Privacy Policy
Privacy Policy
Last updated: June 2026
At Nubee, the protection of families — and especially children — is at the heart of what we do. This policy transparently explains what data we collect, why, and what your rights are, in accordance with the Regulation (EU) 2016/679 (GDPR) and the "Informatique et Libertés" law.
1. Data Controller
The data controller for your data is the company NUBEE (SAS), with its registered office at 204 Boucle du Monge, 24540 Saint-Romain-de-Monpazier, France. For any questions regarding your data, you can contact us at boutique@nubeebox.com.
2. Our "no child data" commitment
The Nubee device operates entirely offline. It has no microphone, does not connect to any WiFi network, and does not transmit any data to servers. No child listening data is collected, recorded, or shared. The parental application (PWA) communicates with the device only via Bluetooth, without collecting information about the child.
3. Data we collect
We only collect data strictly necessary for the purposes described below:
| Data | When |
|---|---|
| Identity (first name, last name) | Account creation, order |
| Contact details (email, phone, postal address) | Order, delivery, contact, newsletter |
| Order data (products, amount, history) | Purchase and pre-order |
| Payment data | Processed directly by our payment provider — no complete banking data is stored by Nubee |
| Browsing data (cookies, IP address, device type) | Site visit |
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing and tracking of your orders and pre-orders, delivery, after-sales service | Contract performance |
| Management of your customer account | Contract performance |
| Sending news, offers, and waiting list (newsletter) | Your consent |
| Accounting and tax obligations | Legal obligation |
| Site security and improvement of our services | Legitimate interest |
5. Recipients of your data
Your data is never sold. It may be shared with our technical subcontractors, only to the extent necessary for the performance of their mission: hosting and e-commerce solution (Shopify), payment provider, carriers, emailing tool, and our internal services. Each of these providers is bound by strict confidentiality and security obligations.
6. Transfers outside the European Union
Some of our providers may be located outside the European Union. In this case, transfers are governed by appropriate safeguards (standard contractual clauses of the European Commission or equivalent mechanisms) to ensure an adequate level of protection for your data.
7. Retention period
- Order data: retained for the duration of the commercial relationship, then archived in accordance with legal accounting obligations (up to 10 years).
- Customer account: until its deletion at your request, or after a period of prolonged inactivity.
- Prospects / newsletter: 3 years from your last contact.
- Cookies: maximum 13 months (see our Cookie Policy).
8. Protection of minors
Our products are intended for children, but our online services (website and purchases) are exclusively for adults. We do not knowingly collect data from children. Any account is created and managed by a parent or legal guardian.
9. Your rights
In accordance with the GDPR, you have the following rights at any time:
- Right to access your data;
- Right to rectification;
- Right to erasure ("right to be forgotten");
- Right to restriction and objection to processing;
- Right to data portability;
- Right to withdraw your consent at any time;
- Right to define directives regarding the fate of your data after your death.
To exercise these rights, please write to us at boutique@nubeebox.com. A response will be provided within one month. If you believe your rights are not being respected, you can lodge a complaint with the CNIL — www.cnil.fr.
10. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure (encrypted connections, restricted access, certified providers).