Privacy Policy

Version applicable from 21/10/2026

This Privacy Policy describes how La Boutique du Bracelet (the “Site,” “we,” “us,” or “our”) collects, uses, and shares your personal data when you visit laboutiquedubracelet.fr, use our services, or make a purchase (collectively, the “Services”). For the purposes of this Policy, “you,” “your,” and “yours” refer to any user of the Services (customer, visitor, or any other concerned person).

Please read this Privacy Policy carefully.

1. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal or regulatory developments. The updated version will be published on the Site with a revised “Last Updated” date accordingly.

2. How we collect and use your data

To provide the Services, we collect personal data from various sources. The data collected and the purposes vary depending on how you interact with us.

In addition to the specific uses described below, we may use your data to: communicate with you, provide and improve the Services, comply with our legal obligations, enforce our contractual terms, and protect our rights and those of our users.

2.1. Data we collect directly from you

The information you provide to us through the Services may include:

• Contact details: name, postal address, phone number, email address.
• Order information: billing address, shipping address, and information necessary for processing and tracking your order.
• Account information: login credentials and information related to the management of your account (if applicable).
• Customer service information: content of your requests and exchanges with our customer service team.
• Preferences: communication preferences (e.g., marketing) and options selected within the Services.

Certain features require the provision of data. Otherwise, access to some features may be limited.

2.2. Data collected automatically (usage data)

We may automatically collect certain information relating to your interaction with the Services (“Usage Data”) through technologies such as cookies, pixels, and similar technologies (“Cookies”). This data may include: IP address, device type, browser, login information, pages viewed, interactions, and technical identifiers.

2.3. Data obtained from third parties

We may receive data from third parties, including:

• Technical platforms (e.g. Shopify) necessary for hosting and operating the store.
• Payment providers who process your payments. We do not receive your full card details, but may receive information necessary to confirm payment and prevent fraud.
• Advertising/analytics partners when you interact with our ads and/or consent to the relevant cookies/trackers.

2.4. Use of artificial intelligence systems and automated processing

We may use tools based on artificial intelligence to assist certain operations, including the translation and review of content, data analysis, organisation or preparation of customer service responses, product recommendation, as well as anomaly detection and fraud prevention.

These tools act as assistance for our teams. We implement human oversight adapted to the purpose and level of risk of the processing, in particular for contractual information, prices, guarantees, safety instructions, requests addressed to customer service and decisions likely to affect our customers.

Where such processing involves personal data, only the data necessary for the intended purpose is processed or transmitted to the providers concerned. Such processing is based, as the case may be, on the performance of the contract, compliance with our legal obligations, our legitimate interest or your consent, in accordance with this Policy.

Where a decision producing legal effects or significantly affecting a person is made exclusively by means of automated processing, the safeguards provided for by the applicable regulations are implemented, including the possibility to request human intervention, express one’s point of view and contest the decision.

Where the regulations require it, we clearly inform you if you are interacting directly with an artificial intelligence system or if content presented to you has been generated or substantially modified by such a system.

In WhatsApp exchanges, Julia is our automated assistant. She can analyse your request, translate exchanges and prepare or send a response. Depending on your request and the features used, she may process the content of the conversation, the images you send and the order or after-sales service information necessary.

Julia is not a person. You can contact our team by email at contact@laboutiquedubracelet.fr or using the contact form on the Site to request a human review of your situation. Avoid sending sensitive data or documents that are not useful for your request.

3. Purposes and legal bases (GDPR)

• Performance of the contract (Art. 6(1)(b) GDPR): processing your orders, managing delivery, returns, exchanges, customer service, and managing your account.
• Legal obligations (Art. 6(1)(c) GDPR): accounting/tax obligations, management of rights requests, responses to competent authorities.
• Legitimate interest (Art. 6(1)(f) GDPR): Site security, fraud prevention, improvement of Services, internal statistics (within the limits of cookie/tracker rules).
• Consent (Art. 6(1)(a) GDPR): sending certain marketing communications (notably email/SMS where required) and placing/reading certain cookies/trackers, where required by regulations.

4. Marketing and communications

We may send you service-related communications (order confirmation, tracking, important information). These are not marketing communications.

For prospecting (marketing), where required by regulations, we collect your consent (e.g. dedicated box not pre-checked). You may unsubscribe at any time via the link in our emails and/or by contacting us.

4.1. WhatsApp: assistance, tracking, reviews and commercial communications

WhatsApp is an optional means of communicating with La Boutique du Bracelet. When you use this channel, we process your telephone number, the profile information transmitted by WhatsApp, the content of your messages and, if you send any, your attachments. Depending on your request, we may also use the order, delivery or after-sales service information necessary to respond to you. Where communication preferences or proof of authorisation exist, they are used to respect your choices. Please do not send us complete payment data or sensitive data that is not necessary for your request.

The following purposes are distinct. Authorisation relating to one of them does not constitute general authorisation for the others. The legal basis for data processing and the permission required to initiate a WhatsApp message are two distinct requirements.

A. Responding to questions and assistance requests

When you contact us, we use the content of the exchange, your number and the information necessary to process your request. For requests necessary for the preparation or performance of an order, the processing is based on pre-contractual measures taken at your request or on the performance of the contract. For other information requests, it may be based on our legitimate interest in responding to persons who contact us. Your assistance request does not subscribe you to our commercial offers. You can use our other means of contact if you do not wish to exchange on WhatsApp.

B. Sending tracking and delivery information

The information necessary for the confirmation, tracking and delivery of an order is processed to perform the contract. The use of WhatsApp to send you this information remains subject to the authorisations applicable to this channel; simply providing a number when ordering does not constitute general authorisation to contact you there. A message limited to tracking your order is not used as authorisation to send you commercial offers.

C. Collecting satisfaction feedback and reviews after delivery

We may invite you to give your opinion on a delivered order in order to assess your experience and improve our service. A request limited to this experience, without any offer or commercial incentive, is distinct from a marketing message. Where appropriate and after taking your rights and expectations into account, this processing may be based on our legitimate interest; if the content or context requires your consent, it must be collected. The use of WhatsApp to initiate such a request remains subject to the permission required for this channel. You may object to review requests by contacting us.

D. Sending commercial offers and reminders for an unfinished basket

Commercial offers and reminders for an unfinished basket constitute a purpose distinct from assistance, order tracking and non-promotional review requests. Their sending must comply with the rules applicable to marketing and the permission required for WhatsApp. Where your consent is required, it must relate to this purpose and be capable of being withdrawn. Placing an order, accepting the GTC, creating an account or the existence of a basket does not, in itself, constitute this authorisation.

5. Cookies and consent management

We use cookies/trackers:

• Strictly necessary for the operation of the Site and Services (e.g. cart, session).
• Audience measurement and statistics (depending on configuration and, where applicable, your consent).
• Advertising/marketing and personalization (subject to your consent where required).

You can manage your preferences via the cookie management module (banner/preferences center) available on the Site, and through your browser settings. Deleting/blocking cookies may impair certain features.

For more information about Shopify cookies: https://www.shopify.com/legal/cookies.

6. How we share your data

We may share your data with:

• Service providers acting on our behalf (hosting, payment, delivery, customer service, data analysis, marketing tools) strictly as necessary.
• Marketing/advertising partners, only in accordance with your choices (cookie/tracker consent where required) and their policies.
• Authorities/third parties if required by law or to defend our rights.
• Restructuring operations (merger, asset transfer, etc.), in compliance with applicable regulations.

We do not sell your data. We do not share so-called "sensitive" data as defined by the GDPR, except where required by law or if it results directly from information you provide to us as part of customer service.

7. Retention period

We retain your data only for as long as necessary for the purposes described, including:

• Management of the contractual relationship (duration of the relationship + 5 years).
• Commercial prospecting (3 years from the last contact).
• Accounting/tax obligations (10 years from the end of the fiscal year).
• Management of disputes/pre-litigation (for the duration of applicable limitation periods).

8. Security

We implement technical and organizational measures designed to protect your data. However, as no measure is infallible, we cannot guarantee absolute security. Please avoid sending us sensitive information via unsecured channels.

9. Transfers outside the EU/EEA

Some service providers may process data outside the EU/EEA. When this is the case, we implement recognized safeguards (for example, standard contractual clauses of the European Commission) and/or rely, where applicable, on an adequacy decision (e.g., organizations certified under the EU-US Data Privacy Framework), depending on the provider's situation.

10. Your rights

In accordance with applicable regulations, you may exercise the following rights:

• Right of access, to rectification, to erasure.
• Right to object (notably to marketing) and right to restriction.
• Right to data portability (in cases provided for by the GDPR).
• Withdrawal of consent (at any time, without affecting the lawfulness of prior processing).
• Right to lodge a complaint with the CNIL.

To exercise your rights, please contact us using the details below. To protect your data, proof of identity may be requested if there is reasonable doubt.

You may request access to your data, their rectification or their erasure under the conditions provided for by the regulations. You may also exercise your right to object and, where the processing is based on your consent, withdraw that consent without affecting the lawfulness of the processing carried out beforehand. For WhatsApp communications, please specify the number concerned in your request. Contact us at contact@laboutiquedubracelet.fr, using the Site contact form or by post at the contact details in section 13. Withdrawal of a commercial authorisation does not prevent you from using our other assistance channels.

11. Data concerning children

The Services are not intended for children. We do not knowingly collect personal data from children. If you are a parent/guardian and believe that a child has provided us with data, please contact us so that we can address the request.

12. Third-party websites and links

The Site may contain links to third-party websites. We are not responsible for their practices. We invite you to consult their privacy policies.

13. Contact

For any questions or to exercise your rights, you may contact us:

• By email: contact@laboutiquedubracelet.fr
• By mail: SHOPADVENTURE – 1 avenue d'Ester, 87069 Limoges Cedex 3, FR

Unless expressly stated otherwise, SHOPADVENTURE is responsible for processing personal data collected through the Site.

14. Specific rights for international residents

14.1. Canadian Residents (PIPEDA and Quebec Law 25)

In accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec Law 25, Canadian residents have specific rights regarding their personal information:

• Right of access and rectification: You may request access to your personal information and its correction if it is inaccurate.
• Right to withdraw consent: You may withdraw your consent to the use of your personal information at any time, subject to legal or contractual restrictions.
• Right to de-indexation (Quebec): You may request that we stop disseminating your personal information or de-index any hyperlink associated with your name.
• Right to data portability (Quebec): You may request to receive your computerized personal information in a structured and commonly used technological format.

The contact point for personal information protection in Canada is the one indicated in Article 13 (contact@laboutiquedubracelet.fr).

14.2. United States Residents (CCPA/CPRA and other state laws)

If you reside in California or another U.S. state with similar privacy legislation, you have the following rights:

• Right to know: You may request information about the categories and specific items of personal data we have collected, their sources, business purposes, and the categories of third parties with whom we share them.
• Right to deletion: You may request the deletion of your personal data.
• Right to opt out of sale or sharing ("Do Not Sell or Share My Personal Information"): While we do not sell your data in the traditional sense, the use of certain third-party advertising cookies may be considered "sharing" or "selling" under the CCPA. You may opt out of this sharing via our cookie banner or by contacting us.
• Right to non-discrimination: We will not discriminate against you for exercising your rights.

To exercise these rights, please contact us using the details provided in Article 13.