Privacy policy

Last updated: April 17, 2026

1. Introduction

This Privacy Policy describes how Danielle Roches SAS, a French société par actions simplifiée with a share capital of €250,000, registered with the Paris Trade and Companies Register under number 384 925 921, whose registered office is at 17 Rue du Colisée, 75008 Paris, France ("Talika," "we," "us," or "our"), collects, uses, shares, and protects personal information when you visit talika.com (the "Site"), make a purchase, create an account, or otherwise interact with us.

If you have any questions about this Privacy Policy or wish to exercise any of your rights, contact us at contact@talika.com or by mail at the address above.

2. Data Controller

For purposes of applicable data-protection laws, Danielle Roches SAS is the controller of the personal information collected through the Site. Our U.S. privacy agent is reachable at contact@talika.com.

3. Personal Information We Collect

We collect the following categories of personal information:

  • Identifiers and contact data: name, email address, shipping and billing address, phone number, and account credentials.
  • Transaction data: products purchased, order history, returns, payment method (we do not store full card numbers; payment information is processed by our payment service providers).
  • Customer service data: records of your communications with us, including emails and chat messages.
  • Device and usage data: IP address, browser type, device identifiers, operating system, pages viewed, referring URLs, and session information, collected via cookies and similar technologies.
  • Marketing data: your preferences for receiving marketing communications and your responses to our campaigns, and reviews or user-generated content you submit.
  • Inferences: inferences drawn from the above to build a profile reflecting your preferences and likely interests.

We do not knowingly collect sensitive personal information. If we do collect sensitive personal information (for example, precise geolocation or government-issued IDs for fraud prevention), we will do so only for the purposes permitted by applicable law and will not sell or share it.

4. Sources of Information

We collect personal information directly from you, from your device and browser, from our service providers (such as payment processors, shipping carriers, and analytics providers), and from social networks and advertising partners when you interact with our content on their platforms.

5. How We Use Personal Information

We process personal information to:

  • provide, operate, and maintain the Site and our Services;
  • process and fulfill orders, manage returns, and handle billing and payment;
  • communicate with you about your orders, account, and customer-service requests;
  • send marketing communications where permitted by law and in accordance with your preferences;
  • personalize your experience and show you relevant content and offers;
  • detect, investigate, and prevent fraud, security incidents, and abuse;
  • comply with our legal, tax, accounting, and regulatory obligations;
  • establish, exercise, or defend legal claims.

6. Legal Bases (EEA, UK, Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases: (a) performance of a contract with you; (b) our legitimate interests in operating and improving our business, provided these are not overridden by your rights; (c) compliance with a legal obligation; and (d) your consent, which you may withdraw at any time.

7. How We Share Personal Information

We do not sell personal information for money. We may share personal information with:

  • Service providers who process personal information on our behalf, including our e-commerce platform (Shopify Inc.), payment processors, shipping and logistics carriers, customer-service platforms, email and marketing platforms, analytics providers, and fraud-prevention providers. These providers are contractually bound to process data only as instructed and to implement appropriate security measures.
  • Advertising partners to measure campaign performance and deliver targeted advertising, including through cookies and similar technologies. Depending on applicable law, this activity may be considered "sharing" under the California Consumer Privacy Act (CCPA) and similar state laws.
  • Legal and compliance recipients where required by law, court order, or to protect our rights, property, or safety, or the rights, property, or safety of our customers or others.
  • Corporate transactions: in connection with a merger, acquisition, reorganization, financing, or sale of assets, personal information may be transferred to the involved parties.

8. Cookies and Similar Technologies

We and our partners use cookies, pixels, SDKs, and similar technologies to operate the Site, remember your preferences, analyze traffic, and deliver personalized content and advertising. You can manage cookies through our cookie banner (where available) and through your browser settings. Blocking certain cookies may affect the functionality of the Site.

9. International Transfers

Personal information may be transferred to, stored in, and processed in countries outside your country of residence, including France and the United States. When we transfer personal information from the EEA, the UK, or Switzerland to a country that has not been determined to provide an adequate level of protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), or any equivalent mechanism issued by the relevant authority.

10. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with our legal obligations (for example, tax and accounting records are retained for the periods required by applicable law). When retention is no longer necessary, we delete or anonymize the information.

11. Security

We implement technical and organizational measures designed to protect personal information against unauthorized access, loss, alteration, or disclosure. No method of transmission over the Internet or storage system is completely secure, and we cannot guarantee absolute security.

12. Your Rights — All Users

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access / Know: request confirmation of whether we process your personal information and obtain a copy.
  • Correction: request correction of inaccurate or incomplete personal information.
  • Deletion: request deletion of your personal information, subject to exceptions.
  • Portability: receive a copy of your personal information in a portable format.
  • Objection / Restriction: object to or restrict certain processing.
  • Withdrawal of consent: withdraw consent at any time where processing is based on consent.
  • Non-discrimination: not be discriminated against for exercising your rights.

To exercise any of these rights, email contact@talika.com. We will respond within the timeframes required by applicable law. We may need to verify your identity before fulfilling your request. You may use an authorized agent; we will require proof of authorization.

13. California Privacy Rights (CCPA/CPRA)

This section applies to California residents and supplements the information above. Under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), you have the following rights:

  • Right to Know the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
  • Right to Delete personal information we have collected from you, subject to statutory exceptions.
  • Right to Correct inaccurate personal information.
  • Right to Opt Out of Sale or Sharing of personal information. While we do not sell personal information for money, certain cookie-based advertising activities may qualify as "sharing" or "sale" under the CCPA/CPRA. You may opt out using the Global Privacy Control (GPC) signal sent by your browser, or by emailing contact@talika.com with the subject line "Do Not Sell or Share My Personal Information."
  • Right to Limit Use of Sensitive Personal Information: we do not use or disclose sensitive personal information for purposes other than those permitted without the right to limit under the CCPA/CPRA.
  • Right to Non-Discrimination for exercising your California privacy rights.

Categories of personal information collected in the last 12 months (CCPA categories): identifiers (A); customer records (B); commercial information (D); internet or other network activity information (F); geolocation data at city level (G); audio or visual information from service calls (H); and inferences drawn from the above (K). We collect these categories from you, your devices, our service providers, and our advertising partners, for the business purposes described in Section 5. We disclose these categories to the recipients described in Section 7.

Retention: we retain each category of personal information for the period described in Section 10.

Authorized agents: you may designate an authorized agent to submit a request on your behalf; we will require written authorization and identity verification.

14. Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Jersey, New Hampshire, Minnesota, Maryland, Tennessee, Indiana, and other U.S. states with comprehensive privacy laws have rights substantially similar to those described in Sections 12 and 13, including rights of access, correction, deletion, portability, and opt-out of targeted advertising or "sale." To exercise these rights, email contact@talika.com.

Appeals: if we decline your request, you may appeal by replying to our response. If your appeal is denied, you may contact your state Attorney General.

We do not engage in profiling that produces legal or similarly significant effects on consumers.

15. Children's Information

The Site is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction). If you believe that a child has provided us with personal information, contact us at contact@talika.com and we will take steps to delete it.

16. Marketing Communications

You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email or by contacting us at contact@talika.com. Even after unsubscribing, you may still receive transactional messages related to your orders or account.

17. Complaints and Supervisory Authorities

If you reside in the EEA, the UK, or Switzerland, you have the right to lodge a complaint with your local data-protection authority. A list of EEA authorities is available on the European Data Protection Board website. In France, the relevant authority is the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date will be revised, and, where required by law, we will provide additional notice. Continued use of the Site after an update constitutes acceptance.

19. Contact

Danielle Roches SAS
17 Rue du Colisée
75008 Paris, France
Email: contact@talika.com