Privacy Policy
Effective date: April 14, 2025
Last updated: April 14, 2025
1. About this policy
ThrowBlankets operates the website throw-blankets.com. In this policy, "we," "us," and "our" refer to the business that runs this store. "You" refers to any person who visits our website, places an order, or contacts us.
We are the data controller for the personal information described here. Because our business is established in France, we process personal information in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR), regardless of where you live.
For any question about this policy, write to us at support@throw-blankets.com.
2. What this policy covers
This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to our website and to any email we send you.
It does not apply to third-party websites you reach through a link on our site. Those sites have their own policies and we are not responsible for them.
3. Information we collect
3.1 Information you give us directly
When you place an order, we collect your name, shipping address, billing address, email address, phone number if you provide one, and the contents of your order. Payment card details are entered on our payment provider's systems and are never stored on ours.
When you subscribe to our email list, we collect your email address and, if you provide it, your first name.
When you leave a review, we collect the name you choose to display, your rating, your review text, and any photograph you attach.
When you contact us, we collect your email address and whatever you choose to include in your message, including any photograph you send to support a claim under our Refund and Replacement Policy.
3.2 Information we collect automatically
When you visit our website, we or our service providers automatically collect your IP address, approximate location derived from that IP address, browser type and version, device type, operating system, referring page, the pages you view, and the time and duration of your visit.
We use your approximate location to display shipping information relevant to your country. This is derived from your IP address and is not precise geolocation data.
Cookies and similar technologies are described in section 5 and in our Cookie Policy.
3.3 Information we receive from others
Our payment provider tells us whether a payment succeeded or failed and gives us a limited set of details for fraud prevention and dispute handling. Our email provider tells us whether you opened an email or clicked a link in it.
We do not buy personal information from data brokers and we do not enrich your record with information purchased from third parties.
4. Why we use your information, and on what legal basis
4.1 To process and deliver your order, including sending order confirmations, shipping notifications, and handling claims. Legal basis: performance of a contract with you, Article 6(1)(b) GDPR.
4.2 To respond to your questions and provide customer support. Legal basis: performance of a contract, or our legitimate interest in answering people who write to us, Article 6(1)(b) and 6(1)(f) GDPR.
4.3 To publish reviews you submit. Legal basis: your consent, Article 6(1)(a) GDPR.
4.4 To send marketing emails about our products, discounts, and new designs. Legal basis: your consent, Article 6(1)(a) GDPR. You can withdraw consent at any time using the unsubscribe link in any email.
4.5 To operate, secure, and improve our website, including measuring how visitors use it and measuring the performance of our advertising. Legal basis: your consent for non-essential cookies, analytics, and advertising measurement, Article 6(1)(a) GDPR, and our legitimate interest in keeping the site working and secure, Article 6(1)(f) GDPR.
4.6 To prevent fraud and handle payment disputes. Legal basis: our legitimate interest in protecting the business against fraudulent orders and chargebacks, Article 6(1)(f) GDPR.
4.7 To meet our legal obligations, including accounting and tax record keeping under French law. Legal basis: compliance with a legal obligation, Article 6(1)(c) GDPR.
5. Cookies and tracking
We use cookies and similar technologies. Some are strictly necessary to make the site work, including keeping items in your cart and securing your session. Others are used to measure site usage and to measure the performance of our advertising.
Non-essential cookies are set only after you consent through our cookie banner. You can change or withdraw your choice at any time using the cookie settings link in our footer.
Third parties operating on our website may collect information about your online activity over time and across different websites. Where that is the case, it is identified in our Cookie Policy.
We do not respond to browser "Do Not Track" signals, because no common standard for those signals has been adopted. We do recognize the Global Privacy Control signal and treat it as a request to opt out of any sharing of personal information for advertising purposes.
6. Who we share your information with
We do not sell your personal information, and we do not share it for cross-context behavioral advertising in exchange for payment.
We share personal information with the following categories of recipients, only to the extent needed for them to perform their function:
6.1 E-commerce platform and hosting providers, who host our website and store order data.
6.2 Print production and order fulfillment providers, who receive your name, shipping address, and order contents in order to produce and ship your order.
6.3 Shipping carriers, who receive your name, shipping address, and contact details in order to deliver your order.
6.4 Payment processing providers, who receive your payment and billing details in order to take payment and handle disputes.
6.5 Email marketing and customer messaging providers, who receive your email address and engagement data in order to send our emails.
6.6 Product review providers, who receive the review you submit and the email address used to invite it.
6.7 Analytics and website measurement providers, who receive usage data about your visit.
6.8 Advertising platforms, which receive limited event data about visits and purchases so we can measure whether our advertising works.
6.9 Professional advisers, including our accountant, and public authorities, where we are required by law to disclose information.
If our business is sold or transferred, personal information may be transferred as part of that transaction. We will tell you before that happens if it affects how your information is used.
7. International transfers
Some of our service providers are located in the United States or process data there. When personal information is transferred outside the European Economic Area, we rely on one of the safeguards permitted under Chapter V of the GDPR, which are, depending on the provider, the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework.
You can ask us for details of the safeguard applied to a specific transfer by writing to support@throw-blankets.com.
8. How long we keep your information
Order and invoice records: ten years from the end of the financial year, as required by French accounting law.
Customer account and contact details, where no further order is placed: three years from your last contact with us.
Marketing consent and email engagement data: three years from your last interaction with our emails, or until you unsubscribe, whichever comes first.
Reviews you publish: until you ask us to remove them.
Support emails and claim photographs: three years from the close of the claim.
Cookie and analytics data: no longer than thirteen months for cookie identifiers, in line with the recommendation of the French data protection authority.
At the end of these periods we delete the information or anonymize it so that it can no longer be linked to you.
9. Your rights
Under the GDPR, you have the right to access the personal information we hold about you, to have inaccurate information corrected, to have your information deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time where our use is based on consent.
To exercise any of these rights, write to support@throw-blankets.com. We will respond within one month. We may ask you to confirm your identity before we act, and we will only ask for what is necessary to do so.
Exercising these rights is free. We will not refuse service, charge you a different price, or provide you with a lower quality of service because you exercised them.
If you are unhappy with how we handled your request, you can lodge a complaint with the Commission Nationale de l'Informatique et des Libertes (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or with the supervisory authority in your country of residence.
10. If you live in the United States
We do not sell your personal information and we do not share it for cross-context behavioral advertising as those terms are defined under California law.
Whatever state you live in, you can ask us to access, correct, or delete the personal information we hold about you, using the email address in section 9. We apply the same process to every request we receive, regardless of where you live.
You can request a copy of the categories of personal information we have disclosed to third parties, as described in section 6.
11. Children
Our website is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Products in our store that feature designs intended for a child's room are sold to adults.
If you believe a child has given us personal information, write to us at support@throw-blankets.com and we will delete it.
12. How we protect your information
Our website uses encryption in transit. Access to order data is limited to the people who need it to run the business. Payment card details are handled by our payment provider and never reach our systems.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information and is likely to result in a high risk to your rights, we will notify you and the CNIL as required by Articles 33 and 34 of the GDPR.
13. Links to other sites
Our website may link to other sites, including social media pages we operate. Once you leave our site, this policy no longer applies. We encourage you to read the privacy policy of any site you visit.
14. How we notify you of changes
We may update this policy. When we do, we will change the "Last updated" date at the top of this page and post the revised policy at this address. If a change materially affects how we use your personal information, we will tell you by email before it takes effect, if we have your email address, or by a notice on our homepage.
15. If you live in Canada or Australia
If you live in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act and, if you live in Quebec, with the Act respecting the protection of personal information in the private sector. You may ask for access to your information and for correction of any inaccuracy by writing to support@throw-blankets.com.
If you live in Australia, we handle your personal information in accordance with the Australian Privacy Principles set out in the Privacy Act 1988. You may ask for access to your information and for correction of any inaccuracy by writing to the same address.
16. How to reach us
Privacy questions and rights requests: support@throw-blankets.com
Order and support questions: support@throw-blankets.com