Privacy Policy | The Little Night

Last updated: 3 Oct, 2026.

This privacy policy describes how the personal data of people who visit shopify-little-night-hzjh.vercel.appand who place an order on The Little Night online store (the "site") is collected, used, kept, and protected. Its purpose is to tell you, in full transparency, about your rights and the commitments made to keep your data confidential and secure, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the "GDPR") and the French Data Protection Act of 6 January 1978, as amended.

Please read this document carefully. By using the site and placing an order, you acknowledge that you have read this policy. For cookies and trackers, please refer to our cookies policy. For the conditions of sale, see our Terms and Conditions and our legal notice.

1. Introduction and data controller

The controller of the personal data collected through the site is Kyronix Labs LLC, a limited liability company registered in the State of New Mexico, United States, identified under EIN 98-1961162. Kyronix Labs LLC operates the online store under the brand The Little Night and determines the purposes and means of the processing described in this policy.

Technical management, digital marketing, and operation of the site are carried out by ADZENCLICK, a French simplified joint-stock company (SAS) with share capital of €1,000, SIREN 978 699 932, RCS Metz, which acts as a service provider on behalf of Kyronix Labs LLC and according to its instructions.

For any question about the protection of your data, or to exercise your rights, you can contact the data controller by email at hello@thelittlenight.com, or by post at the registered office address indicated above. You can also use our Write to us page.

2. Data we collect

We only collect the data needed for the purposes described in this policy. Depending on how you use the site, the following categories of data may be processed:

Identity data: title, last name, and first name, given when an account is created or an order is placed.
Contact data: email address and, where applicable, phone number, used for order tracking and the customer relationship.
Delivery and billing address: the full postal address needed to ship your order and to issue accounting documents.
Order data: products ordered, amount, date and order history, and exchanges related to tracking.
Payment data: payment information (card number, expiry date, security code) is collected and processed directly by Shopify and its payment providers. We never have access to the full number of your bank card, which does not pass through our own servers.
Newsletter signup data: the email address you give us if you choose to receive our commercial communications.
Browsing data and cookies: IP address, browser type, pages viewed, connection data, and identifiers set by cookies and trackers, under the conditions set out in our cookies policy.
Messages to customer service: the content of messages, requests, and documents you send us when you contact us.

Most of this data is collected directly from you. Some technical browsing data is collected automatically when you visit. Required fields on forms are marked. If they are not filled in, we may be unable to process your order or your request.

3. Purposes and legal bases

Each processing activity rests on a legal basis provided by the GDPR. Your data is used for the following purposes:

Managing orders and the customer relationship (creating the account, processing, preparing, shipping, and tracking the order, managing returns and after-sales service): this processing is based on the performance of the contract between you and us, or on pre-contractual steps taken at your request.
Accounting, tax, and legal obligations (issuing and keeping invoices, managing any disputes): this processing is based on compliance with a legal obligation to which we are subject.
Sending the newsletter and commercial communications: this processing is based on your consent, which you can withdraw at any time, or on our legitimate interest in keeping customers informed about similar products, within the limits allowed by law.
Improving the site, measuring audience, and preventing fraud: these activities are based on our legitimate interest in ensuring the proper operation, security, and improvement of our services, or on your consent when cookies that are not strictly necessary are used.
Replying to your requests sent to customer service: this processing is based on our legitimate interest in answering you and maintaining the quality of the customer relationship.

4. Recipients and processors

Your data is intended for the authorized internal teams of Kyronix Labs LLC in charge of order management and the customer relationship. For the purposes described above, it may also be shared with the following recipients and processors, who act on our behalf and according to our instructions:

Shopify (Shopify International Limited, Dublin, Ireland), which provides the online store platform, hosts the customer database, and manages checkout and payment processing.
Payment providers operating through Shopify, responsible for securing and carrying out financial transactions.
The carrier in charge of delivery, which receives the data needed to ship your parcel (name and delivery address, contact details).
Vercel Inc. (United States), which hosts the site and handles its technical delivery.
ADZENCLICK (SAS with share capital of €1,000, SIREN 978 699 932, RCS Metz), which handles technical management, digital marketing, and operation of the site on our behalf.
Our email sending provider, which delivers transactional emails and, where applicable, the newsletter.

These providers are contractually required to keep your data confidential and secure, and to use it only for the purposes entrusted to them. Your data may also be disclosed to administrative or judicial authorities when the law requires it. We never sell your data, and we do not rent or exchange it with third parties for commercial purposes.

5. Transfers of data outside the European Union

Kyronix Labs LLC, the data controller, is a company established in the United States. Some of our processors, in particular Shopify and Vercel, may also host or process data from the United States or from other countries outside the European Union. As a result, your personal data may be transferred and processed outside the European Union, including to the United States.

When such a transfer is made to a country that does not ensure a level of protection recognized as adequate by the European Commission, we make sure it is covered by appropriate safeguards within the meaning of articles 44 and following of the GDPR. These safeguards rely in particular on standard contractual clauses adopted by the European Commission, supplemented where necessary by additional technical and organizational measures, or on any other transfer mechanism recognized by the applicable rules. You can obtain a copy of these safeguards, or information about their availability, by writing to us at hello@thelittlenight.com.

6. How long we keep data

Your data is kept only for as long as strictly necessary for the purposes for which it was collected, then archived or deleted in line with legal time limits:

Order and customer account data: kept for the duration of the contractual relationship, then archived in an intermediate database for as long as needed to manage any disputes.
Billing data and accounting documents: kept for the period required by the applicable legal and tax obligations, generally ten years from the close of the financial year.
Prospecting and newsletter data: kept until you withdraw your consent or unsubscribe, and at the latest three years from your last contact with us.
Cookies and trackers: kept for no longer than thirteen months, under the conditions set out in our cookies policy.
Messages sent to customer service: kept for as long as needed to handle your request, then archived according to the periods that apply to any disputes.

7. Your rights

Under the GDPR and the French Data Protection Act, you have the following rights over your personal data:

Right of access: obtain confirmation that your data is being processed and receive a copy of it.
Right to rectification: have inaccurate data corrected or incomplete data completed.
Right to erasure: ask for your data to be deleted, within the limits provided by law.
Right to restriction of processing: ask for the temporary suspension of the use of certain data.
Right to object: object, for reasons relating to your particular situation, to processing based on legitimate interest, and object at any time to commercial prospecting.
Right to data portability: receive the data you provided to us in a structured, commonly used, and machine-readable format, and transmit it to another controller.
Right to withdraw your consent at any time, when processing is based on consent, without that withdrawal affecting the lawfulness of processing carried out before the withdrawal.
Right to set instructions about what happens to your data after your death (post-mortem directives).

To exercise these rights, simply write to us at hello@thelittlenight.com, stating your request. We may ask you to prove your identity so that your data is not disclosed to a third party. We undertake to reply as soon as possible and, in any event, within one month of receiving your request, extendable by two months if the request is complex.

8. Complaint to the CNIL

If, after contacting us, you believe your rights are not being respected, you have the right to lodge a complaint with the competent supervisory authority. In France, that is the Commission nationale de l'informatique et des libertés (CNIL), whose contact details and how to refer a matter to it are available on its official website. You may also contact the data protection authority of your country of residence within the European Union.

9. Data security

We implement appropriate technical and organizational measures to protect your data against loss, alteration, unauthorized access, and disclosure. The site uses an encryption protocol for exchanges (HTTPS), and payment operations are secured by our specialized providers. Access to data is limited to authorized people who are bound by a duty of confidentiality. Despite all the care taken with security, no transmission of data over the Internet can be guaranteed as completely safe. We undertake to inform you, under the conditions provided by law, if a data breach is likely to result in a high risk to your rights and freedoms.

10. Cookies and trackers

The site uses cookies and other trackers intended to ensure that it works properly, to measure its audience and, subject to your consent, for personalization. You can set your preferences at any time and see the detail of the trackers used by consulting our cookies policy.

11. Children's data

Our products are intended for parents and responsible adults. The site is not intended for minors, and we do not knowingly collect personal data about children. If you believe a minor has sent us data without the authorization of their legal representatives, please contact us at hello@thelittlenight.com so that we can delete it where appropriate.

12. Changes to this policy

This privacy policy may be updated at any time, in particular to reflect legal, regulatory, technical, or organizational changes. The date of the last update appears at the top of this document. If there is a substantial change, we will inform you by an appropriate means. Please check this page regularly.

13. Contact

For any question about this privacy policy or the processing of your personal data, you can write to us at hello@thelittlenight.com or use our Write to us page.