Privacy policy
Last updated: August 4, 2026
TOUT AU CLAIR operates this shop and website, including all associated
information, content, features, tools, products, and services, and also
provides messaging and automation services to business clients (together, the
"Services"). Our online shop is based on Chariow (www.chariow.com), which
enables us to provide you with the shop. This privacy policy describes how we
collect, use, or share personal data when you visit, use, or make a purchase
or other transaction using the Services, when you contact us or one of our
business clients through a messaging channel we operate, or when you otherwise
communicate with us. If there is a conflict between our general terms and
conditions and this privacy policy, this privacy policy takes precedence
regarding the collection, processing, and sharing of your personal data.
Please read this privacy policy carefully. By using and accessing any of the
Services, you confirm that you have read this privacy policy and agree to the
collection, use, and sharing of your data as described in this privacy policy.
WHAT PERSONAL DATA DO WE COLLECT OR PROCESS?
When we use the term "personal data," we refer to information that identifies
you or another person or can be directly associated with you. Personal data
does not include information that is collected anonymously or has been
anonymized in such a way that identification or association with you is not
possible. Depending on how you interact with the Services, where you live, and
as permitted or required by applicable law, we may collect or process the
following categories of personal data, including inferences drawn from such
personal data:
Contact information including name, mailing address, billing address, shipping
address, phone number, and email address.
Financial data including credit, debit card and financial account numbers,
payment card information, financial account information, transaction details,
payment method, payment confirmation, and other payment details.
Account information including username, password, security questions,
configurations, and settings.
Transaction information including items you view, add to cart, wishlist, or
purchase, return, exchange, or cancel, as well as your past transactions.
Communication with us including information you provide when communicating
with us, for example, when you send a customer support inquiry or send us a
message on a messaging channel we operate.
Messaging data including the content of the messages and media you send us,
as described in the section "WhatsApp Business Platform and messaging
services" below.
Device information including information about device, browser, or network
connection, IP address, and other unique identifiers.
Usage information including information about your interaction with the
Services, including how and when you interact with or browse the Services.
SOURCES OF PERSONAL DATA
We may collect personal data through the following sources:
Directly from you - We collect data when you create an account, access or use
the Services, communicate with us, or otherwise provide us with your personal
data.
Automatically through the Services - We collect data from your device or when
you use our products or services or visit our website, as well as through the
use of cookies and similar technologies.
From messaging platforms - We receive data from Meta Platforms, Inc. when you
contact us or one of our business clients through the WhatsApp Business
Platform, as described below.
From our service providers - We collect data when we engage service providers
to enable certain technologies and when they collect or process your personal
data on our behalf.
From our partners and other third parties.
HOW DO WE USE YOUR PERSONAL DATA?
Depending on how you interact with us or which Services you use, we may use
personal data for the following purposes:
Providing, customizing, and improving the Services. We use your personal data
to provide you with the Services. This includes fulfilling our contract with
you, processing your payments, executing your orders, storing your
configurations and items you're interested in, sending notifications related
to your account, creating, maintaining, and otherwise managing your account,
organizing shipping, facilitating returns and exchanges, enabling you to leave
reviews, and creating an individualized shopping experience for you by, for
example, recommending products based on your purchases. This may also include
using your personal data to better customize and improve the Services.
Receiving and answering your messages. We use messaging data to receive your
messages, answer them, provide the support or the service you ask for, and
operate and maintain the messaging channel.
Marketing and advertising. We use your personal data for marketing and
advertising purposes, such as sending marketing and advertising communications
via email, SMS, or mail, and displaying online advertising for products or
services for the Services or other websites, including based on items you have
previously purchased or added to your cart, as well as other activities
related to the Services. We do not use data received from the WhatsApp
Business Platform for advertising or ad targeting.
Security and fraud prevention. We use your personal data to authenticate your
account, provide a secure payment and shopping experience, detect,
investigate, or take action on potentially fraudulent, illegal, unsafe, or
malicious activities, protect public safety, and ensure the security of our
Services. If you choose to use the Services and register an account, you are
responsible for protecting your account login credentials. We strongly
recommend that you do not share your username, password, or other access
credentials with other people.
Communication with you. We use your personal data to provide you with customer
support and effective services, respond promptly to your inquiries, and
maintain our business relationship with you.
Legal reasons. We use your personal data to comply with applicable law or
respond to lawful process, including requests from law enforcement or
regulatory authorities, to investigate or participate in civil investigations,
potential or actual litigation, or other adversarial proceedings, and to
investigate potential violations of our terms or policies or to investigate or
enforce the terms and policies. Our policy on requests from public authorities
is set out below.
WHATSAPP BUSINESS PLATFORM AND MESSAGING SERVICES
TOUT AU CLAIR operates messaging services on the WhatsApp Business Platform
(Cloud API) provided by Meta Platforms, Inc. ("Meta"). This section describes
how we handle data obtained through that platform, in addition to the
practices described elsewhere in this policy.
Data we receive from Meta. When you contact us, or a business client for whom
we operate a messaging channel, on WhatsApp, we may receive: your phone number
and WhatsApp identifier; your WhatsApp profile name; the content of the
messages you send, including text, images, documents, audio and other media;
message metadata such as timestamps, message identifiers, and delivery and
read status; and technical identifiers associated with the business account.
How we use it. We use this data only to receive and answer your messages, to
provide the support or service you request, to generate assisted or automated
replies, and to operate, secure and maintain the messaging service.
What we do not do. We do not sell this data. We do not use it for advertising
or ad targeting. We do not use it to train artificial intelligence models. We
do not share it with anyone other than the service providers listed in the
section below, and only to the extent necessary to operate the service.
Our role. Where we operate a WhatsApp messaging channel on behalf of a
business client, that client determines the purposes and means of the
processing and is the controller of the data; TOUT AU CLAIR acts as a
processor and processes the data only on that client's documented
instructions. Where we operate our own WhatsApp account, TOUT AU CLAIR is the
controller.
Automated processing. Some replies may be prepared or suggested with the help
of automated systems, including third-party artificial intelligence services
listed in the section below. You can ask to be put in contact with a person at
any time by replying in the conversation.
Your choices. You can stop the conversation at any time by asking us to stop
messaging you, or by blocking the number in WhatsApp. You may also ask us to
delete your messaging data, subject to the exceptions described under "Your
Rights and Choices".
SERVICE PROVIDERS AND SUB-PROCESSORS
We use a limited number of third-party service providers that process personal
data on our behalf. Each provider is engaged under its published terms and,
where the provider makes one available, under its data processing agreement,
requiring confidentiality, appropriate security measures, and processing only
on our instructions. Our current providers are:
Online shop and hosting: Chariow.
Infrastructure, code execution and content delivery: Cloudflare, Inc.
(United States).
Databases and storage: Supabase, Inc. (Ireland, United Kingdom, United
States).
Workflow automation: Make, a Celonis company (European Union; Germany, Czech
Republic, United States).
Productivity, cloud storage and artificial intelligence services: Google LLC
(United States, Ireland).
Media storage and image processing: Cloudinary Inc. (United States, United
Kingdom, Poland); Replicate, Inc. (United States).
Messaging interface used to receive and answer messages: Telegram FZ-LLC
(United Arab Emirates).
Artificial intelligence services: OpenAI, L.L.C. (United States); Anthropic,
PBC (United States).
We review this list whenever we add or remove a provider, and we update this
policy accordingly.
GOVERNMENT AND LAW ENFORCEMENT REQUESTS
We may receive requests from public authorities for personal data. We apply
the following policy to every such request.
Legality review. We review every request to assess its legal validity,
including whether the requesting authority has jurisdiction over us, whether
the request is based on a valid and identified legal instrument, and whether
it has been properly served. We do not disclose personal data in response to
informal or voluntary requests.
Challenging unlawful requests. Where we consider a request to be unlawful,
overbroad, or not properly founded in law, we will challenge it or require it
to be narrowed before responding, to the extent permitted by applicable law.
Data minimisation. Where we are legally required to respond, we disclose only
the minimum personal data strictly necessary to satisfy the request, and
nothing beyond it.
Documentation. We maintain an internal register of every request received,
recording the date of receipt, the requesting authority, the legal basis
invoked, the data disclosed or withheld, and the decision taken.
Notice. Where we are legally permitted to do so, we will notify the affected
individual, and any business client whose data is concerned, before
responding.
HOW DO WE SHARE PERSONAL DATA?
Under certain circumstances, we may share your personal data with third
parties for legitimate purposes in accordance with this privacy policy. Such
circumstances may include:
With Chariow and the other service providers listed above, who provide
services on our behalf (e.g., IT management, payment processing, data
analysis, customer support, cloud storage, fulfillment, and shipping).
With business and marketing partners who provide marketing services for you
and display advertising to you. For example, we use Chariow to support
personalized advertising with third-party services based on your online
activities across various merchants and websites. Our business and marketing
partners use your data in accordance with their own privacy policies.
Depending on where you live, you may have the right to instruct us not to
share information about you to display targeted advertising and marketing
based on your online activities across various merchants and websites. If you
wish to exercise your right and opt out of such uses, you have the opportunity
to do so here. We do not share data received from the WhatsApp Business
Platform with marketing or advertising partners.
Where we act as a processor for a business client, with that business client,
who is the controller of the data.
When you request us or otherwise give your consent to share certain
information with third parties, for example, to deliver products to you, or
when you use social media widgets or login integrations.
With our affiliates or otherwise within our corporate group.
In connection with a business transaction such as a merger or bankruptcy, to
comply with applicable legal obligations (including responding to subpoenas,
search warrants, and similar requests), to enforce applicable service terms or
policies, and to protect or defend the Services, our rights, and the rights of
our users or others.
RELATIONSHIP WITH CHARIOW
The online shop is hosted by Chariow, with Chariow collecting and processing
personal data about your access to and use of the shop to provide and improve
it for you. Data you submit to the shop is shared with Chariow as well as
third parties who may be located in countries other than your country of
residence to provide and improve the Services for you. To protect, expand, and
improve our business, we also use certain advanced Chariow features that
incorporate data and information from your interactions with our shop, with
other merchants, and with Chariow. To provide these advanced features, Chariow
may use personal data collected through your interactions with our shop, other
merchants, and Chariow. Under these circumstances, Chariow is responsible for
processing your personal data, including responding to your requests to
exercise your rights regarding the use of your personal data for these
purposes. For more information about how Chariow uses your personal data and
what rights you have, please see the Chariow Privacy Policy for Consumers at
www.chariow.com/privacy. Depending on where you reside, you may be able to
exercise certain rights regarding your personal data listed here through the
Chariow Privacy Portal. Chariow does not receive data from the WhatsApp
Business Platform.
THIRD-PARTY WEBSITES AND LINKS
The Services may provide links to websites or other online platforms operated
by third parties. If you follow links to websites that are not affiliate
websites or controlled by us, you should review their privacy and security
policies and other terms and conditions. We do not guarantee and are not
responsible for the privacy or security of such websites, including the
accuracy, completeness, or reliability of information found on these websites.
Information you provide in public or semi-public places, including information
you share on third-party social networking platforms, may also be viewed by
other users of the Services and/or users of those third-party platforms,
without restrictions on their use by us or by a third party. Our inclusion of
such links does not imply that we endorse the content of these platforms or
their owners or operators, unless this is expressly mentioned in the Services.
CHILDREN'S DATA
The Services are not intended for use by children, and we do not knowingly
collect personal data from children who are not of legal age in your country.
If you are the parent or guardian of a child who has provided us with their
personal data, you may contact us using the contact details provided below to
request deletion of such data. As of the effective date of this privacy
policy, we are not aware that we "share" or "sell" personal data of persons
under 16 years of age (as defined by applicable law).
SECURITY AND RETENTION OF YOUR DATA
Please note that no security measures are perfect or impenetrable, and we
therefore cannot guarantee "perfect security." Additionally, information you
send to us may also be exposed to risks during transmission. We recommend that
you do not use insecure channels when transmitting sensitive or confidential
information to us.
We restrict access to personal data to the people who need it to operate the
Services, we use access credentials that are unique to each service, and we
transmit data over encrypted connections.
How long we retain your personal data depends on various factors. These
include, for example, whether we need the data to manage your account, provide
you with services, comply with legal obligations, resolve disputes, or enforce
other applicable contracts and policies.
For data received from the WhatsApp Business Platform, we retain message
content and media only for as long as necessary to operate the messaging
service and to answer follow-up questions, and no longer than 24 months, after
which it is deleted. Where we act as a processor for a business client, we
delete the data or return it to that client when the service ends, unless we
are legally required to retain it.
YOUR RIGHTS AND CHOICES
Depending on where you reside, you may have some or all of the rights listed
below regarding your personal data. However, these rights are not absolute,
may only apply under certain circumstances, and in certain cases, we may
decline your request to the extent permitted by law.
Right of access/information. You may have the right to request access to the
personal data we have stored about you.
Right to deletion. You may have the right to request that we delete the
personal data we have stored about you.
Right to correction. You may have the right to request that we correct
inaccurate personal data we have stored about you.
Right to data portability. You may have the right to receive a copy of the
personal data we have stored about you and to request that we share it with a
third party under certain circumstances and with certain exceptions.
Right to opt out of sale or sharing of data for targeted advertising.
Depending on where you reside, you may have the right to opt out of the "sale"
or "sharing" of your personal data or object to the processing of your
personal data for purposes that constitute "targeted advertising" under
applicable privacy laws. If you wish to exercise your right and opt out of
such uses, you have the opportunity to do so here. Please note: If you visit
our website with the "Global Privacy Control" opt-out signal enabled,
depending on your location, we automatically treat this as an opt-out request
for the device and browser you use to visit the website. If we can associate
the device from which the signal originates with a Chariow account, we also
apply the opt-out request to that account. More information about Global
Privacy Control can be found at https://globalprivacycontrol.org/. Apart from
Global Privacy Control, we do not recognize other "Do Not Track" signals that
may be sent by your web browser or device.
Managing communication preferences. We may send you promotional emails. You
may opt out of receiving these emails at any time by using the unsubscribe
option included in our emails to you. If you opt out, we may still send you
non-promotional emails, such as those about your account or orders you have
placed.
Where we process your data as a processor on behalf of a business client, we
will forward your request to that client and act on their instructions.
If you reside in the United Kingdom or the European Economic Area, you may
exercise the following additional rights, subject to exceptions and
limitations under local law, in addition to the rights mentioned above:
Right to object and right to restriction of processing. You may have the right
to request that we stop or restrict the processing of personal data for
certain purposes.
Withdrawal of consent. Where we rely on consent to process your personal data,
you have the right to withdraw that consent. If you withdraw your consent,
this does not affect the lawfulness of processing based on your consent before
withdrawal.
You may exercise these rights as indicated in the Services or by contacting us
using the contact details provided below. For more information about how
Chariow uses your personal data and what rights you have, including rights
regarding data processed by Chariow, please visit
https://www.chariow.com/privacy.
You will not suffer any disadvantages by exercising these rights. Where
permitted or required by applicable law, we may need to verify your identity
before we can process your requests. In accordance with applicable laws, you
may designate an authorized agent to make requests to exercise your rights on
your behalf. Before we accept such a request from an agent, we require the
agent to provide proof that you have authorized them to act on your behalf,
and we may require you to verify your identity directly with us. We will
respond to your request promptly within the scope of applicable law.
COMPLAINTS
If you have complaints about how we process your personal data, please contact
us using the contact details provided below. Depending on where you reside,
you have the right to appeal our decision by contacting us using the contact
details provided below or by filing your complaint with the relevant data
protection authority. For the European Economic Area, there is a list of
relevant data protection supervisory authorities. If you wish to access this,
you have the opportunity to do so here.
INTERNATIONAL TRANSFERS
Please note that we may transfer, store, and process your personal data
outside the country where you reside. TOUT AU CLAIR is established in the
Republic of Benin, and the service providers listed above process personal
data in the United States, Ireland, the United Kingdom, Germany, the Czech
Republic, Poland and the United Arab Emirates.
When we transfer your personal data outside the European Economic Area or the
United Kingdom, we rely on recognized transfer mechanisms such as the European
Commission's Standard Contractual Clauses or equivalent contracts issued by
the relevant UK authority, unless the data transfer is to a country that
demonstrably provides an adequate level of protection.
CHANGES TO THIS PRIVACY POLICY
We may update this privacy policy from time to time, for example, to reflect
changes in our practices or for other operational, legal, or regulatory
reasons. We will post the revised privacy policy on this website, adjust the
"Last updated" date accordingly, and make the notification required by
applicable law.
CONTACT
If you have questions about our privacy practices or this privacy policy, or
if you wish to exercise any of your rights, please contact us at
contact@toutauclair.com. For the purposes of applicable data protection laws,
we are the data controller for your personal data, except where we act as a
processor on behalf of a business client as described above.
Our contact information is posted below:
TOUT AU CLAIR
N'DEMBA MAYEL-KERY BOSSE
RCCM RB/ABC/26 A 141885 - IFU 0202674861358
Grand-Popo, Mono, Republic of Benin
contact@toutauclair.com
https://store.toutauclair.com
OPT-OUT PREFERENCES
To opt out of targeted advertising and data sharing, please use the
preferences center available on our website or contact us directly using the
information provided above.