Privacy Policy

Effective Date: September 20, 2026

This Privacy Policy is issued by GROUPE TOPIDEA, located at Acajou, Résidence Varinia, Bât C, Appt 29, 97232 Le Lamentin, France. You may contact us for any privacy-related inquiries via email at reel@groupetopidea.com, or by phone at +596 596427746, or through our official website www.groupetopidea.com. This document sets out the systematic rules governing how we collect, use, store, share and protect your personal information when you access, browse and use our e-commerce shopping platform, and fully clarifies all rights you are entitled to regarding your personal data. We are committed to strictly complying with global personal data protection regulations including the General Data Protection Regulation (GDPR), French local data protection laws, as well as internationally recognized “lawful, legitimate, minimum necessary, transparent and traceable” privacy protection principles, to build a trusted, secure shopping environment for every user.

1. Core Definition of Personal Information

For the purposes of this Privacy Policy, “personal information” refers to all kinds of information related to an identified or identifiable natural person, collected through your interaction with our platform. This includes but is not limited to basic identity information, contact information, transaction data, device information and online behavior traces that can be used alone or in combination with other data to locate your specific identity. We strictly follow the minimum necessary principle throughout all data processing activities, and never collect any information that is irrelevant to the normal operation of our e-commerce service.

2. Scope and Purposes of Information Collection

We only collect personal information that is necessary to achieve the clearly stated service functions of our e-commerce platform, and each type of collected information corresponds to an explicit, reasonable and service-related purpose, without using vague descriptions such as “improving user experience” to cover indefinite data collection behaviors:

  • Account registration and identity verification information‌: When you register an account on our platform, we may collect your nickname, profile picture, mobile phone number and email address. This information is used to verify your identity, generate your unique user ID, display relevant information in order records, product review sections and account personal center, and send you core service notifications such as order status updates, after-sales processing alerts and important policy changes.
  • Order fulfillment and delivery related information‌: To complete the commodity transaction and distribution process, we collect your consignee name, accurate delivery address and contact phone number. These data are exclusively used for logistics distribution, order confirmation and after-sales service follow-up. We will perform desensitization processing on partial information such as hiding intermediate digits of your mobile phone number before transmission to downstream logistics partners, to avoid unauthorized leakage of your sensitive personal data.
  • Payment related transaction information‌: When you complete the payment for goods, we will not store your complete bank card number, payment password or full credit card information on our servers. We only transmit necessary transaction verification data to authorized payment institutions to complete the settlement process, and strictly follow the financial regulatory requirements of relevant regions to ensure the security of your payment information.
  • Device and security log information‌: We collect basic device parameters including your device model, operating system version, IP address, browser type and unique device identifier, as well as platform access time, browsing tracks, operation records and other log information. These data are only used for platform security risk identification, preventing account theft, abnormal transaction fraud, troubleshooting system failures, and performing anonymous aggregated statistical analysis to optimize our page operation logic and product display experience. The aggregated statistical data after anonymization processing cannot be associated with any specific personal identity.
  • Optional sensitive information with separate authorization‌: For services that do not belong to the core functions of the e-commerce platform such as locating nearby offline pick-up points, recommending regional exclusive goods, uploading order vouchers and identity verification materials, we will apply for separate authorization from you before collecting your location information, album access permission or biometric information such as face recognition data. The precision of the collected location information is controlled within 100 meters, and you can turn off this permission at any time through your system settings or the privacy management page of the platform. Refusal to grant these non-essential permissions will not affect your normal browsing of goods, placing orders and using all core shopping functions of the platform.

When you visit our website for the first time, we will present this complete Privacy Policy to you through a prominent top banner on the homepage, and we will not adopt hidden ways such as “login as consent” or pre-checked default consent to force you to accept all data processing rules.

3. Rules for Information Use and Storage

All your personal information collected by GROUPE TOPIDEA will only be used within the scope of the purposes clearly notified to you in this Privacy Policy, and we will never expand the use scope without your additional explicit consent:

  • We will use your non-sensitive information for anonymous de-identification analysis, to optimize our commodity recommendation logic, adjust distribution efficiency, improve page operation fluency and reduce unnecessary operation steps, all of which are aimed at enhancing your overall shopping experience without involving the association of specific personal identities.
  • We will never use your mobile phone number, delivery address and other sensitive information for unauthorized marketing promotion and commercial spam message push, unless you explicitly submit a separate application to us and confirm that you agree to receive our new product notifications and exclusive discount information. We will never construct user portraits based on your sensitive attributes such as health status, sexual orientation, religious belief, which violates public order and good customs.
  • In terms of information storage security, all data transmission processes on our platform adopt HTTPS protocol combined with TLS 1.3 encryption standard. Your sensitive personal information such as mobile phone number, address and identity document data is stored after being encrypted by the AES-256 algorithm, and is physically isolated from conventional business data. The encryption key will be dynamically updated on a regular basis to effectively prevent the risk of key leakage. All operation logs related to personal information access will be stored on a dedicated independent security server, and the retention period will not be less than 6 months as required by laws and regulations.
  • We set a clear and compliant data retention cycle: your account related information will be kept during the valid period of your account, and we will retain the necessary audit data for 6 months after you submit the account cancellation application, then completely delete or anonymize all your personal information beyond the legal retention requirements. Complete transaction records will be retained for 5 years in accordance with the legal provisions to facilitate after-sales rights protection, financial verification and regulatory compliance check, and other service records such as location use traces and picture upload records will be automatically deleted after being retained for 12 months after the corresponding service is completed.

4. Information Sharing and Cross-Border Transmission Specification

GROUPE TOPIDEA will never sell, rent or publicly disclose your personal information to any third party for commercial profit. We only conduct limited information sharing in the following legal scenarios, and we will strictly review the data protection capability of all shared objects in advance:

  • We will share the desensitized consignee information with our authorized logistics partners, which is only limited to the minimum data required to complete the commodity distribution, and we have signed a dedicated non-disclosure agreement with all logistics service providers to restrict their behavior of secondary collection and unauthorized use of your personal information.
  • Necessary transaction data will be transmitted to qualified payment institutions, which is only used to complete the order payment and settlement process, and the whole process strictly complies with the financial supervision and data protection regulations of the relevant jurisdiction.
  • When our platform embeds third-party functional SDKs such as data statistics tools and customer service plug-ins, we will clearly list the name, collected fields and specific usage of these third-party components in this Privacy Policy, and all these third-party service providers are prohibited from collecting your personal information beyond the authorized scope.
  • When we are required to provide your personal information by the legally empowered law enforcement authority and regulatory department in accordance with the formal legal procedures, we will provide the corresponding data within the scope required by law, and we will not arbitrarily disclose your personal information to any irrelevant third party without legal basis.
  • For all cross-border transmission scenarios of personal information involved in our cross-border business, we will strictly fulfill the corresponding legal assessment procedures in accordance with the provisions of GDPR and relevant regulations of the user’s location. We will sign a dedicated cross-border data transmission agreement with the overseas recipient, clearly stipulate the data protection responsibility and safety protection measures of both parties, and ensure that the cross-border transmission of your personal information is fully compliant and safe.

5. Your Full Rights over Personal Information

We provide you with a simple and efficient operation path to ensure that you can fully exercise all your legitimate rights regarding your personal information, and the operation path for most rights will not exceed 3 steps:

  • Right of access and correction‌: You can log in to the “Settings – Privacy Management” page of your account at any time to view all your personal information stored on our platform, and you can complete the modification and update of your delivery address, contact information, profile picture and other information by yourself on the relevant page. If you encounter difficulties in independent operation, you can also contact our customer service team, and we will respond to your request for information correction within 72 working hours.
  • Right to delete and withdraw consent‌: You can apply to us for deleting your specific personal data such as historical browsing records, partial historical order information at any time, and we will complete the deletion operation and give you feedback within 72 hours. For non-essential permissions such as location, album access and notification push, you can withdraw your authorization at any time through the system settings or the platform privacy management page. After you withdraw the authorization, we will no longer collect the corresponding type of information, and your normal use of the core shopping functions of the platform will not be affected.
  • Right to account cancellation‌: We set a clear and easy-to-find account cancellation entry on the account settings page. After you submit a valid account cancellation application, we will complete all the information cleaning procedures within 30 working days, except for the data that we are required to retain by laws and regulations for audit purposes. After the account is cancelled, we will no longer collect, use or process any of your personal information.
  • Right to data portability‌: You can submit an application to us for exporting all your personal information structured files including historical order records and personal profile data, we will provide the corresponding data in a common machine-readable format within the time specified by law, to facilitate your data migration to other service platforms.

For users under the age of 14, we will trigger a special Children’s Privacy Protection Notice when they try to register an account or place an order, and we will collect their personal information only after obtaining the explicit consent of their guardians. We will limit the single order amount for minor users within 500 Euros, and will not push interest-oriented personalized advertisements for minors, while strictly shielding all inappropriate content that is not suitable for underage users. Users under the age of 18 are requested to use our platform under the accompaniment and guidance of their guardians.

6. Update and Contact of Privacy Policy

In response to the adjustment of new personal data protection regulations and the optimization of our platform’s service functions, we will update this Privacy Policy as needed. After the policy is updated, we will notify you through a prominent pop-up window when you log in to the platform for the first time after the update, and the revised new version of the policy will take effect on the announced date. If you continue to use our platform services after the effective date of the new policy, it means that you fully understand and agree to the revised content of the updated Privacy Policy.

If you have any questions, comments or complaints about this Privacy Policy, or you need to exercise your relevant rights regarding personal information, please do not hesitate to contact us via the following contact information:

  • Contact Email: reel@groupetopidea.com
  • Official Website: www.groupetopidea.com
  • Postal Address: Acajou, Résidence Varinia, Bât C, Appt 29, 97232 Le Lamentin, France
  • Contact Phone: +596 596427746

We will respond to all your privacy-related inquiries and requests within 15 working days, and work with you to safeguard the security of your personal information and your legitimate rights and interests together.