Privacy policy

Privacy Policy — Hustle & Ice

Last updated: 9 September 2026

Data Controller

HUSTLE & ICE
Bât. 1, Esc. B
Rue Marcel Honoré
78270 Bonnières-sur-Seine
France

Hustle & Ice is the data controller responsible for the processing of personal data collected through our website, orders, customer accounts and customer interactions.

Data Protection Officer

Given the size and nature of our business, Hustle & Ice is not required to appoint a Data Protection Officer under Article 37 of the GDPR.

All data protection matters are handled directly by the business owner, who acts as the contact point for questions and requests relating to personal data.

1. Personal Data We Collect

We collect only the personal data necessary for the purposes described in this Privacy Policy.

Data you provide directly

When you place an order, create an account, subscribe to communications or contact us, we may collect:

First and last name
Billing and shipping address
Email address
Phone number
Order and transaction details
Product and purchase information
Customer service and support messages
Account login information, where an account is created
Marketing preferences and consent records

Payment information

Payments are processed securely by third-party payment providers, which may include:

Shopify Payments
PayPal
Klarna

Hustle & Ice does not store full payment card numbers or full payment credentials on its own systems.

Payment providers may process personal data independently for certain purposes, including payment processing, fraud prevention, security, regulatory compliance and other legally required activities, in accordance with their own privacy policies.

Data collected automatically

When you browse or interact with our website, we may collect certain technical and usage information, including:

IP address
Browser and device type
Operating system
Approximate geographical location
Pages viewed
Products viewed
Interactions with the website
Referring source
Cookie identifiers and similar technologies

Depending on your consent and the configuration of our services, this information may be collected through cookies, pixels and similar tracking technologies.

Data received from third parties

We may receive personal data from service providers and business partners involved in operating our store, including:

Shopify
Payment providers
Shipping and logistics providers
Customer support tools
Analytics providers
Advertising and marketing platforms, including Meta, Google and TikTok
Fraud prevention and security services

2. How We Use Your Data and Legal Bases

We process personal data only where there is a lawful basis for doing so.

Purpose	Legal basis
Process and fulfil orders	Contract performance
Arrange shipping and delivery	Contract performance
Process payments	Contract performance and legal obligations
Provide customer support	Contract performance and legitimate interests
Manage customer accounts	Contract performance
Handle returns, refunds and exchanges	Contract performance and legal obligations
Prevent fraud and abuse	Legitimate interests and legal obligations
Maintain website security	Legitimate interests
Accounting and invoicing	Legal obligation
Send marketing communications	Consent, where required
Measure website performance and audience	Consent, where required
Personalise advertising and measure advertising campaigns	Consent, where required
Comply with legal and regulatory obligations	Legal obligation

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

You may unsubscribe from marketing communications at any time using the unsubscribe link included in our emails or by contacting us.

3. Sharing of Personal Data

We may share personal data with trusted service providers where necessary to operate Hustle & Ice and fulfil your requests.

These may include:

Shopify — e-commerce platform, hosting and store infrastructure
Payment providers
Shipping and logistics providers
Customer support and communication tools
Analytics providers
Marketing and advertising platforms
Fraud prevention and security providers
Professional or technical service providers where necessary
Public authorities where disclosure is required by law

Service providers may process personal data on our behalf or, where applicable, act as independent controllers for certain processing activities.

We do not sell personal data.

4. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA), including in countries such as the United Kingdom, United States or other countries where our service providers operate.

Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law.

Depending on the circumstances, safeguards may include:

Adequacy decisions adopted by the European Commission or other competent authorities
Standard Contractual Clauses (SCCs)
UK International Data Transfer Agreements or Addendums
Other legally recognised transfer mechanisms

Shopify provides merchants with tools and contractual mechanisms intended to support compliance with applicable data protection requirements, but the merchant remains responsible for its own privacy practices and configuration.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Typical retention periods include:

Data type	Retention period
Orders, invoices and accounting records	Up to 10 years where required by applicable accounting law
Customer account data	For the duration of the account and, where appropriate, for a limited period after inactivity
Customer support requests	For as long as necessary to handle the request and, where appropriate, to manage potential disputes
Customer data used for marketing	Until consent is withdrawn or, where applicable, up to 3 years after the end of the customer relationship
Marketing consent and preference records	For as long as necessary to demonstrate and manage consent or objection
Analytics data	According to the configuration and retention periods of the relevant analytics provider
Cookie and tracking data	According to the applicable cookie category, consent and technical configuration

Accounting and invoicing records may be retained for 10 years where required by French accounting obligations. The CNIL also recommends a three-year period after the end of the customer relationship for customer data used for commercial prospecting.

When personal data is no longer required, it will be deleted, anonymised or archived where legally justified.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate, secure and improve our website.

Depending on their purpose, cookies may be used to:

Operate the website
Maintain shopping carts and checkout functionality
Remember preferences
Maintain security
Measure website performance
Analyse website usage
Personalise content
Measure advertising performance
Deliver or personalise marketing where permitted

Types of cookies used

Strictly necessary cookies
These are required for essential website functions such as the shopping cart, checkout, account functionality and security. They cannot be disabled where they are technically necessary.

Functional cookies
These may remember preferences such as language or other website settings.

Analytics cookies
These help us understand how visitors use our website and improve its performance.

Marketing and advertising cookies
These may be used by services such as Meta, Google or TikTok to measure advertising campaigns, personalise advertising or understand interactions with our marketing.

Non-essential cookies are used only where the required consent has been obtained.

You can manage or withdraw your cookie choices through the cookie consent mechanism available on our website, where applicable.

You may also control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

For certain audience-measurement technologies, the CNIL recommends limiting the lifetime of the tracker to a period such as 13 months and limiting the retention of the collected information to 25 months.

7. Children

Our website and services are not intended for children under the age of 16.

We do not knowingly collect personal data from children under 16.

If we become aware that personal data relating to a child under 16 has been collected without appropriate authorisation, we will take reasonable steps to delete it.

8. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against:

Unauthorised access
Loss
Destruction
Alteration
Unlawful disclosure
Other unauthorised processing

However, no online service or method of transmission can guarantee absolute security.

9. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights:

Right to access your personal data
Right to correct inaccurate or incomplete data
Right to request deletion
Right to restrict processing
Right to object to certain processing
Right to withdraw consent
Right to data portability
Right to lodge a complaint with a competent supervisory authority

Some rights may be subject to legal limitations or conditions.

Exercising your rights

To exercise your rights, contact us at:

contact@hustleandice.com

We may request reasonable information to verify your identity before processing certain requests, particularly where this is necessary to protect your personal data from unauthorised disclosure.

We will normally respond to requests within one month of receiving them. Where permitted by applicable law, this period may be extended by up to two additional months for complex or numerous requests. In such cases, we will inform you of the extension and the reasons for it.

The CNIL confirms that data-subject requests should generally receive a response within one month.

10. Supervisory Authorities

France

Commission Nationale de l'Informatique et des Libertés (CNIL)
www.cnil.fr

United Kingdom

Information Commissioner's Office (ICO)
www.ico.org.uk

Customers may contact the competent data protection authority in their country of residence where applicable.

11. United States Privacy Rights

Customers located in the United States may have additional privacy rights depending on their state of residence.

Where applicable, these may include rights to:

Know or access personal information
Correct inaccurate personal information
Delete personal information
Obtain a copy of personal information
Opt out of certain forms of targeted advertising or certain data sharing
Exercise other rights provided by applicable state privacy laws

The availability and scope of these rights depend on the applicable state law and whether Hustle & Ice is subject to that law.

To exercise an applicable privacy right, contact: