Politique de confidentialité

Introduction

This Privacy Policy describes how vintage-clothing-store-jam.shop collects, uses, stores, shares, and otherwise processes personal data when you visit our online store, place an order, contact us, request a return, create an account, subscribe to communications, or otherwise interact with our services.

Privacy enquiries may be sent to:

info@vintage-clothing-store-jam.shop

This policy is intended to reflect applicable requirements of the General Data Protection Regulation ("GDPR") and relevant French data-protection law.

The GDPR can apply to ecommerce businesses outside the European Union where they offer goods or services to individuals in France or otherwise fall within its territorial scope.

Personal Data We May Collect

Depending on your interaction with our store, we may process information including:

Your name;

Email address;

Telephone number;

Billing address;

Shipping address;

Order information;

Products purchased;

Payment and transaction information;

Account information;

Customer-service correspondence;

Return and refund information;

Marketing preferences;

IP address;

Browser information;

Device information;

Cookie identifiers;

Website usage information;

And fraud-prevention information.

Information You Provide

We may collect information directly from you when you:

Place an order;

Provide shipping information;

Create an account;

Contact customer support;

Request a return or refund;

Subscribe to marketing communications;

Participate in a promotion;

Or otherwise submit information through the website.

Information Collected Automatically

When you browse our store, certain information may be collected through cookies, log files, pixels, analytics technologies, security systems, and similar tools.

This information may include pages visited, browser type, device type, IP address, approximate location derived from technical information, shopping interactions, referring pages, and session information.

Purposes of Processing

We may process personal information for purposes including:

Processing orders;

Receiving and verifying payments;

Arranging fulfilment;

Providing shipping and tracking information;

Delivering products;

Handling customer-service requests;

Managing returns and refunds;

Preventing fraud;

Maintaining website security;

Maintaining customer accounts;

Complying with legal obligations;

Keeping accounting and transaction records;

Resolving disputes;

Improving website functionality;

Understanding store performance;

And providing marketing communications where legally permitted.

Legal Bases

Depending on the processing activity, personal information may be processed because:

It is necessary to perform a contract with you;

It is necessary to comply with a legal obligation;

It is necessary for legitimate interests that are not overridden by your fundamental rights;

Or you have provided valid consent.

Data Minimization

We aim to collect information reasonably necessary for legitimate purposes associated with the operation of our ecommerce business.

The CNIL advises online merchants to inform customers clearly about personal-data processing and to collect data justified by the services provided.

Shopify

Our ecommerce store is powered by Shopify.

Shopify provides technical infrastructure supporting functions such as storefront operation, checkout, order management, security, and related ecommerce services.

Information may therefore be processed by Shopify and its authorized subprocessors where necessary to provide these services.

Payment Processing

Payment information may be processed by Shopify-supported or other authorized payment providers.

We do not ask customers to send complete payment-card numbers or security codes by ordinary email.

Shipping Providers

We may provide necessary information to logistics companies, fulfilment providers, postal services, couriers, and other delivery providers.

This may include your:

Name;

Delivery address;

Telephone number;

Email address;

And relevant order details.

Such information is provided where reasonably necessary to fulfil and deliver your purchase.

Other Service Providers

We may engage service providers supporting areas such as:

Website technology;

Analytics;

Customer service;

Security;

Fraud prevention;

Marketing;

Email communication;

Payment processing;

Fulfilment;

And shipping.

Information is shared only as reasonably necessary for the relevant purpose and subject to applicable legal requirements.

International Transfers

Some service providers may process data outside France or the European Economic Area.

Where GDPR rules governing international transfers apply, appropriate safeguards and transfer mechanisms will be used as required by applicable law.

Cookies

Our website may use cookies and similar technologies.

Some technologies are necessary for:

Shopping-cart functionality;

Checkout;

Authentication;

Security;

Fraud prevention;

Preference storage;

And basic website functions.

Others may be used for analytics, personalization, or advertising where permitted.

French data-protection guidance states that certain non-essential cookies and trackers require prior consent, while certain strictly necessary trackers may be exempt from consent requirements.

Cookie Consent

Where prior consent is required, non-essential technologies should only be activated after valid consent has been obtained.

Customers should be given an appropriate opportunity to manage applicable cookie preferences.

Marketing

Where required, we will obtain appropriate consent before sending electronic direct marketing.

You can unsubscribe from promotional communications through the unsubscribe mechanism included in the relevant message.

The CNIL's updated guidance states that valid consent for electronic marketing must be freely given, specific, informed, unambiguous, and based on an affirmative action rather than a pre-checked box.

Transactional communications about an existing order, delivery, return, refund, or security matter may still be sent where necessary.

Data Retention

Personal data will not be kept indefinitely.

Different types of information may be retained for different periods based on contractual, legal, tax, accounting, fraud-prevention, dispute-resolution, or operational requirements.

The CNIL states that organizations must determine appropriate retention periods and must not retain personal data indefinitely.

When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable retention requirements.

Security

We implement reasonable organizational and technical safeguards designed to protect personal information against unauthorized access, loss, alteration, disclosure, or misuse.

However, no internet transmission or storage system is guaranteed to be completely secure.

Customers should protect passwords and other account credentials.

Your Data Protection Rights

Subject to applicable conditions and exceptions under the GDPR, you may have rights including:

The right of access;

The right to rectification;

The right to erasure;

The right to restriction of processing;

The right to object;

The right to data portability;

And the right to withdraw consent where processing relies on consent.

The CNIL confirms, among other GDPR rights, individuals' ability to request erasure of personal information in applicable circumstances.

Access Requests

You may request information concerning personal data we process about you.

To submit a request:

info@vintage-clothing-store-jam.shop

We may reasonably verify your identity before disclosing personal information.

Correction

If your personal information is inaccurate or incomplete, you may request correction where applicable.

Erasure

You may request deletion of personal data where the statutory conditions are satisfied.

The right to erasure is not absolute. Certain records may need to be retained where necessary to comply with legal obligations or establish, exercise, or defend legal claims.

Objection

You may object to processing in circumstances provided by applicable law.

You may object to direct marketing.

Withdrawal of Consent

Where processing relies upon your consent, you may withdraw that consent.

Withdrawal does not affect the lawfulness of processing that occurred before consent was withdrawn.

Complaints

If you have a privacy concern, please contact:

info@vintage-clothing-store-jam.shop

Individuals may also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) where applicable.

Children's Personal Data

Our store is not designed to knowingly collect personal information from children in circumstances where appropriate authorization cannot legally be obtained.

If you believe personal information relating to a child has been submitted improperly, contact us.

Changes to This Privacy Policy

We may update this Privacy Policy when our technology, services, business processes, service providers, or legal obligations change.

The current version will be posted on our website with an updated revision date.

Contact

For privacy questions or requests:

vintage-clothing-store-jam.shop
Email: info@vintage-clothing-store-jam.shop