My Color’s
FR — Français 0
AnimalsPrincessesKnightsDragonsCars and vehiclesDinosaursSpaceHolidays and seasonsFlowers and natureMandalasLearn and color
Log in Français

Privacy policy

This English version is a courtesy translation provided for your convenience. In the event of any discrepancy, the French version of this privacy policy prevails.

This policy explains what personal data we collect when you use the website https://www.mycolorsworld.com (My Color’s), why we use it, who we share it with, how long we keep it and how to exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act of 6 January 1978 (loi « Informatique et Libertés »).

Data controller

The data controller is [à compléter], [à compléter], [à compléter]. For any question about your data, write to us at colorshopworld@gmail.com or through our contact form.

Given the size of our business, we have not appointed a data protection officer: we handle your requests directly.

The data we collect

  • Order data: email address, contents and amount of the order, date and, where applicable, the name and country associated with the payment. When you pay, Stripe also sends us information about the transaction (identifier, status, type of payment method), but never your full card number.
  • Account data: email address, password, the coloring pages and books in your library, your order history, the date of your last login and, if you subscribe, your subscription status and credit balance.
  • Your messages: the information you give us when you write to us (name, email address, content of the message).
  • Chat assistant (artificial intelligence), if enabled: the messages you type in the chat, a conversation identifier, the language and the date. No order or account data is sent to the assistant. Please do not enter personal data or payment details in it.
  • Newsletter, if you sign up: your email address and the date you signed up.
  • Technical data: IP address, browser type, date and time of connection, recorded to keep the website running and secure, and the information stored in cookies (see our cookie policy).

Your email address is required to place an order: we use it to send you your files, create your account and contact you about your order. Without it, we cannot process your order. Other information is optional unless stated otherwise when it is collected.

This website is intended for adults: parents, teachers and childcare professionals. We do not knowingly collect data about children. If you believe a child has sent us personal data, please contact us and we will delete it.

Why we use your data and on what legal basis

  • Processing your orders and supplying your coloring pages (payment, confirmation email, downloads, library): performance of the contract with you (article 6(1)(b) GDPR).
  • Creating and managing your account, including sending the link to choose your password: performance of the contract.
  • Managing your subscription (monthly payments, credits, cancellation, subscription-related emails): performance of the contract and compliance with our legal information obligations.
  • Answering your messages and handling your complaints and guarantee claims: performance of the contract or, if you are not a customer, our legitimate interest in replying to you (article 6(1)(f) GDPR).
  • Keeping our accounts and meeting our legal obligations (invoices, accounting records, tax obligations, answering requests to exercise your rights): legal obligation (article 6(1)(c) GDPR).
  • Keeping the website secure and preventing fraud and abuse: our legitimate interest in protecting the website, our customers and our creations.
  • Running the chat assistant, answering your questions, improving its answers and preventing abuse: our legitimate interest.
  • Handling any disputes and defending our rights: our legitimate interest.
  • Sending you our newsletter, if you signed up: your consent (article 6(1)(a) GDPR), which you can withdraw at any time using the unsubscribe link included in every email.
  • Running the website (session, cart, login, remembering your language and your cookie choice): our legitimate interest in providing the service; these cookies are strictly necessary and do not require your consent.
  • Measuring website audience and the effectiveness of our advertising, only if these tools are enabled and only if you have agreed: your consent (article 6(1)(a) GDPR and article 82 of the French Data Protection Act). See our cookie policy.

We do not make any decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you. The random draw for the mystery coloring page only uses the list of coloring pages you already own, so as not to give you a duplicate.

Who receives your data

Your data is intended for [à compléter]. We never sell it. It is only shared with the service providers that help us run the shop, and only to the extent necessary for their tasks:

  • Our hosting provider, Render Services, Inc., which hosts the website and its database;
  • Stripe (Stripe Payments Europe, Limited, Ireland), which processes payments and, for the subscription, stores your payment method. Stripe partly acts as a separate controller, in particular for fraud prevention and for its own legal obligations relating to payments. Your card details are entered directly on Stripe’s payment page and are never sent to us;
  • Anthropic (Anthropic, PBC, United States), which provides the Claude artificial intelligence model used by the chat assistant. Only the messages you type in the chat (and the latest exchanges of the conversation) are sent to it, never your order or account data;
  • Our email-sending provider, which delivers the website’s emails (order confirmation, download links, password setup, subscription emails and, where applicable, the newsletter);
  • only if these tools are enabled and you have agreed through the cookie banner: Google (Google Ireland Limited, for Google Analytics 4 and Google Ads), Meta (Meta Platforms Ireland Limited, for the Meta Pixel for Facebook and Instagram), Pinterest (Pinterest Europe Limited, for the Pinterest Tag) and TikTok (TikTok Technology Limited, for the TikTok Pixel). For the collection and transmission of data through their tools, these companies may act as joint controllers with us or as separate controllers; they then use this data under their own privacy policies.

Your data may also be disclosed, on request, to authorities empowered by law (tax authorities, courts, etc.), to our advisers (accountant, lawyer) to the extent necessary for their tasks, and to the consumer mediator if you refer a dispute to them.

Transfers outside the European Union

Some of our providers, or companies in their groups, may process data outside the European Union, in particular in the United States. This is the case for Stripe, Anthropic (chat assistant) and, if you have accepted the corresponding cookies, for Google, Meta, Pinterest and TikTok (TikTok also states that data may be accessed from other countries, including China). The same applies to any other provider established outside the European Union or transferring data there.

These transfers are covered by the safeguards provided for in the GDPR: the European Commission’s adequacy decision of 10 July 2023 on the EU–US Data Privacy Framework, for certified US companies, and/or the standard contractual clauses adopted by the European Commission, together with supplementary measures where appropriate. You can obtain information about these safeguards by writing to us.

How long we keep your data

  • Customer account (including your library): until you ask us to delete your account, or at the latest 3 years after your last activity (last login or last order, provided you have no active subscription).
  • Orders, invoices and accounting records: 10 years from the end of the financial year, as required by law (article L123-22 of the French Commercial Code). This data is then archived and only accessed when necessary.
  • Newsletter and marketing: until you unsubscribe, and at the latest 3 years after our last contact with you (for example your last click in one of our emails or your last message).
  • Messages and requests: as long as needed to handle your request, then at the latest 3 years after our last exchange; if they relate to an order, they may be kept as long as the order.
  • Requests to exercise your rights: as long as needed to answer them and keep proof of our answer, up to 5 years; if you object to marketing, your email address is kept for 3 years on a suppression list, solely so that we do not write to you again.
  • Conversations with the chat assistant: 12 months maximum, then deleted.
  • Technical connection logs: 1 year maximum.
  • Cookies: session cookie mc_session up to 30 days; mc_consent cookie, which remembers your cookie choice, 6 months; mc_lang cookie, which remembers the language you chose, 1 year; audience measurement and advertising trackers, if you accepted them, 13 months maximum (the data collected by these tools is kept by Google, Meta, Pinterest or TikTok under their own rules).

In the event of a dispute, relevant data may be kept until it is finally resolved. At the end of these periods, your data is deleted or anonymised.

Security

We take appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure: encrypted connection (HTTPS), access to data limited to the people who need it, and payments handled by a specialised, certified provider (Stripe). If a data breach is likely to result in a high risk to your rights, we will inform you as required by the GDPR.

Your rights

You have the following rights over your data:

  • right of access: to know what data we hold about you and get a copy;
  • right to rectification: to have inaccurate or incomplete data corrected;
  • right to erasure: to have your data deleted, except where the law requires us to keep it (for example our accounting records);
  • right to restriction of processing, in the cases provided for by the GDPR;
  • right to data portability: to receive the data you gave us in a structured, commonly used format, or have it sent to another controller, where processing is based on the contract or your consent;
  • right to object: to object, on grounds relating to your particular situation, to processing based on our legitimate interest, and to object at any time, without giving a reason, to direct marketing;
  • right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (newsletter: unsubscribe link in every email; cookies: button available in our cookie policy);
  • right to give instructions on how your data should be stored, deleted and disclosed after your death (article 85 of the French Data Protection Act).

To exercise these rights, write to us at colorshopworld@gmail.com, through our contact form or by post to [à compléter], [à compléter]. We will reply within one month; this may be extended by two months for complex or numerous requests, in which case we will let you know. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it.

If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the supervisory authority of the EU country where you live.

Cookies

By default, we only use cookies that are strictly necessary for the website to work. Audience measurement and advertising tools can only be used with your consent, which you can change at any time. All the details are in our cookie policy.

Changes to this policy

We may update this policy, for example if we change providers or if the law changes. The date of the last update is shown at the bottom of this page. If we make a significant change, we will let you know by appropriate means (notice on the website or email).

Last updated: 5 octobre 2026