Politique de confidentialité

This Privacy Policy describes how shesherose.shop collects, uses, stores, shares, and otherwise processes personal information when you visit our website, interact with our services, communicate with us, or make a purchase.

This Privacy Policy is intended to provide transparency regarding our processing of personal data in connection with our Shopify-based online store.

The GDPR requires information about personal-data processing to be concise, transparent, understandable, and easily accessible.

1. Who Is Responsible for Your Information

For the purposes of this Privacy Policy, the store responsible for the relevant processing activities described below is:

shesherose.shop
Email: info@shesherose.shop

Questions relating to personal data or privacy rights may be directed to this email address.

2. Personal Information We May Collect

Depending on how you interact with shesherose.shop, we may collect the following categories of information.

Identity and Contact Information

This may include:

• name;
• email address;
• billing information;
• shipping details;
• information you include in communications with us; and
• account information where customer accounts are available.

Order and Transaction Information

This may include:

• products purchased;
• order numbers;
• order value;
• purchase history;
• shipping method;
• return or refund history;
• transaction status; and
• information necessary to process or administer your order.

Payment Information

Payments may be processed by Shopify Payments, card networks, financial institutions, PayPal, or other payment providers made available at checkout.

Payment providers may collect or process card or account details according to their own privacy practices.

We generally receive information relating to the status of the payment rather than complete payment-card credentials.

Device and Usage Information

When you access our website, information may be processed automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• approximate location derived from technical information;
• pages viewed;
• referring pages;
• interaction information;
• session information; and
• cookie or similar technology identifiers.

Customer Service Information

When you contact us, we may process:

• your email address;
• name;
• order number;
• messages;
• photographs or documents you choose to provide;
• return or refund information; and
• other information necessary to resolve your enquiry.

Marketing Information

Where applicable, we may process:

• marketing preferences;
• email subscription status;
• campaign interactions; and
• consent records.

3. How We Use Personal Information

We may process personal information for purposes including:

Providing Our Services

We use information to:

• process purchases;
• confirm orders;
• collect and verify payments;
• fulfil orders;
• arrange shipping;
• provide delivery information;
• process returns;
• issue refunds;
• provide customer support; and
• administer customer accounts.

Communicating With You

We may use contact information to send:

• order confirmations;
• shipping notifications;
• service communications;
• return and refund information;
• customer support responses;
• security notifications; and
• other communications associated with a transaction or request.

Security and Fraud Prevention

We may process personal information to:

• identify potentially fraudulent transactions;
• protect customer accounts;
• prevent unauthorised activity;
• maintain website security;
• enforce our terms; and
• protect our rights and those of customers and third parties.

Legal and Regulatory Compliance

We may retain or disclose information where reasonably necessary to:

• comply with applicable legal requirements;
• maintain transaction and accounting records;
• respond to lawful requests;
• resolve disputes;
• establish or defend legal claims; and
• fulfil regulatory obligations.

Marketing

Where permitted by applicable law, we may use contact information to communicate information about products, promotions, or our store.

Where consent is legally required, marketing will be based on consent.

You may unsubscribe from marketing communications using the unsubscribe option included in applicable messages or by contacting info@shesherose.shop.

4. Legal Bases for Processing

Where the GDPR applies, our processing may rely on one or more legal bases, depending on the circumstances.

These may include:

Contractual necessity: where processing is necessary to accept, process, fulfil, or administer an order.

Legal obligation: where processing is required to satisfy obligations imposed by law.

Legitimate interests: where processing is reasonably necessary for legitimate business purposes such as security, fraud prevention, customer service, or improving our services, provided those interests are not overridden by applicable rights.

Consent: where you have given legally valid consent, including for certain marketing activities or cookies where consent is required.

5. Shopify and Service Providers

shesherose.shop uses Shopify technology to operate its online store.

We may also use service providers involved in areas such as:

• payment processing;
• order fulfilment;
• hosting and infrastructure;
• shipping and logistics;
• fraud prevention;
• analytics;
• website functionality;
• email communication;
• marketing;
• customer service; and
• professional advisory services.

These providers may process personal information to the extent necessary to provide their services.

Shopify recommends that merchants maintain accessible store policies, including privacy, refund, terms, and shipping information.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, tags, and similar technologies.

These technologies may be used for:

• essential website operation;
• checkout functionality;
• customer authentication;
• security;
• shopping cart functionality;
• remembering preferences;
• analytics; and
• advertising or marketing where applicable.

Under French rules, certain cookies and trackers require prior consent, while technologies strictly necessary to provide a service requested by the user may be exempt from prior consent. Consent, where required, must be capable of being withdrawn.

You may be provided with cookie controls or a consent interface when required.

Browser settings may also allow you to block or delete cookies, although blocking necessary cookies may affect website functionality.

7. Sharing Personal Information

We may share personal information with parties including:

• Shopify;
• payment processors;
• payment networks;
• banks and financial institutions;
• fulfilment partners;
• carriers and delivery providers;
• fraud-prevention providers;
• website and technology providers;
• customer support providers;
• analytics providers;
• marketing providers where legally permitted;
• accountants, lawyers, and professional advisers; and
• government or regulatory authorities where legally required.

We do not authorise service providers to use personal information for unrelated purposes except as permitted by applicable law or their independent legal relationship with you.

8. International Transfers

Some technology, payment, logistics, or service providers may process personal information in countries outside France or the European Economic Area.

Where GDPR requirements apply to an international transfer, appropriate legal mechanisms or safeguards will be used as required by applicable data protection law.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, contractual, security, accounting, tax, fraud-prevention, dispute-resolution, and regulatory purposes.

Retention periods may vary depending on:

• the type of information;
• whether an active customer relationship exists;
• applicable legal obligations;
• contractual requirements;
• dispute or claim periods; and
• security requirements.

When information is no longer required, it may be deleted, anonymised, or otherwise handled in accordance with applicable law.

10. Your Data Protection Rights

Where the GDPR or other applicable privacy laws apply, you may have rights concerning your personal information.

These may include the right to:

• obtain information about processing;
• access personal information;
• correct inaccurate information;
• request deletion where legally available;
• restrict certain processing;
• object to certain processing;
• withdraw consent where processing is based on consent;
• receive eligible information in a portable format; and
• lodge a complaint with a competent data protection authority.

CNIL guidance confirms GDPR rights including access, rectification, erasure, restriction, portability, and objection, subject to their respective legal conditions.

11. Exercising Your Rights

To exercise a privacy right, contact:

info@shesherose.shop

Please describe the right you wish to exercise and provide sufficient information to allow us to identify the relevant data.

Where reasonably necessary, we may request information to verify identity before fulfilling a request.

We will respond in accordance with applicable legal requirements.

12. Direct Marketing

You may opt out of promotional emails at any time using the unsubscribe functionality included in relevant marketing communications.

You may also contact:

info@shesherose.shop

Stopping marketing communications does not prevent us from sending non-promotional communications necessary to administer an order, respond to a request, provide customer service, or communicate important service information.

13. Children's Privacy

shesherose.shop is intended for customers legally capable of entering into online purchase transactions.

We do not knowingly seek to collect personal information from children in circumstances prohibited by applicable law.

If you believe that a child has provided personal information improperly, contact info@shesherose.shop.

14. Information Security

We use reasonable administrative, organisational, and technical measures appropriate to our operations to protect personal information.

However, no internet transmission, electronic storage system, or online platform can be guaranteed to be completely secure.

Customers should protect their account credentials and should not send complete payment card details by ordinary email.

15. Third-Party Websites

Our website may contain links to websites, platforms, or services operated by third parties.

We are not responsible for the privacy practices of independent third parties.

Customers should review the privacy policies of any external website they choose to use.

16. Business Changes

If shesherose.shop undergoes a merger, restructuring, acquisition, financing transaction, transfer of business assets, or similar transaction, relevant personal information may be transferred as part of that transaction where legally permitted.

Any successor organisation will remain subject to applicable data protection obligations.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

• our business practices;
• technology;
• Shopify functionality;
• service providers;
• regulatory requirements; or
• applicable law.

The current version will be published on shesherose.shop.

18. Contact and Complaints

Questions about this Privacy Policy or our processing of personal information may be sent to:

shesherose.shop
Email: info@shesherose.shop