Privacy policy

Last updated: September 8, 2026

The Catmatik store (published by Wall Agency) operates this website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a personalized shopping experience (the “Services”).

Catmatik is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will govern with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing and using the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used and disclosed as described in it.

1. PERSONAL INFORMATION WE COLLECT OR PROCESS

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you or to another person. Personal information does not include information collected anonymously or that has been de-identified.

We may collect or process the following categories of personal information:

• Contact details: including your name, address, billing address, shipping address, phone number and email address.

• Financial information: including credit/debit card numbers (processed securely and encrypted), transaction details and payment confirmation.

• Account information: including your username, password, preferences and settings.

• Transaction information: including the items you view, add to your cart, purchase or return.

• Your communications with us: including the information you include in emails to customer support.

• Device information: including information about your browser, your IP address and other unique identifiers.

• Usage information: including information about how you interact with the Services (cookies).

2. SOURCES OF PERSONAL INFORMATION

We may collect personal information from the following sources:

• Directly from you: when you place an order, create an account or contact us.

• Automatically through the Services: through the use of cookies and similar technologies on our website.

• From our service providers: (e.g., Shopify, payment processors) when they process your information on our behalf.

3. HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information for the following purposes:

• Providing and improving the Services: processing your payments, shipping your orders, managing your account, and arranging returns and exchanges.

• Marketing and advertising: sending you communications about our new products (if you have opted in) and showing you relevant ads.

• Security and fraud prevention: authenticating your account and ensuring secure payments.

• Communicating with you: responding to your customer support requests.

• Legal reasons: complying with applicable law (e.g., retaining invoices for accounting purposes).

4. HOW WE DISCLOSE PERSONAL INFORMATION

We do not sell your data to third parties for money. However, some of the advertising tools we use (Pinterest pixels and internal analytics) send browsing data to their providers for ad targeting purposes, which some laws treat as a “sale” or “sharing” of data. You can opt out by writing to us at support@catmatik.com. We share your data in the following circumstances:

• With Shopify and our service providers (logistics, payment) to fulfill your order.

• With business partners for marketing purposes (subject to your consent).

• To comply with legal obligations.

5. RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify Inc. The information you submit through the Services will be transmitted to and shared with Shopify in order to provide the Services to you. Shopify is responsible for processing your personal information in connection with the platform. To learn more, see Shopify’s Privacy Policy.

6. DATA SECURITY AND RETENTION

Please note that no security measure is perfect. However, we use industry standards to protect your data.

Retention periods:

Type of data	Retention period	Reason
Order data (invoices, proof of purchase)	10 years	French accounting and tax obligations (Article L123-22 of the French Commercial Code)
Customer account data (name, email, address)	3 years after last activity	Customer relationship management and product warranty (2 years)
Browsing data (cookies, logs)	13 months	CNIL recommendations
Customer support data (tickets, emails)	3 years after resolution	Quality monitoring and potential disputes
Marketing data (newsletter consent)	3 years after last contact	CNIL recommendations

When these periods expire, your data is deleted or irreversibly anonymized. You may request early deletion of your data by contacting us (see section 7).

7. YOUR RIGHTS AND CHOICES (GDPR)

Under the General Data Protection Regulation (GDPR), if you reside in the European Economic Area, you have the following rights:

• Right of access: request access to the data we hold about you.

• Right to erasure: request the deletion of your data.

• Right to rectification: correct inaccurate data.

• Right to data portability: receive a copy of your data.

• Withdrawal of consent: if you have opted in to marketing, you can change your mind at any time using the unsubscribe link in our emails.

• Right to object: object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest, and unconditionally to direct marketing.

• Right to restriction: request the temporary suspension of processing that you dispute.

Legal bases for our processing:

• Performance of a contract: processing your order, delivery, returns, warranty, customer support.

• Legal obligation: retention of invoices and accounting records.

• Consent: analytics and advertising cookies, sending the newsletter.

• Legitimate interest: website security, fraud prevention, improvement of our services.

To exercise these rights, write to us at support@catmatik.com. We respond within one month. You can also write to our point of contact in France: 71 rue Jean de Bernardy, 13001 Marseille.

Right to lodge a complaint: if you believe that the processing of your data does not comply with the law, you may lodge a complaint with the supervisory authority of your country of residence. In France, this is the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

8. COOKIES

We use cookies and similar technologies to operate the website, measure its audience and deliver ads. These are the tools actually in use:

Tool	Provider	Purpose
Shopify (platform, cart, analytics)	Shopify Inc. (Canada)	Website operation and audience measurement
Google Ads and Google Analytics	Google LLC (United States)	Conversion measurement and advertising
Microsoft Clarity	Microsoft Corp. (United States)	Recording of browsing sessions (mouse movements, clicks, scrolling) and heatmaps
Pinterest pixel	Pinterest Inc. (United States)	Measurement and advertising
Klaviyo	Klaviyo Inc. (United States)	Newsletter sign-up and emails
ParcelPanel	ParcelPanel	Order tracking
CatMatik internal analytics	Wall Agency (ourselves)	Measurement of browsing and purchases, hosted on our own Cloudflare infrastructure
Cloudflare	Cloudflare Inc. (United States)	Website delivery and abuse protection

Details of our internal analytics (“CatMatik tracking”)

We operate our own audience measurement tool, hosted on our infrastructure (Cloudflare Workers, D1 database). It does not use cookies but your browser’s local storage (localStorage and sessionStorage), which is legally treated as a tracker. Here is exactly what is stored:

Key	Type	Content	Duration
cmk_vid	localStorage	Random visitor identifier (UUID). Contains no name, no email and no directly identifying data.	Until you delete it
cmk_sid	sessionStorage	Random session identifier	When the tab is closed, or after 30 minutes of inactivity
cmk_seen	sessionStorage	Timestamp of your last action, used to delimit the session	Length of the session
cmk_attrib	localStorage	Origin of your visit: ad click identifier (gclid, wbraid, gbraid), campaign parameters (utm_source, utm_medium, utm_campaign) and referring site	90 days
cmk_dev	sessionStorage	Device type inferred from screen width (mobile, tablet or desktop)	Length of the session

What we measure: the pages viewed, the product displayed and its price, and your interactions with the page (opening the FAQ, viewing reviews, opening the cart, adding to cart, starting checkout). These events are linked to your visitor identifier and your session, and sent to our server catmatik-tracking.shopify-dropseo.workers.dev.

Why: to measure the website’s audience, understand the purchase journey and attribute an order to the ad campaign that generated it. The data is neither resold nor passed on to any third party: it stays on our infrastructure.

How to opt out: clear your browser’s site data, use its private browsing mode, or write to us at support@catmatik.com to request deletion of the data associated with your identifier.

You can configure your browser at any time to block or delete cookies. Blocking analytics and advertising cookies does not prevent you from browsing or placing an order.

To object to these trackers or withdraw your consent, write to us at support@catmatik.com: we process your request within one month.

9. INTERNATIONAL TRANSFERS

Data controller. The controller of your data is Wall Agency, a limited liability company (LLC) organized under U.S. law, with its registered office at 530-B Harkle Road STE 100, Santa Fe, NM 87505, United States (EIN 88-1182923). Although the company is established outside the European Union, the processing of your data is subject to the General Data Protection Regulation (GDPR), since we offer goods to individuals located in the Union.

Transfers outside the European Union. Your data is transferred to and processed in the United States, where our registered office and most of our service providers (Google, Microsoft, Klaviyo, Pinterest, Cloudflare) are located, and in Canada for the Shopify platform. These transfers rely on the mechanisms provided for in Chapter V of the GDPR, in particular the European Commission’s standard contractual clauses and, where the provider is certified, the EU–U.S. Data Privacy Framework.

Representative in the European Union. In accordance with Article 27 of the GDPR, Wall Agency has appointed the following as its representative in the European Union:

GATSBIRD, a single-shareholder simplified joint-stock company (société par actions simplifiée à associé unique), registered with the Marseille Trade and Companies Register (R.C.S.) under number 882 469 927, with its registered office at 71 rue Jean de Bernardy, 13001 Marseille, France.
Contact: support@catmatik.com

GATSBIRD acts solely as a representative within the meaning of Article 27 of the GDPR: it is the point of contact for data subjects and supervisory authorities for any question relating to the processing of your data. GATSBIRD is neither the publisher of the website, nor the seller of the products, nor the data controller; these roles belong to Wall Agency. Contacting the representative does not affect Wall Agency’s liability under the GDPR.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy at any time. The most recent version will always be posted on this page.

11. CONTACT

For any question about this Policy or to exercise your rights, please contact us:

Email: support@catmatik.com

Contact form: Click here

Phone number: +33 6 58 45 08 79 (WhatsApp)

Customer service and return address (France): 71 rue Jean de Bernardy, 13001 Marseille, France

Business hours:
Monday – Friday: 8:00 a.m. to 6:00 p.m. (GMT+01:00)
Saturday – Sunday: 10:00 a.m. to 6:00 p.m. (GMT+01:00)

Response time: We reply within 1 business day.

For the purposes of applicable law, Wall Agency is the controller of your personal information.