Date of last update : 23/02/2022


  1. Definitions
  2. Who is the Controller ? 
  3. Where do we collect your Personal Data ?
  4. What categories of Personal Data do we process?
  5. What Personal Data do we process and for what purposes? 
  6. Will you receive commercial offers? 
  7. Do we collect Personal Data from minors under the age of 16? 
  8. Who are the recipients of your Personal Data?
  9. Is your Personal Data transferred outside the European Union? 
  10. How long do we keep your Personal Data ? 
  11. What security measures are applied to your Personal Data ?
  12. What are your rights regarding your Personal Data ?
  13. How can you exercise your rights regarding your Personal Data? 
  14. How to contact our Data Protection Officer? 
  15. Update of our Privacy Policy ? 

1 - Definition : 

What is a « Personal Data » ? 

It is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, geolocation data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity. 

What is a « Personal Data Processing » ?

This is any operation or set of operations that may or may not be carried out by automated means on personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction 

What is a « Controller » ?

It is the natural or legal person, public authority, department or other body which, alone or jointly with others, determines the purposes and means of processing

What is a  « Processor » ? 

It is the natural or legal person who processes personal data on behalf of the controller.

What is a « Consent » ?

It is any free, specific, informed and unambiguous expression of will by which the data subject accepts, by a declaration or a clear positive act, that personal data concerning him/her be processed


2 - Who is the Controller ? 


JACADI, a public limited company (SA) with a capital of 25,84,956 Euros, registered with the Paris Registry of Trade and Companies under number 441 875 473, whose registered office is at 32 rue de Guersant, 75017 PARIS.


Al Shamsi Holdings LLC, located in Emarat Atrium Building, office 217, Dubai, UAE


Both companies are joint Controllers (“the Joint Controllers”) they determine together the purposes and means of the processing operations defined below. 


3 - Where do we collect your Personal Data ?

Your Personal Data may be collected through multiple channels, such as, our network of stores, our websites, our mobile applications, or by phone or social networks. 

4 - What categories of Personal Data do we process?

The table below identifies the main categories of Personal Data that we may process about you : 

Personal Data categoriesDescription of the category
Customer Account DataThis is data that are required to create a customer account and data that you may choose to provide in order to have a personalized experience on our site. This data includes, but is not limited to: email address, first name, last name, mailing address, other addresses for delivery or billing (e.g. business mailing address), number of children, password, loyalty number, name associated with the loyalty card, relationship to the child, child's first and last name, child's gender, child's date of birth.
Purchase DataThis is data relating to purchases you make on the website or in one of our stores. This data includes: Customer Account data (see above), bank details, delivery address (if different from the account address), delivery point selected for delivery, store selected for delivery, items ordered, date of order, date of delivery, items returned, date of return request, date of receipt of returned item, refund information.
Reservation DataThis is the data provided in order to reserve an item in a store. This data includes: name, first name, e-mail address, phone number, store selected to pick up the item.
Fidelity Account DataThis is data associated with your loyalty account allowing you to benefit from advantages on our website and in our stores. It can for example be: name, first name, e-mail address and postal address of the holder of the loyalty account, purchases made, number of loyalty points, date of subscription to the loyalty account, and possibly the first name and date of birth of your children.
Prospecting DataThis is the data we use to send you messages about our brands. This data includes: name, first name, e-mail address, telephone number.
Contest Participation DataThis is the data that you provide to us to participate in the contests that we organize. This data includes: name, first name, e-mail address, answers to the contest.
Geolocation DataThis is data about your geographical position at a specific time.
Customer Experience DataThis is data that you provide to us as feedback on our products and services.

5 - What Personal Data do we process and for what purposes?  


  Why do we collect your Personal Information? 

What are the categories of data concerned by this processing? 

What is the legal basis for processing your Personal Data? 

To create and manage your customer account 

To personalize your customer experience on our site

Customer Account Data 

Consent when you create your account without placing an order and for data that is not strictly necessary for the execution of the contract

Execution of the sales contract

To manage, track and process your order on our site

Purchase Data 

Execution of the sales contract

To make a reservation for an item in a store 

Reservation Data 

Execution of pre-contractual measures

Manage and track your fidelity program membership, offer you loyalty benefits

Fidelity Account Data 


Manage your subscriptions and send you brand news electronically. 

Allow us to set up and send you electronically advertising adapted to your needs. 

Prospection Data 

Consent :

In accordance with article L. 34-5 of the French Post and Electronic Communications Code, if the canvassing messages we send you concern products similar to those you have already purchased and if you have not objected to the sending of such messages.

To geolocate you in order to indicate to you the store or the point relay nearest to your geographical position to withdraw the order or the article which you reserved

Geolocation Data


To improve our products and our website based on your experience

Customer Experience Data 

Legitimate interest of the data controller

Fight against Fraud 

Customer Account Data, Fidelity Account Data, Purchase Data, Reservation Data, Prospection Data, Contest Participation Data

Legitimate interest of the data controller


6 - Will you receive commercial offers?

We may use your Personal Data in the context of a commercial approach towards you, by e-mail and/or by SMS. 


We respect the rules relating to the prior and express collection of the customer's consent for the sending of commercial prospecting. 

When you create your account on the site, you are expressly asked to give your consent to receive promotional offers and news from us. Therefore, you will not receive any commercial prospecting if you have not consented to it. 

More information on your rights in section n°12 "What are your rights on your Personal Data?”. 


7 - Do we collect Personal Data from minors under the age of 16? 

We may collect Personal Data relating to children under 16 years of age. As such, the member agrees to be the holder of parental authority of the latter.  

8 - Who are the recipients of your Personal Data? 

The Joint Controllers will only transmit your Personal Data to third parties for canvassing purposes if you have given your consent in this respect. 
Internal recipient

Commercial Partners : “IDKIDS’ community” brand marks : Okaidi, Obaibi, Oxybul éveil et jeux, Idkids, Jacadi, N’Joy, Rigolo Comme La Vie, Bubblemag, Idtroc

Internal Authorized Services : sales, communication, marketing, IT, human resources, innovation, action fund

External recipient

Authorized personnel of  : 

Service Providers

Subcontractors, within the framework of the following missions : management of the customer service, management of the online chat, processing and delivery of the order on the e-commerce site, routing of SMS and commercial emails, detection and prevention of fraud. The subcontractors act only on our behalf and on our instructions. 

9 - Are your Personal Data transferred outside the European Union? 

Personal Data could be transferred outside the European Union, especially in the case of  social networks exploitation.  

10 - How long do we keep your Personal Data ? 

Find below the Data retention Period of the Processings : 

Data’s categories 

Data retention Period 

Customer Account Data

Fidelity Account Data 

From the activation of the Customer Account and 5 years in archive after the Customer Account is deleted 

Purchase Data

Reservation Data

Banking Data : Period of the payment execution 

Other Purchase Data : 1 year in the active base and 4 years in archive 

Prospection Data3 years from the last contact we had with you  
Contest Participation DataPeriod of the Contest and 1 year in active base, then 4 years in archive 
Geolocation Data 1 month after the Data’s registration 

 11 -  What security measures are applied to your Personal Data ?

The Joint Controllers take the necessary measures to ensure the security and the confidentiality of the Personal Data given, respecting the legal dispositions.en vigueur.  

12 - What are your rights regarding your Personal Data ?

In accordance with the European Regulation 2016/679 of 27 April 2016 on the protection of Personal Data, you have the following rights:  
Right of Access

You have the right to access your Personal Data. A copy of your Personal Data would be sent to you.

Right to request the rectification 

You have the right to request the rectification of your Personal Data, if these need an update. 

Right to Object

You have the right to Object, anytime, to a process of your Personal Data, unless it is a legal obligation. 

Right to erasure 

You have the right to erase your Personal Data.

Right to consult 

You have the right to consult your personal Data in a structured format, frequently used and readable by machine.You can require the transmission of your Personal Data directly to the Controller when it is technically possible. 

Right of limitation

You can obtain the limitation of a process,  Vous avez le droit d’obtenir la limitation du traitement, including when your Personal Data are not correct. 

Right to make advance directives

You can communicate your directives concerning your Personal Data after your death. You just have to address your wishes. 


13 - How can you exercise your rights regarding your Personal Data? 

You can exercise your rights : 

By mail, writing to : JACADI UAE  Emarat Atrium Building, Office 217, Dubai, P.O. Box 40020, Dubai or/and JACADI, 32 rue Guersant, 75017 PARIS

Online : or CONTACT FORM 


Please note, in the exercise of rights by applicants,  our Customer service could check your identity by asking a valid identity card copy, if and only if there was reasonable doubt as to the identity of the applicant. 

To facilitate the process of your request, it is easier to communicate your name, surname, email address and, if you have one, your fidelity account number.  


The Joint Controllers commits to answer your request within a month from the date of the exercise of your right. 

Moreover, to facilitate the access to your rights : 

Every newsletter sent by the company JACADI propose you an unsubscribe link, that let you in a click, to unsubscribe easily to the newsletters and actualities of the trademark or/and its Partners ones ;

Every SMS sent by the company  JACADI propose you a « STOP SMS » ; 

You can manage your preferences about the commercial prospection by logging your Customer Account, in « My newsletters et alerts » section. 

Finally, we remind you that you have the possibility of seizing at any time the Commission Nationale Informatiques & Libertés (CNIL):


14 - How to contact our Data Protection Officer ? 

The company JACADI has names a DPO, that you can contact anytime by : 

Mail at the address : JACADI 32 rue Guersant, 75017 PARIS, 

or by using the contact form by choosing the section (Personal Data Protection) 


15. Update of our Personal Data policy 

The Joint Controllers could have to amend her Personal Data Policy. This modification is specified on the top of the section by writing the last date of update.