Last updated: 2 October 2026
Data controller
NASTIBA, SAS with share capital of €1,000, 49 rue de Ponthieu, 75008 Paris, France — Paris Trade Register 947 995 098. NASTIBA operates the pilatellastudio.com store and the Pilatella brand.
Contact: hello@pilatella.com — +33 7 82 36 52 42
Data we collect
- Orders: surname, first name, delivery and billing address, email, telephone, order contents.
- Payment: processed directly by our payment providers. We have no access to any complete banking data.
- Customer service: the content of your messages and the photos you send us.
- Browsing: IP address, pages viewed, device used, via cookies and analytics tools.
- Newsletter: email address, only with your consent.
Purposes and legal bases
- Processing, shipping and tracking your orders, handling returns and warranties — performance of the contract.
- Sending you your exercise programme — performance of the contract.
- Keeping our accounts and tax records — legal obligation.
- Answering your requests and preventing fraud — legitimate interest.
- Measuring audience and improving the site — consent.
- Sending you our news and targeted advertising — consent, which can be withdrawn at any time.
Recipients
Your data is never sold. It is shared, strictly as necessary, with:
- Shopify: hosting of the store and order management;
- Amazon (multi-channel fulfilment service): preparation and delivery of your order, and its carriers;
- Shopify Payments, Klarna, PayPal: payment, depending on the method you choose;
- Systeme.io: sending the exercise programme and emails;
- our accountant and, where necessary, administrative or judicial authorities.
Where one of these providers processes data outside the European Union, the transfer is covered by recognised safeguards (European Commission standard contractual clauses or an adequacy decision).
Shopify also uses certain data for its own services, under its own responsibility: see the Shopify privacy policy.
Retention period
Order data: 10 years (accounting obligation). Marketing data: 3 years after the last contact. Analytics cookies: 13 months maximum.
Your rights
You have the right to access, rectify, erase, restrict and port your data and to object to its processing, as well as the right to withdraw your consent at any time. Write to hello@pilatella.com; we reply within one month. You may also lodge a complaint with the CNIL (cnil.fr) or the data protection authority of your country.
Cookies
Only cookies strictly necessary for the site to work are placed without your consent. Analytics and advertising cookies are activated only after you consent, which you can change at any time via the cookie banner.