Politique de confidentialité

This Privacy Policy describes how mlle-champetrex.shop collects, uses, stores, discloses and otherwise processes personal information when individuals visit our website, make a purchase, communicate with us or otherwise interact with our online store.

For privacy enquiries or requests concerning personal data, contact:

Email: info@mlle-champetrex.shop

The General Data Protection Regulation applies to organisations processing personal data in circumstances falling within its territorial scope, including certain ecommerce businesses outside the EU that offer goods to individuals in France.

1. Scope of This Privacy Policy

This policy applies to personal information processed in connection with mlle-champetrex.shop, including information processed when you:

• Browse our store;
• Create or use a customer account;
• Place an order;
• Complete checkout;
• Contact customer service;
• Request a return or refund;
• Subscribe to marketing communications;
• Interact with cookies or similar technologies; or
• Otherwise communicate with us.

2. Personal Information We May Collect

Depending on how you interact with the store, we may process the following categories of information.

Identity and Contact Information

This may include:

• Name;
• Email address;
• Telephone number;
• Billing address;
• Shipping address; and
• Other contact information voluntarily supplied by you.

Order and Transaction Information

This may include:

• Products purchased;
• Order number;
• Purchase date;
• Order value;
• Currency;
• Shipping method;
• Delivery status;
• Return history;
• Refund information; and
• Relevant customer-service communications.

Payment Information

Payments are generally processed by Shopify, Shopify Payments or other payment providers.

We may receive information associated with a payment transaction, such as payment status, transaction identifiers or limited payment-method information.

Full payment-card credentials are generally processed through the relevant payment provider rather than being intentionally stored by us in ordinary customer-service systems.

Device and Usage Information

When you visit our website, information may automatically be collected concerning:

• IP address;
• Device type;
• Browser type;
• Operating system;
• Language settings;
• Referring website;
• Pages viewed;
• Date and time of visits;
• Website interactions; and
• Cookie or similar identifiers.

Communications

If you communicate with us, we may process the contents of your message and related correspondence necessary to answer your request and maintain appropriate business records.

3. Purposes for Processing Personal Information

We may process personal data for purposes including:

• Processing and fulfilling orders;
• Confirming purchases;
• Arranging delivery;
• Processing payments;
• Preventing payment fraud;
• Managing returns and refunds;
• Providing customer support;
• Responding to enquiries;
• Maintaining customer accounts;
• Complying with accounting, tax and legal obligations;
• Protecting the security of our website;
• Preventing abuse and fraudulent transactions;
• Improving website functionality;
• Measuring website performance;
• Managing customer preferences;
• Sending marketing communications where legally permitted; and
• Establishing, exercising or defending legal claims.

CNIL guidance emphasises that organisations should inform customers about what they do with personal data and provide accessible privacy information.

4. Legal Bases for Processing

Where the GDPR applies, we rely on one or more appropriate legal bases.

Performance of a Contract

We may process personal data when necessary to:

• Process your order;
• Collect payment;
• Deliver products;
• Provide contractual customer service;
• Manage returns; or
• Perform other obligations arising from a purchase.

Compliance With Legal Obligations

We may process information where necessary to comply with applicable:

• Tax requirements;
• Accounting requirements;
• Consumer-protection requirements;
• Fraud-prevention obligations;
• Regulatory requirements; or
• Lawful requests from competent authorities.

Legitimate Interests

Where appropriate and provided your fundamental rights and interests do not override those interests, we may rely on legitimate interests for purposes including:

• Securing our website;
• Preventing fraud;
• Maintaining business records;
• Improving our services;
• Handling customer disputes; and
• Protecting our legal rights.

Consent

We may rely on consent where legally required, particularly for certain:

• Marketing communications;
• Advertising cookies;
• Analytics cookies; and
• Similar tracking technologies.

Consent may be withdrawn at any time, without affecting the lawfulness of processing undertaken before withdrawal.

5. Marketing Communications

We may send promotional communications where permitted by applicable law.

Where prior consent is legally required, we will seek valid consent before sending electronic direct marketing.

French CNIL guidance states that valid consent must be freely given, specific, informed and unambiguous and must involve a positive action; consent cannot simply be inferred from acceptance of general terms.

Recipients may unsubscribe using the method provided in the communication or by contacting:

info@mlle-champetrex.shop

6. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage and similar technologies.

Some technologies are necessary for functions such as:

• Shopping-cart operation;
• Checkout;
• Security;
• Authentication;
• Fraud prevention; and
• Remembering essential preferences.

Other technologies may be used for:

• Analytics;
• Performance measurement;
• Advertising;
• Personalisation; and
• Marketing attribution.

Under French rules implementing the ePrivacy framework, certain non-essential trackers generally require prior user consent, while strictly necessary technologies may be exempt from consent requirements.

Where required, visitors will be provided with cookie choices through the applicable consent mechanism.

7. Shopify

Our store is powered by Shopify.

Shopify may process information necessary to provide ecommerce infrastructure and related services, including hosting, checkout, order administration, security and payment-related functionality.

Shopify may also process certain personal information for its own legally defined purposes under its applicable privacy terms.

Users should also review privacy information made available by Shopify where relevant.

8. Service Providers

We may disclose personal information to service providers where reasonably necessary to operate the store.

Recipients may include providers of:

• Website hosting and ecommerce technology;
• Payment processing;
• Fraud prevention;
• Order management;
• Warehousing;
• Fulfilment;
• Shipping and logistics;
• Customer support;
• Email services;
• Analytics;
• IT security;
• Accounting;
• Professional advice; and
• Regulatory compliance.

Service providers should receive only information reasonably necessary for the relevant purpose and should be subject to appropriate contractual or legal obligations where required.

9. Legal and Regulatory Disclosure

Personal information may be disclosed where reasonably necessary to:

• Comply with applicable law;
• Respond to lawful court orders;
• Respond to competent regulatory or governmental authorities;
• Investigate suspected fraud;
• Protect customers or other persons;
• Protect our legal rights; or
• Establish, exercise or defend legal claims.

10. International Transfers

Because ecommerce infrastructure, cloud services, logistics providers and payment processors may operate internationally, personal data may be processed outside France or the European Economic Area.

Where the GDPR applies and personal data is transferred to a country that does not benefit from an applicable adequacy decision, appropriate safeguards may be used where required, such as contractual safeguards recognised by EU data-protection law.

11. Data Retention

Personal information is not intended to be retained indefinitely.

Retention periods may depend on:

• The purpose for which information was collected;
• Duration of the customer relationship;
• Accounting requirements;
• Tax requirements;
• Consumer-law obligations;
• Fraud-prevention needs;
• Dispute limitation periods; and
• Other legal requirements.

When personal information is no longer reasonably necessary, it may be deleted, anonymised or securely archived where continued retention is legally required.

12. Data Security

We take reasonable organisational and technical measures intended to protect personal information from:

• Unauthorised access;
• Accidental loss;
• Unauthorised disclosure;
• Misuse;
• Alteration; and
• Destruction.

However, no internet transmission or electronic storage method can be guaranteed to be completely secure.

Customers should protect account credentials and notify us if they believe their account or personal information has been compromised.

13. Your GDPR Rights

Subject to applicable conditions and exceptions, individuals may have rights including:

• Right of access – to request information about personal data processed about them;
• Right to rectification – to request correction of inaccurate information;
• Right to erasure – to request deletion in circumstances provided by law;
• Right to restriction – to request limited processing in qualifying circumstances;
• Right to data portability – to receive certain data in a structured, commonly used and machine-readable format;
• Right to object – to object to certain processing based on legitimate interests and to direct marketing;
• Right to withdraw consent – where processing is based on consent; and
• Rights concerning certain automated decision-making where legally applicable.

To exercise a privacy right, contact:

info@mlle-champetrex.shop

We may request information reasonably necessary to verify identity and protect personal data from unauthorised disclosure.

14. Complaints to the CNIL

Individuals who believe their personal data has been processed contrary to applicable data-protection law may have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) or another competent supervisory authority.

This right exists independently of contacting us first.

15. Children's Privacy

Our store is not intended to knowingly solicit personal information from children who cannot lawfully enter into the relevant transaction or provide valid consent under applicable law.

If we become aware that personal information has been collected unlawfully from a child, appropriate steps may be taken to delete or otherwise lawfully handle the information.

16. Third-Party Websites

Our store may contain links to third-party websites or services.

We are not responsible for the independent privacy practices of third parties.

Customers should review the privacy information provided by those services before submitting personal data directly to them.

17. Changes to This Privacy Policy

We may update this Privacy Policy when appropriate to reflect changes in:

• Legal requirements;
• Technology;
• Store functionality;
• Service providers; or
• Data-processing practices.

The updated version will be published on mlle-champetrex.shop with a revised effective or update date.

18. Contact

Questions or requests relating to this Privacy Policy may be sent to:

Email: info@mlle-champetrex.shop