Privacy policy

Article 1 — Consent to collection of personal information

VOKCHOI, whose registered office is at 5 rue Camille Desmoulins, France (SIRET 10298438200014), provides a clear means for you to accept these terms, the collection of personal data and the purposes for which it is used, including by clicking “Agree” where such a button is displayed.

By creating an account, placing an order, submitting a contact or bespoke form, or clicking “Agree”, you are deemed to have consented to the collection and use of your personal data as described in this policy, to the extent permitted by the GDPR and French data-protection law.

Article 2 — Personal information collected and purposes of use

“Personal information” means any information relating to an identified or identifiable natural person, including information that can identify a person when combined with other data.

We collect and use personal data for the following purposes.

Account information

• Time of collection: when you create an account
• Mandatory items: name, email address, password
• Optional items: telephone number, shipping address, date of birth
• Purpose: account creation, customer service, notices relating to your orders and the Website
• Retention: deleted upon account closure, except where a statutory retention period applies (in particular five (5) years for purchase records)

Order information (members and guests)

• Time of collection: when you place an order or request a commission
• Mandatory items: purchaser details (name, address, telephone, email), recipient details where different, payment confirmation data processed by Stripe
• Optional items: order notes and gift messages
• Purpose: payment, production, delivery of ordered pieces and related customer service
• Retention: five (5) years, in line with French commercial and consumer-protection requirements

Enquiries and bespoke consultations may also be sent to contact@vokchoi.com, bespoke@vokchoi.com or press@vokchoi.com. We use the information you provide only to respond to the relevant request.

Article 3 — Cookies

The Website may store cookies or similar technologies on your device. A cookie is a small text file sent to your browser.

Purposes of cookies

• Essential operation of the site, including the shopping cart and account session
• Measuring visits and improving the service (including analytics provided through our hosting environment)
• Remembering preferences where you have chosen to allow this

Cookies identify a browser or device; they do not by themselves reveal your civil identity. You may accept or refuse non-essential cookies, or be prompted each time a cookie is stored, by changing your browser settings. If you refuse cookies that are required for the cart or account, some features of the Website may be unavailable.

Browser settings (indicative)

• Safari: Settings > Safari > Privacy & Security, or Safari > Settings > Privacy
• Chrome: Menu > Settings > Privacy and security > Third-party cookies
• Firefox: Settings > Privacy & Security > Cookies and Site Data

Article 4 — Retention, use and destruction of personal information

Personal data is deleted without undue delay once the purpose of collection has been fulfilled, unless a longer period is required to establish, exercise or defend legal claims or to comply with French or EU law, including:

• Contracts, payments and supply of goods: retained for five (5) years
• Customer complaints and disputes: retained for three (3) years
• Connection logs where legally required: retained for a limited period not exceeding what the applicable rules allow

Destruction. Data held on paper is shredded or otherwise destroyed. Electronic data is deleted or irreversibly anonymised so that it cannot reasonably be restored.

Inactive accounts. If an account has not been used for twelve (12) months, we may notify you. If there is no reply, the account may be closed and the data stored separately, then destroyed after the statutory retention period, unless you ask us to restore access before destruction.

Article 5 — Provision of personal information to third parties

We do not sell your personal data. We do not use it, or disclose it to other persons, companies or institutions, beyond the purposes in Article 2, except:

• where required by competent authorities in accordance with applicable law
• where data is shared in a form that does not identify you, for statistics or research
• where disclosure is required by a legal procedure that we must follow

Even in those cases, we take care that information is not disclosed more widely than the original purpose of collection allows.

Article 6 — Processors

To operate the Website and fulfil orders we use professional service providers, limited to what is necessary:

• Delivery of ordered pieces: DHL, La Poste and FedEx
• Hosting and site infrastructure: Vercel
• Payment processing: Stripe

Only the minimum information needed for each service is shared. Optional information is shared only where you have requested the related service. This list may change if providers or contracts change; material changes will be reflected in this policy.

Article 7 — Access and modification of personal information

You may access or update account information at any time through your account, or by writing to the privacy officer at contact@vokchoi.com. We will respond without undue delay.

If you ask us to correct inaccurate data, we will not use or disclose the contested data until it has been corrected, except where the law requires otherwise. If incorrect data has already been given to a processor, we will ask that processor to correct it.

Article 8 — Withdrawal of consent

You may withdraw consent to the collection, use or disclosure of your personal data at any time, including by closing your account or by contacting the privacy officer by email or in writing. We will then delete or anonymise the data that we are not required to keep, and we will confirm the measures taken.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal, nor records we must retain for tax, accounting or consumer-protection purposes.

Article 9 — Security of personal information

We implement technical and organisational measures appropriate to the risk, including:

• Encryption of passwords and protection of transmission where the service so provides
• Access limited to persons who need the data to perform their role
• Hosting with Vercel and payment handling by Stripe, which apply their own security programmes

No method of transmission or storage is completely secure. We work to reduce the risk of unauthorised access, loss or alteration.

Article 10 — Protection of children’s personal information

The Website is not directed at children. We do not knowingly collect personal data from persons under sixteen (16) years of age. If a parent or guardian believes a child has provided data, they may contact us and we will delete it.

Article 11 — Privacy officer

Questions, complaints and requests relating to personal data may be addressed to:

• Name: Yuyeong Choi
• Title: Founder
• Contact: contact@vokchoi.com
• Address: VOKCHOI, 5 rue Camille Desmoulins, France

You may also lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) in France, or with another competent EU supervisory authority.

Article 12 — Changes to this policy

This policy takes effect on 13 August 2026. Material changes will be announced on the Website at least seven (7) days before they apply, or thirty (30) days before if the change is unfavourable to you.