Privacy policy

Last updated: October 2, 2026

NOVAPEAK, a French simplified joint-stock company with a sole shareholder (SASU) with a share capital of €100, registered with the Paris Trade and Companies Register (RCS) under number 101 061 455, whose registered office is located at 60 rue François Ier, 75008 Paris (hereinafter "Ube Latte", "we" or "us"), operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, as a customer, with a personalized shopping experience (hereinafter the "Services"). Ube Latte is powered by Shopify, which enables us to provide you with the Services. This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use the Services, make a purchase or any other transaction, or otherwise communicate with us. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing and using our Services, you acknowledge that you have read this Privacy Policy.

Data Controller

The controller of your personal information is NOVAPEAK, represented by its President, Thomas Commenchal. If you have any questions about your data, you can write to us at contact@ube-latte.com.

Personal Information We Collect or Process

When we use the term "personal information", we mean information that identifies you or can reasonably be linked to you. Depending on how you interact with the Services, we may collect or process the following categories of personal information:

• Contact details including your name, address, billing address, shipping address, phone number and email address.
• Financial information including transaction details, the payment method used and payment confirmation. Your full payment card details are processed directly by our secure payment providers and are never stored by us.
• Account information including your username, preferences and settings.
• Transaction information including the items you view, add to your cart, purchase, return or cancel, as well as your past transactions.
• Your communications with us including the information you include in your messages (email, WhatsApp, contact form).
• Device information including information about your device, browser or network connection, your IP address and other unique identifiers.
• Usage information including information about how you interact with the Services, such as how and when you access them.

Sources of Personal Information

• Directly from you when you create an account, place an order, contact us or sign up for our communications;
• Automatically through the Services from your device, in particular through the use of cookies and similar technologies;
• From our service providers when they collect or process your personal information on our behalf;
• From our partners or other third parties.

How We Use Your Personal Information, and on What Legal Basis

• Providing, tailoring and improving the Services (processing your orders and payments, arranging shipments, handling returns, managing your account, sending you order-related notifications). Legal basis: performance of the contract entered into with you.
• Marketing and advertising (sending you offers by email or text message, showing you online ads). Legal basis: your consent where required, or our legitimate interest with regard to existing customers for similar products. You can unsubscribe at any time.
• Security and fraud prevention (authenticating your account, securing payments, detecting fraudulent activity). Legal basis: our legitimate interest.
• Communicating with you (customer service, responding to your requests). Legal basis: performance of the contract or our legitimate interest.
• Legal reasons (retaining invoices, responding to authorities, handling disputes). Legal basis: our legal obligations.

Cookies

We use cookies and similar technologies that are necessary for the store to function (cart, checkout, security) and, subject to your consent, audience measurement and advertising cookies. You can accept, refuse or change your choices at any time via the cookie banner displayed on the website.

In particular, we use the following providers, which may collect data about you: Shopify (hosting, payments and subscriptions), Judge.me (customer reviews), Parcel Panel (order tracking) and our advertising partners (Meta, TikTok and Google), subject to your consent to cookies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate reasons, in accordance with this Privacy Policy:

• With Shopify, vendors and other third parties who perform services on our behalf (for example, IT management, payment processing, carriers, data analytics, customer service, cloud storage).
• With business and marketing partners in order to provide marketing services to you and serve you ads. For example, we use Shopify to support personalized advertising through third-party services, based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have the right to ask us not to share information about you for the purpose of showing you targeted advertising. You can exercise this right here.
• When you instruct us or consent to it, for example to ship products to you or through your use of social media widgets or login integrations.
• In connection with a business transaction such as a merger or divestiture, to comply with any legal obligation, to enforce our terms, and to protect or defend the Services, our rights and the rights of our users or third parties.

We do not sell your personal information.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify, as well as with third parties that may be located in countries other than the one in which you reside. In addition, to protect, grow and improve our business, we use certain enhanced Shopify features that incorporate data and information obtained from your interactions with our Store, as well as with other merchants and with Shopify. In these circumstances, Shopify is the controller of your personal information, in particular for responding to your requests to exercise your rights over the use of your personal information for these purposes. To learn more, please see the Shopify Consumer Privacy Policy. Depending on where you reside, you may exercise certain rights with respect to your personal information through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may provide links to websites or platforms operated by third parties (for example, our Instagram and TikTok accounts). We encourage you to review their privacy policies. We are not responsible for the privacy or security of such sites. Information you share on third-party social media platforms may be visible to other users.

Children's Data

The Services are not intended for children, and we do not knowingly collect any personal information from individuals under the age of majority. If you are the parent or guardian of a child who has provided us with their personal information, please contact us to request its deletion.

Security and Retention of Your Information

We implement reasonable measures to protect your information, but no security measure is perfect or foolproof. We recommend that you do not use unsecured channels to send us sensitive information.

We retain your personal information for as long as necessary for the purposes for which it was collected, in particular:

• order-related data: for the duration of the business relationship, then archived for the applicable statutory limitation period;
• invoices and accounting records: 10 years, in accordance with our legal obligations;
• data used for direct marketing purposes: 3 years from your last contact with us or your last order;
• cookies: a maximum of 13 months from the time they are placed.

Your Rights and Choices

In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights, under the conditions provided by law:

• Right of access to the personal information we hold about you.
• Right to rectification of inaccurate information.
• Right to erasure of your personal information.
• Right to portability of your data.
• Right to object and right to restriction of processing, in particular for direct marketing purposes.
• Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.
• Right to set instructions regarding what happens to your data after your death.
• Right to opt out of the sale or sharing of your data for targeted advertising, which you can exercise here. If you visit our website with the Global Privacy Control signal enabled, we will treat it as an opt-out request for the device and browser used.
• Managing your communication preferences. You can unsubscribe from our promotional emails at any time via the link included in each email. We may still send you non-promotional emails relating to your orders.

To exercise these rights, write to us at contact@ube-latte.com. We may ask you to verify your identity. We will respond within one month, which may be extended in the cases provided for by law. We will not penalize you for exercising any of these rights.

Complaints

If you wish to make a complaint about how we process your personal information, please contact us at contact@ube-latte.com. You also have the right to lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or with the data protection authority of your country of residence (list available here).

International Transfers

We may transfer, store and process your personal information outside the European Union. In such cases, we rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses, unless the transfer is made to a country recognized as providing an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy at any time, in particular to reflect changes to our practices or for legal or regulatory reasons. We will post the revised version on this website and update the "Last updated" date.

Contact

If you have any questions about our privacy practices or would like to exercise any of your rights, please contact us:
NOVAPEAK, Ube Latte, 60 rue François Ier, 75008 Paris
Email: contact@ube-latte.com
WhatsApp: +33 6 87 19 06 92