies;
  • from Shopify, payment providers and other service providers used to operate the Website and process Orders;
  • from artists, craftspeople, carriers or other Partners where necessary to perform an Order;
  • from social-media or messaging platforms when you interact with MPC through those services; and
  • for relevant B2B prospecting, from professional websites, directories, social networks, trade fairs or other publicly available professional sources.

Where required by applicable law, individuals whose personal data is obtained indirectly are informed within the applicable period and, where relevant, no later than the first communication with them.


4. Why We Use Personal Data

MPC processes personal data for the following principal purposes and legal bases:

Purpose Legal basis
Responding to enquiries and preparing quotations Steps taken before entering into a contract
Managing Orders, payments, customer accounts, delivery, collection, installation, returns and customer service Performance of a contract
Managing custom or commissioned projects Pre-contractual measures and/or performance of a contract
Issuing invoices and maintaining accounting, tax or customs records Legal obligation
Customer identification and anti-money-laundering checks where legally required Legal obligation
Preventing fraud, securing transactions and protecting MPC and the Website Legitimate interests and/or legal obligation
Managing complaints, disputes and legal claims Legitimate interests
Maintaining appropriate business records and evidence Legitimate interests and/or legal obligation
B2C newsletters and electronic marketing Consent, except where an applicable legal exception permits marketing of similar products or services to existing customers
Relevant B2B marketing and prospecting Legitimate interests, subject to the right to object
Non-essential analytics, advertising and personalised marketing technologies Consent where required

 

Where MPC relies on legitimate interests, those interests are balanced against the rights and reasonable expectations of the individuals concerned.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.


5. Information Required to Provide Our Services

Certain personal data is necessary to respond to a request, prepare a quotation, conclude or perform an Order, process payment, issue an invoice, arrange delivery or comply with legal requirements.

If required information is not provided, MPC may be unable to process the relevant request or Order.

Information requested solely for marketing, advertising personalisation or other optional purposes is not required in order to purchase a Product.


6. Marketing and Professional Prospecting

MPC may send newsletters, Product information, invitations and promotional communications.

For Consumers, electronic marketing communications are sent with prior consent where required by law, except where an applicable exception permits MPC to communicate with existing customers about similar products or services.

You may unsubscribe at any time using the link provided in marketing emails or by contacting MPC.

MPC may also contact businesses and professional contacts by email or telephone where the communication is relevant to their professional activity and permitted by applicable law. Professional recipients may object at any time, simply and free of charge.

MPC does not intend to conduct unsolicited telephone marketing to Consumers without the consent required by applicable law.

Unsubscribing from marketing does not prevent MPC from sending communications necessary for an Order, payment, delivery, account, legal notice or ongoing contractual relationship.


7. Cookies, Analytics and Advertising

MPC uses Shopify’s native Customer Privacy tools and consent-management functionality.

Subject to your consent choices where required, MPC currently uses technologies provided by:

  • Shopify, including Shopify Network Intelligence;
  • Google & YouTube;
  • Meta / Facebook & Instagram; and
  • Pinterest.

These services may be used for analytics, conversion measurement, advertising and personalisation.

Detailed information about the technologies used, their purposes, providers, categories and how to withdraw consent is available in our Cookie Policy.

You can change your choices at any time through Cookie Preferences available on the Website. Where applicable, visitors may also exercise rights to opt out of the sale or sharing of personal data or its use for targeted advertising through “Your Privacy Choices”.


8. Shopify and Shopify Network Intelligence

The Website is operated using Shopify.

For the core services Shopify provides to MPC, Shopify generally processes customer personal data on MPC’s instructions as a data processor.

MPC also currently uses Shopify Network Intelligence and related Enhanced Services. For these services, Shopify may process certain customer information for purposes determined by Shopify and may act as a separate data controller.

Where Network Intelligence is enabled, Shopify may combine information concerning interactions with this Website with information concerning interactions with Shopify or other Shopify merchants in order to provide enhanced commerce services, including personalisation, analytics, fraud prevention, advertising measurement and marketing optimisation.

Where required by law, these uses are subject to your consent and privacy choices.

For further information, please consult Shopify’s Consumer Privacy Policy and Privacy Portal.


9. Who We Share Personal Data With

Where necessary for the purposes described above, MPC may provide personal data to:

  • Shopify and payment providers used to operate the store and process transactions;
  • artists, craftspeople, manufacturers and other Partners involved in creating, personalising, packing, delivering or installing a Product;
  • postal operators, carriers, specialist art transporters and delivery providers;
  • Indy, for invoicing, accounting and related administrative purposes;
  • Google services, including Gmail and Google Drive, for communications, business document management and backups;
  • Brevo, for email marketing ;
  • Google, Meta and Pinterest, where the relevant analytics or marketing technologies have been authorised;
  • banks, insurers, IT providers and professional advisers where necessary; and
  • competent tax, customs, regulatory, administrative or judicial authorities where disclosure is legally required.

MPC limits the information provided to what is reasonably necessary for the relevant purpose.

In particular, an artist or Partner fulfilling an Order may receive the Customer’s name, contact details, delivery information, personalisation instructions or appointment information where required, but is not authorised by MPC to use that information for unrelated marketing purposes.

MPC does not sell personal data to third parties for monetary consideration.


10. Payments

Payments may be processed through the methods made available at checkout or agreed for a particular Order, including payment cards, Shopify Payments, Shop Pay, PayPal, Apple Pay, Google Pay, bank transfer or other available services.

Payment providers process payment credentials in accordance with their own privacy and security obligations and may act as processors or independent data controllers depending on the service concerned.

MPC generally receives only the information necessary to confirm and administer the transaction.


11. Anti-Money-Laundering and Identity Verification

Where legally required, MPC may carry out customer-identification, transaction-verification or anti-money-laundering checks.

French anti-money-laundering legislation notably applies to persons trading or acting as intermediaries in the trade of artworks or antiques where a transaction or series of linked transactions reaches the applicable statutory threshold.

Where these rules apply, MPC may request identity documents, corporate or beneficial-ownership information and information concerning the nature or purpose of the transaction.

Such information is collected only where appropriate and retained for the period required by applicable law.


12. International Transfers

Some of MPC’s service providers operate internationally. Personal data may therefore be processed outside France or the European Economic Area (“EEA”).

Where the GDPR applies and data is transferred to a country that has not been recognised as providing an adequate level of protection, appropriate safeguards are used where required, including Standard Contractual Clauses, Binding Corporate Rules or other legally recognised transfer mechanisms.

Shopify may process customer personal data in countries including Canada and Singapore and uses the transfer mechanisms described in its applicable Data Processing Addendum.

Further information about applicable safeguards may be requested from MPC.


13. How Long We Keep Personal Data

MPC retains personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal obligations.

In particular:

  • customer and Order information is kept during the commercial relationship and may then be archived for the applicable limitation periods where necessary for evidence or legal claims;
  • accounting records and supporting documents are retained for 10 years where required by French law;
  • data used for commercial prospecting is generally retained for the duration of the customer relationship and for up to 3 years thereafter, or, for prospects, for up to 3 years from collection or the last meaningful contact;
  • information necessary to record an objection to marketing may be retained for at least 3 years solely to ensure that the objection is respected;
  • where anti-money-laundering obligations apply, relevant records are generally retained for 5 years in accordance with applicable legislation; and
  • cookie and tracking information is retained in accordance with the periods described in the Cookie Policy and the visitor’s consent choices.

Data may be kept longer where required by law or where necessary to establish, exercise or defend legal claims.


14. Security

MPC implements technical and organisational measures appropriate to its activities and the nature of the personal data processed in order to protect it against unauthorised access, disclosure, alteration, loss or destruction.

MPC also relies on professional service providers implementing their own security measures and restricts access to personal data to persons who reasonably need it.

Any personal-data breach is assessed and handled in accordance with applicable notification obligations.


15. Your Rights

Where the GDPR applies, you may, depending on the circumstances, have the right to:

  • access your personal data;
  • correct inaccurate or incomplete data;
  • request deletion of your data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • object at any time to direct marketing;
  • receive certain personal data in a portable format where applicable; and
  • withdraw consent at any time where processing is based on consent.

These rights may be subject to statutory conditions or exceptions, including where MPC is legally required to retain certain information.

To exercise your rights : contact@mypilotcollection.com

MPC may request information reasonably necessary to verify your identity. Requests will be handled within the periods required by applicable law. You also have the right to lodge a complaint with a competent data-protection authority. In France, this is the:

Commission Nationale de l’Informatique et des Libertés (CNIL)
www.cnil.fr

Where another supervisory authority is competent under applicable law, you may also contact that authority.


16. Automated Fraud and Security Checks

Shopify, payment providers or other service providers may use automated systems to identify potentially fraudulent or high-risk transactions.

MPC does not itself intend to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals without the safeguards required by applicable law.

Where applicable, automated checks performed independently by payment or service providers are also governed by their own privacy policies.


17. Third-Party Platforms

When you communicate with MPC through services such as Instagram, Facebook or WhatsApp, or voluntarily publish a review on platforms such as Google, Trustpilot or Facebook, the relevant platform also processes personal data under its own privacy policy.

MPC is not responsible for the independent processing activities of those third-party platforms.


18. Changes to This Privacy Policy

MPC may update this Privacy Policy to reflect changes to its activities, Website, technologies, providers or applicable law.

The current version is identified by the “Last updated” date above.

Where a change requires new information or consent under applicable law, MPC will take the necessary steps before implementing the relevant processing.


19. Contact

For any question concerning this Privacy Policy or the exercise of your data-protection rights, please contact:

MY PILOT COLLECTION

 

GO BACK TO THE BOUTIQUE

 

 

Â