Mobile App Privacy Policy

Last updated: 15 September 2026

This Mobile App Privacy Policy explains how ERVERTE SAS (“ERVERTE”, “we”, “us” or “our”) processes personal data when you use the ERVERTE Paris mobile application for iOS or Android (the “App”). It supplements the general privacy information available on erverte.com.

1. Data controller and contact

ERVERTE SAS is the data controller for personal data processed in connection with the App where ERVERTE determines the purposes and means of processing.

For privacy questions or requests relating to your personal data, contact us at contact@erverte.com.

2. Information processed through the App

Depending on how you use the App, we may process information that is necessary to provide our services, including:

  • account and contact information, such as your name, email address, telephone number and delivery or billing details where provided;
  • customer, cart, checkout and order information needed to display, manage and fulfil purchases;
  • purchase history and information about products ordered;
  • communications and information you voluntarily provide when contacting customer service;
  • technical information such as device type, operating system, IP address, app or device identifiers, diagnostic information and push-notification tokens where technically required;
  • information about interactions with the App where necessary for its operation, security, performance or improvement.

We do not intentionally collect categories of sensitive personal data through the App.

3. Orders and payments

Purchases made through the App are connected to our Shopify store. Payment information is processed through Shopify and/or the payment provider selected during checkout. ERVERTE does not intentionally store full payment-card numbers through the App.

4. Mobile application provider

The ERVERTE Paris App is currently provided using Evlop – Mobile App, which connects the App with our Shopify store. Evlop may process technical, device, customer, checkout and order information where necessary to provide and operate the mobile application services.

You can review Evlop’s privacy information at evlop.com/privacy-policy.

5. Shopify

Shopify provides the ecommerce infrastructure used by ERVERTE. Personal data associated with customer accounts, checkouts and orders may therefore be processed through Shopify in accordance with the services used by ERVERTE.

More information is available in Shopify’s privacy documentation at shopify.com/legal/privacy.

6. Google Firebase and technical mobile services

The App may use Google Firebase services where required for technical operation, app configuration, security, diagnostics and push notifications. In that context, technical identifiers such as device or application identifiers, IP address and push-notification tokens may be processed.

Analytics or advertising measurement services are only considered active where they are actually enabled in the current production configuration of the App. We do not state that optional services such as AppsFlyer or CleverTap are used unless they are confirmed as active.

More information about Google’s privacy practices is available at policies.google.com/privacy.

7. Push notifications

If you enable push notifications, a technical device or push token may be processed in order to deliver those notifications. You can disable push notifications at any time through your device settings.

8. Purposes and legal bases

We may process personal data to:

  • provide and operate the App;
  • create and manage customer accounts;
  • process and fulfil purchases;
  • provide customer support;
  • send transactional or requested push notifications;
  • maintain security, prevent fraud and ensure technical performance;
  • comply with legal and regulatory obligations;
  • improve the App where permitted by applicable law.

Depending on the processing concerned, the legal basis may be performance of a contract, compliance with a legal obligation, ERVERTE’s legitimate interests, or your consent where consent is required.

9. Recipients and service providers

Personal data may be processed by ERVERTE and by service providers necessary to operate our ecommerce and mobile services, including Shopify, Evlop, payment providers and technical infrastructure providers such as Google Firebase where applicable.

We do not sell personal data. Any disclosure to a service provider is limited to what is necessary for the relevant service and is subject to applicable data-protection requirements.

10. International transfers

Some service providers used to operate the App may process personal data outside the European Economic Area. Where required by applicable law, appropriate safeguards are used for international transfers of personal data.

11. Data retention

Personal data is retained only for as long as necessary for the purposes for which it was collected and to meet applicable legal, accounting, security, fraud-prevention and dispute-resolution obligations. Certain transaction records may need to be retained after account deletion where required by law.

12. Account and data deletion

You may request deletion of your ERVERTE customer account and associated personal data, subject to information that we are legally required or otherwise legally permitted to retain.

To request deletion, contact contact@erverte.com and specify that your request concerns deletion of your ERVERTE account or personal data. We may need to verify your identity before completing the request.

13. Your data-protection rights

Subject to applicable law, you may have the right to request access to, correction of, deletion of, restriction of or portability of your personal data, and to object to certain processing.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the competent data-protection authority. In France, the competent authority is the CNIL.

14. Children

The App is not specifically directed at children and ERVERTE does not knowingly seek to collect personal data from children in violation of applicable law.

15. Security

ERVERTE and its service providers use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No method of electronic transmission or storage can provide absolute security.

16. Changes to this policy

We may update this Mobile App Privacy Policy when the App, its service providers, technical configuration or applicable legal requirements change. The latest version and revision date will be published on erverte.com.

17. Contact

For questions concerning this policy or your personal data, contact ERVERTE SAS at contact@erverte.com.

You can also consult the general ERVERTE Privacy Policy on erverte.com for additional information about processing associated with our online store.