Privacy Policy — Colissimo Officiel for Shopify

Version of 27 October 2026

This policy explains what data the Colissimo Officiel app for Shopify (the "App") processes, why, and for how long. The App is published by BT CONSULTING – LE STUDIO DE TOM, SAS, 11 rue Bisson, 85100 Les Sables-d'Olonne, France (the "Publisher").

1. Who is responsible?

• For the data of the store's customers (parcel recipients), the merchant is the controller. The Publisher acts as processor, on the merchant's behalf and instructions.
• For the data of the merchant and their team (account, subscription, support), the Publisher is the controller.

2. Data processed

Category	Data	Use
Store customers	Name, company, address, phone, email	Labels, customs declarations, tracking, returns, notifications
Orders	Number, items, weights, values, status	Picking, shipping, customs declarations
Parcels	Tracking number, delivery events	Tracking, claims
Returns	Reasons, optional photos	Returns center
Merchant and team	Store, contact email, members and their roles	Account, subscription, support, security
Colissimo credentials	Login and password or API key	Calls to Colissimo web services (stored encrypted)

The App accesses this data through the Shopify permissions granted at installation.

3. What we don't do

• We do not sell any data.
• We send no advertising to the store's customers. Emails to customers are sent from the merchant's own email account or through Shopify notifications.
• We do not use any data to train artificial intelligence.

4. Anonymous statistics

The Publisher compiles aggregated statistics on shipping activity: benchmarks shown in the App and service improvement. Synced orders are sent to an internal service of the Publisher, hosted in France (Amazon Web Services, Paris), which anonymizes them on receipt, including the store's identity. No data identifying a person or a store is kept. Legal basis: the Publisher's legitimate interest.

5. AI agent (optional)

The merchant can connect an AI assistant of their choice (Claude, ChatGPT, Gemini, Shopify Sidekick…) to the App. This module is off by default and can only be enabled by the Shopify account owner. The assistant has read-only access. It is a provider chosen by the merchant, under its own terms. Every access is logged and can be revoked at any time.

6. Sub-processors

Provider	Use	Location
Scalingo	Hosting of the App and its database	France
Amazon Web Services	File storage (labels, declarations, slips), anonymous statistics	France (Paris)
Mailjet	App emails to the merchant	European Union
Crisp	Support chat with the merchant	European Union
Google Cloud Translation	Translating product titles for customs declarations (no personal data)	—
OpenStreetMap (Nominatim)	Address search when a customer looks for a pickup point: only the typed text is sent	United Kingdom (adequate country)

Services the merchant enables themselves (La Poste – Colissimo, their email server, Klaviyo, Brevo, Slack, Teams, their AI assistant…) are the merchant's own providers.

7. Retention

• Orders: deleted after 100 days by default (adjustable by the merchant).
• Files (labels, declarations, slips, exports): 90 days.
• On uninstall: the store's data is deleted. Only its configuration (settings, shipping address, encrypted Colissimo credentials) is kept to make reinstalling easier; it is deleted on request.
• Access or erasure requests sent by Shopify: handled by our support team, together with the merchant, within the one-month legal deadline.

8. Security

Hosting in France, encrypted connections, Colissimo credentials encrypted in the database, document access through time-limited signed links, role-based permissions, log of denied access attempts.

9. Your rights

A store's customers exercise their rights (access, rectification, erasure, objection) with the merchant, whom the Publisher assists. The merchant and their team can write to contact@lestudiodetom.com. Anyone may also lodge a complaint with the CNIL (www.cnil.fr).

10. Changes

This policy may change; the version date is shown at the top.
Contact: contact@lestudiodetom.com.