Privacy policy

Last updated: October 16, 2026

1. Introduction

This Privacy Policy explains how TwentyTwo, operated by Kaymak, collects, uses, stores and protects the personal data of visitors and customers using our online store.

We are committed to processing personal data in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection laws.

2. Data Controller

Trading name: TwentyTwo
Operator name provided: Kaymak
Business status: French micro-enterprise
SIRET number: 93229416800012
Email: tchico2two@icloud.com

3. Personal Data We Collect

Depending on how you use our website, we may collect:

Identity information, such as your name and surname.
Contact details, including your email address, telephone number and postal address.
Order information, including products purchased, order amounts and order status.
Delivery and tracking information.
Customer service correspondence.
Technical and browsing information necessary for website operation and security.
Marketing preferences and consent records, where applicable.

Payments are processed by the relevant payment service providers. We do not store complete payment card numbers unless a specific legally authorized arrangement applies.

4. How We Use Your Data

We may use personal data to:

Process, prepare and deliver orders.
Receive payments and manage refunds.
Respond to customer enquiries.
Provide after-sales support.
Meet accounting, tax and other legal obligations.
Prevent fraud and protect our website.
Send marketing communications where legally permitted.
Improve our store in compliance with applicable cookie and tracking rules.

5. Legal Bases and Retention

Depending on the purpose, processing is based on contractual necessity, a legal obligation, our legitimate interests or your consent where required.

Personal data is retained for no longer than necessary for the relevant purpose, subject to applicable legal retention periods. Accounting records may generally need to be retained for ten years under French law.

Marketing, technical and browsing data are retained in accordance with the rules applicable to each type of processing.

6. Sharing Personal Data

We may share relevant information with service providers necessary to operate our business, including:

Shopify, for hosting and operating our online store.
Payment service providers.
Shipping companies and delivery providers.
IT and customer service providers.
Competent authorities where required by law.

Data is limited to what is necessary for each service. Some providers may process data outside the European Economic Area. Any applicable international transfers must be subject to safeguards required by the GDPR.

7. Cookies and Tracking Technologies

Our website may use cookies and other tracking technologies necessary for its operation, as well as analytics or advertising technologies depending on the tools installed.

Technologies requiring consent will only be activated after the required consent has been obtained.

8. Your Rights

Subject to applicable law, you may request access to your personal data, its correction or deletion, restriction of processing and, where applicable, data portability.

You may also object to certain processing activities and withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at:

tchico2two@icloud.com

You may also lodge a complaint with the French Data Protection Authority (CNIL) if you believe your rights have not been respected.