Privacy Policy

Applicable version as of 04/02/2026

This Privacy Policy describes how La Boutique du Bracelet (the “Site,” “we,” “us,” or “our”) collects, uses, and shares your personal data when you visit laboutiquedubracelet.fr, use our services, or make a purchase (collectively, the “Services”). For the purposes of this Policy, “you,” “your,” and “yours” refer to any user of the Services (customer, visitor, or any other concerned person).

Please read this Privacy Policy carefully.

1. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in practices, legal, or regulatory developments. The updated version is published on the Site with a revised “Last updated” date accordingly.

2. How we collect and use your data

To provide the Services, we collect personal data from various sources. The data collected and the purposes vary depending on how you interact with us.

In addition to the specific uses described below, we may use your data to: communicate with you, provide and improve the Services, comply with our legal obligations, enforce our contractual terms, and protect our rights and those of our users.

2.1. Data we collect directly from you

The information you provide to us through the Services may include:

• Contact details: name, postal address, phone number, email address.
• Order information: billing address, shipping address, information necessary for processing and tracking the order.
• Account information: login credentials and information related to the management of your account (if applicable).
• Customer service information: content of your requests and exchanges with our customer service team.
• Preferences: communication preferences (e.g., marketing) and options selected within the Services.

Some features require the provision of data. Otherwise, access to certain features may be limited.

2.2. Data collected automatically (usage data)

We may automatically collect certain information relating to your interaction with the Services (“Usage Data”) through technologies such as cookies, pixels, and similar technologies (“Cookies”). This data may include: IP address, device type, browser, login information, pages viewed, interactions, and technical identifiers.

2.3. Data obtained from third parties

We may receive data from third parties, including:

• Technical platforms (e.g., Shopify) necessary for hosting and operating the store.
• Payment providers who process your payments. We do not receive all your card data, but may receive information necessary to confirm payment and prevent fraud.
• Advertising/analytics partners when you interact with our ads and/or consent to the relevant cookies/trackers.

3. Purposes and legal bases (GDPR)

• Contract performance (Art. 6(1)(b) GDPR): processing your orders, managing delivery, returns, exchanges, customer service, and managing your account.
• Legal obligations (Art. 6(1)(c) GDPR): accounting/tax obligations, handling rights requests, responses to competent authorities.
• Legitimate interest (Art. 6(1)(f) GDPR): Site security, fraud prevention, improvement of Services, internal statistics (within the limits of cookie/tracker rules).
• Consent (Art. 6(1)(a) GDPR): sending certain marketing communications (including email/SMS where required) and setting/reading certain cookies/trackers, where required by law.

4. Marketing and communications

We may send you service-related communications (order confirmation, tracking, important information). These are not marketing messages.

For prospecting (marketing), where required by law, we collect your consent (e.g., dedicated box not pre-checked). You can unsubscribe at any time via the link in our emails and/or by contacting us.

5. Cookies and consent management

We use cookies/trackers:

• Strictly necessary for the operation of the Site and Services (e.g., cart, session).
• Audience measurement and statistics (depending on configuration and, where applicable, your consent).
• Advertising/marketing and personalization (subject to your consent where required).

You can manage your preferences via the cookie management module (banner/preferences center) available on the Site, and through your browser settings. Deleting/blocking cookies may impair certain features.

For more information about Shopify cookies: https://www.shopify.com/legal/cookies.

6. How we share your data

We may share your data with:

• Service providers acting on our behalf (hosting, payment, delivery, customer service, data analysis, marketing tools) strictly as necessary.
• Marketing/advertising partners, only in accordance with your choices (cookie/tracker consent where required) and their policies.
• Authorities/third parties if required by law or to defend our rights.
• Restructuring operations (merger, asset transfer, etc.), in compliance with applicable regulations.

We do not sell your data. We do not share so-called “sensitive” data as defined by the GDPR, except where required by law or if it results directly from information you provide to us as part of customer service.

7. Retention period

We retain your data only for as long as necessary for the purposes described, including:

• Management of the contractual relationship (duration of the relationship + 5 years).
• Commercial prospecting (3 years from the last contact).
• Accounting/tax obligations (10 years from the end of the fiscal year).
• Management of disputes/pre-litigation (during applicable limitation periods).

8. Security

We implement technical and organizational measures designed to protect your data. However, as no measure is infallible, we cannot guarantee absolute security. Please avoid sending us sensitive information via unsecured channels.

9. Transfers outside the EU/EEA

Some service providers may process data outside the EU/EEA. When this is the case, we implement recognized safeguards (for example, standard contractual clauses from the European Commission) and/or rely, where applicable, on an adequacy decision (e.g., organizations certified under the EU-US Data Privacy Framework), depending on the provider's situation.

10. Your rights

In accordance with applicable regulations, you may exercise the following rights:

• Right of access, rectification, erasure.
• Right to object (notably to marketing) and right to restriction.
• Right to data portability (in cases provided for by the GDPR).
• Withdrawal of consent (at any time, without affecting the lawfulness of prior processing).
• Right to lodge a complaint with the CNIL.

To exercise your rights, contact us using the details below. To protect your data, proof of identity may be requested if there is reasonable doubt.

11. Data concerning children

The Services are not intended for children. We do not knowingly collect personal data from children. If you are a parent/guardian and believe that a child has provided us with data, please contact us so we can address the request.

12. Third-party websites and links

The Site may contain links to third-party websites. We are not responsible for their practices. We encourage you to review their privacy policies.

13. Contact

For any questions or to exercise your rights, you may contact us:

• By email: contact@laboutiquedubracelet.fr
• By mail: SHOPADVENTURE – 1 avenue d'Ester, 87069 Limoges Cedex 3, FR

Unless explicitly stated otherwise, SHOPADVENTURE is responsible for processing personal data collected through the Site.

14. Specific rights for international residents

14.1. Canadian Residents (PIPEDA and Quebec Law 25)

In accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec Law 25, Canadian residents have specific rights regarding their personal information:

• Right of access and rectification: You may request access to your personal information and its correction if it is inaccurate.
• Right to withdraw consent: You may withdraw your consent to the use of your personal information at any time, subject to legal or contractual restrictions.
• Right to de-indexing (Quebec): You may request to stop the dissemination of your personal information or to de-index any hyperlink attached to your name.
• Right to data portability (Quebec): You may request to receive your computerized personal information in a structured and commonly used technological format.

The Personal Information Protection Officer for Canada is the DPO mentioned in Article 13.

14.2. United States Residents (CCPA/CPRA and other state laws)

If you reside in California or another U.S. state with similar privacy legislation, you have the following rights:

• Right to know: You may request which categories and specific items of personal data we have collected, the sources, business purposes, and the categories of third parties with whom we share them.
• Right to deletion: You may request the deletion of your personal data.
• Right to opt out of sale or sharing ("Do Not Sell or Share My Personal Information"): While we do not sell your data in the traditional sense, the use of certain third-party advertising cookies may be considered "sharing" or "selling" under the CCPA. You can opt out of this sharing via our cookie banner or by contacting us.
• Right to non-discrimination: We will not discriminate against you for exercising your rights.

To exercise these rights, please contact us using the details provided in Article 13.