Article 1 – Personal information collected

When you make a purchase from our store, we collect the personal information you provide to us, including in particular:

• your first name and surname;
• your postal address;
• your email address;
• your telephone number;
• information relating to your order;
• information required for delivery, invoicing or after-sales service.

When you browse our store, we also automatically receive certain technical information, such as your IP address, browser, operating system, language, time zone and certain browsing data.

We may also collect information you choose to share with us when contacting us, subscribing to our newsletter, leaving a customer review, entering a competition, adding a message to a personalised card or leaving an unfinished cart.

Article 2 – Purposes of collection

We collect your personal data for the following purposes:

• to process and dispatch your orders;
• to manage payments, deliveries, returns, refunds and exchanges;
• to contact you about your order or your account;
• to respond to requests sent to our customer service team;
• to keep our site secure and prevent fraud;
• to improve the usability, performance and content of our site;
• to measure our audience and analyse traffic;
• to send you, with your consent, marketing communications;
• to allow you to recover an abandoned cart;
• to personalise the content, offers and advertising likely to interest you.

Article 3 – Legal bases for processing

Depending on the case, the processing of your personal data is based on:

• the performance of a contract: where processing is necessary to manage your order, payment, delivery or customer service;
• compliance with legal obligations: for example in relation to accounting, tax or fraud prevention;
• your consent: in particular for certain marketing communications or certain cookies/trackers;
• our legitimate interest: to improve our site, secure our services, prevent fraud or analyse site traffic.

Article 4 – Consent

How do you obtain my consent?

When you provide us with your personal information to complete a transaction, verify your payment method, place an order, arrange a delivery or make a return, we consider that you consent to us collecting your information and using it for that purpose only.

If we ask you to provide your information for another reason, in particular for marketing purposes, we will ask you directly for your explicit consent.

How can I withdraw my consent?

You can withdraw your consent at any time by contacting us at contact@soreliparis.com or by unsubscribing from our communications using the link provided for this purpose in our emails.

Article 5 – Abandoned cart

If you have added one or more items to your cart without completing your order, we may contact you by email so that you can recover your cart and complete your purchase, where applicable regulations allow.

You can object to this type of reminder by using the unsubscribe link in the email you receive or by writing to us at contact@soreliparis.com.

Article 6 – Disclosure

We may disclose your personal information if required to do so by law, if it is necessary to protect our rights, to prevent fraud, to enforce our terms and conditions, or in the context of legal or administrative proceedings.

We may also need to share certain data with our service providers where this is necessary for them to perform the services they provide to us.

Article 7 – Shopify

Our store is hosted by Shopify Inc., which provides us with the online e-commerce platform that allows us to sell our products and services to you.

Your data is stored in Shopify's data storage system and databases, held on a secure server protected by a firewall.

Payment

Payment information is processed in accordance with applicable security standards, in particular the PCI-DSS standard. For more information, please see Shopify's privacy policy.

Article 8 – Third-party services

The third-party providers we use will only collect, use and disclose your information to the extent necessary to perform the services they provide to us, in particular for:

• payment processing;
• delivery of your orders;
• site hosting;
• audience analytics;
• sending marketing emails and SMS messages;
• managing customer reviews;
• advertising and retargeting.

When you are redirected to a third-party site or application, you are no longer governed by this policy but by that of the service concerned.

Article 9 – Marketing and advertising tools

In order to improve your experience and measure the performance of our campaigns, we may use tools provided in particular by:

In accordance with the rules set out by the CNIL (the French data protection authority), some of these trackers require your prior consent before being placed on or read from your device.

Article 10 – Security

To protect your personal data, we implement appropriate technical and organisational measures to prevent its loss, alteration, disclosure or unauthorised access.

Our site uses the secure HTTPS protocol. However, no method of transmission over the Internet is 100% secure.

Article 11 – Cookies and trackers

Our site uses cookies and similar technologies. Some are strictly necessary for the site to function, in particular to remember your cart, maintain your session or keep the site secure.

Other cookies may be used for audience measurement, personalisation or targeted advertising purposes.

You can manage your preferences via the cookie banner on our site or via your browser settings.

Article 12 – Retention period

We keep your personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal obligations.

• Data relating to an order is kept for as long as necessary to manage the commercial relationship;
• data used for marketing purposes is kept until you withdraw your consent;
• data relating to your browsing and to cookies is kept for the period applicable to each tracker.

Article 13 – Your rights

In accordance with the GDPR and applicable legislation, you have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to withdraw your consent;
• right to data portability;
• right to lodge a complaint with the CNIL.

To exercise your rights, contact us at: contact@soreliparis.com

Article 14 – Age of consent

By using this site, you confirm that you have reached the legal age applicable in your country or region of residence, or that you have the necessary permission where required.

Article 15 – Changes to this policy

We reserve the right to amend this privacy policy at any time to reflect legal, regulatory, technical or commercial developments. Changes will take effect as soon as they are published on the site.

Article 16 – Contact

For any questions, requests for access, rectification or deletion, or to exercise your rights, contact us at: