Politique de confidentialité

1. Introduction

This Privacy Policy describes how oyrosy.shop collects, uses, stores, shares, and otherwise processes personal information when you visit our website, make a purchase, communicate with us, or otherwise interact with our online store.

For privacy enquiries, contact:

Email: info@oyrosy.shop

This Privacy Policy is intended to provide transparency concerning personal-data processing relating to users and customers, including individuals in France and the European Economic Area.

The GDPR requires information concerning personal-data processing to be provided in a concise, transparent, understandable, and accessible manner.

2. Personal Information We May Collect

Depending on how you interact with oyrosy.shop, we may process categories of information including:

Contact Information

This may include:

• Name;
• Email address;
• Telephone number where supplied;
• Billing address;
• Shipping address; and
• Other contact details you voluntarily provide.

Order Information

This may include:

• Products purchased;
• Order number;
• Order value;
• Order date;
• Product selections;
• Delivery status;
• Return information;
• Refund information; and
• Customer-service history relating to your purchase.

Payment Information

Payments may be processed through third-party payment processors or payment services integrated with our Shopify store.

We may receive information about the status of a payment or limited payment-related information.

Full payment-card information may be processed directly by authorised payment providers rather than being stored directly by oyrosy.shop.

Device and Technical Information

When you visit our website, certain technical information may be processed automatically, including:

• IP address;
• Device type;
• Browser type;
• Operating system;
• Cookie identifiers;
• Network information;
• Pages visited;
• Referring pages;
• Approximate location derived from technical information;
• Website interaction information; and
• Date and time information.

Customer Communications

When you contact us, we may process the content of your communication and any information you provide.

3. How We Collect Personal Information

We may collect personal information:

• Directly from you;
• Automatically through your device or browser;
• Through cookies and similar technologies;
• Through Shopify and ecommerce infrastructure;
• Through payment service providers;
• Through delivery and logistics providers;
• Through fraud-prevention services;
• Through analytics providers where permitted; and
• From other service providers involved in operating our store.

4. Purposes of Processing

We may use personal information to:

• Operate oyrosy.shop;
• Display products;
• Process orders;
• Accept and verify payments;
• Fulfil purchases;
• Arrange shipping;
• Provide delivery information;
• Communicate about orders;
• Process returns and refunds;
• Handle customer-service enquiries;
• Detect and prevent fraud;
• Protect website security;
• Maintain transaction records;
• Comply with legal and regulatory obligations;
• Establish, exercise, or defend legal claims;
• Improve website functionality;
• Understand website performance;
• Personalise services where permitted;
• Send marketing communications where legally permitted; and
• Obtain and manage consent where consent is required.

5. Legal Bases for Processing

Where the GDPR applies, personal information may be processed on one or more legal bases.

Contract

We may process information where necessary to enter into or perform a contract with you.

For example, we need certain information to:

• Process your order;
• Receive payment;
• Deliver products;
• Process returns; and
• Provide order-related customer support.

Legal Obligation

We may process information where necessary to comply with applicable legal obligations, including accounting, tax, consumer-protection, fraud-prevention, and regulatory requirements.

Legitimate Interests

Where permitted, we may process information for legitimate business interests, such as:

• Securing our website;
• Preventing fraud;
• Improving services;
• Managing customer relationships; and
• Defending legal claims,

provided such interests are not overridden by applicable rights and freedoms.

Consent

Where required, we may rely on your consent, including for certain marketing activities, cookies, advertising technologies, or similar processing.

Where processing is based on consent, you may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

6. Shopify

oyrosy.shop uses Shopify ecommerce technology to operate the online storefront and facilitate ecommerce functions.

Information may therefore be processed through Shopify systems in connection with hosting the store, checkout functionality, ecommerce services, security, and related operations.

Shopify provides merchants with privacy features, including configurable privacy-policy and cookie settings.

Shopify's own processing of personal information may also be governed by its applicable privacy documentation.

7. Sharing Personal Information

We may share personal information with service providers where reasonably necessary to operate oyrosy.shop.

Recipients may include:

• Shopify;
• Payment processors;
• Payment gateways;
• Banks and financial institutions;
• Fulfilment providers;
• Warehousing providers;
• Shipping and delivery companies;
• IT and security providers;
• Analytics providers;
• Customer-support providers;
• Professional advisers;
• Fraud-prevention providers; and
• Government, regulatory, law-enforcement, or judicial authorities where legally required.

Service providers are expected to process information for legitimate and authorised purposes and subject to applicable contractual and legal obligations.

8. International Data Transfers

Some service providers involved in operating oyrosy.shop may process information in countries outside France or the European Economic Area.

Where the GDPR applies and personal information is transferred internationally, appropriate transfer mechanisms or safeguards will be used where legally required.

These may include adequacy decisions, contractual safeguards, or other transfer mechanisms recognised by applicable data protection law.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies for purposes including:

• Essential website operation;
• Shopping-cart functionality;
• Checkout functionality;
• Security;
• Preference management;
• Analytics; and
• Advertising or marketing where permitted.

French data protection authority CNIL states that certain non-essential cookies or trackers require users to be informed and generally require prior consent.

Where consent is legally required, relevant technologies should not be activated before obtaining valid consent.

Users should also be given appropriate methods to manage or withdraw cookie consent.

Strictly necessary technologies may operate without consent where allowed by law.

10. Marketing Communications

We may send marketing communications where:

• You have provided legally valid consent; or
• Another lawful basis permits such communication.

Where legally required, you may withdraw your consent or unsubscribe from marketing communications at any time.

Transactional communications relating to orders, security, account management, or customer support are not necessarily marketing communications.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or where retention is required or permitted by applicable law.

Retention periods may depend on:

• Duration of the customer relationship;
• Contractual requirements;
• Accounting obligations;
• Tax obligations;
• Consumer-law requirements;
• Fraud-prevention needs;
• Legal limitation periods;
• Dispute resolution; and
• The establishment, exercise, or defence of legal claims.

When information is no longer required, it may be deleted, anonymised, or otherwise securely disposed of in accordance with applicable requirements.

12. Your GDPR Rights

Where the GDPR applies, you may have rights including:

• Right of access – to obtain information about personal data processed about you;
• Right to rectification – to request correction of inaccurate information;
• Right to erasure – to request deletion in circumstances provided by law;
• Right to restriction – to request limits on processing in applicable circumstances;
• Right to data portability – to receive qualifying information in a structured format;
• Right to object – to object to certain processing;
• Right to withdraw consent – where processing relies on consent; and
• Rights relating to certain automated decisions, where applicable.

These rights may be subject to legal limitations and exceptions.

To exercise a privacy right, contact:

info@oyrosy.shop

We may request information reasonably necessary to verify your identity and protect personal information from unauthorised disclosure.

13. Complaints to a Supervisory Authority

If you are located in France and believe that your personal information has been processed contrary to applicable data protection law, you may have the right to submit a complaint to the competent supervisory authority, including the Commission Nationale de l'Informatique et des Libertés (CNIL).

We encourage you to contact us first where appropriate so that we can attempt to resolve your concerns.

14. Security

We use reasonable administrative, organisational, and technical measures intended to protect personal information against:

• Unauthorised access;
• Unlawful disclosure;
• Accidental loss;
• Destruction;
• Alteration; and
• Misuse.

However, no internet-based system can guarantee absolute security.

Customers are responsible for protecting their own account credentials, devices, and passwords.

15. Children

oyrosy.shop is not intended to knowingly collect personal information from children where such collection would require parental authorisation under applicable law.

If you believe a child has provided personal information to us improperly, contact:

info@oyrosy.shop

16. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of independent third-party websites.

Customers should review the privacy policies of those websites before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes in our services;
• Changes in technology;
• Changes in processing activities;
• Changes in legal requirements; or
• Operational changes.

The revised policy will be published on oyrosy.shop with an updated effective date where appropriate.

18. Contact Us

For privacy-related enquiries or requests:

oyrosy.shop
Email: info@oyrosy.shop