Politique de confidentialité

This Privacy Policy explains how astrthelabelx.shop collects, uses, discloses and otherwise processes personal information when you visit our website, purchase products from us, communicate with us or otherwise use our services.

For privacy enquiries, contact:

Email: info@astrthelabelx.shop

1. Personal Information We May Collect

Depending on how you interact with our store, we may collect information such as:

• name;
• billing information;
• shipping information;
• email address;
• telephone number where provided;
• order information;
• products purchased;
• payment transaction information;
• account information;
• customer service correspondence;
• IP address;
• browser and device information;
• website activity;
• cookie and tracking information;
• marketing preferences; and
• fraud-prevention and security information.

We seek to collect only information reasonably necessary for the relevant purposes.

2. How We Collect Information

Personal information may be collected:

• directly from you;
• automatically through our website and related technologies;
• through Shopify;
• through payment processors;
• through shipping and fulfilment providers;
• through analytics and advertising providers where permitted;
• through fraud-prevention providers; and
• from other service providers involved in operating our store.

3. How We Use Personal Information

We may process personal information for purposes including:

Processing Orders

To:

• accept and process purchases;
• process payments;
• confirm orders;
• prepare products for shipment;
• arrange delivery;
• provide tracking information;
• manage cancellations;
• manage returns and refunds; and
• provide customer support.

Operating Our Store

We may process information to operate, maintain, secure and improve our website and services.

Communication

We may use contact information to respond to enquiries and provide important service-related messages.

Marketing

Where legally permitted, we may use information to send promotional communications or provide personalised advertising.

Where consent is required, marketing activities will be based on appropriate consent, and customers may withdraw that consent in accordance with applicable law.

Fraud Prevention and Security

Information may be used to detect, investigate and prevent fraudulent transactions, abuse, security incidents and other unlawful activity.

Legal Compliance

Information may be processed where reasonably necessary to comply with legal, regulatory, accounting, tax, dispute-resolution or law-enforcement obligations.

4. Legal Bases for Processing

Where the GDPR applies, personal information may be processed on one or more legal bases, including:

• performance of a contract;
• steps requested before entering into a contract;
• compliance with a legal obligation;
• legitimate interests, where those interests are not overridden by your fundamental rights;
• consent; or
• another lawful basis permitted under applicable legislation.

The applicable legal basis depends on the particular processing activity.

5. Shopify

Our online store uses Shopify technology.

Shopify and other service providers may process certain information as necessary to provide e-commerce functionality, website infrastructure, checkout services, fraud prevention and related services.

Their processing of personal data is also governed by the terms and privacy arrangements applicable to their respective services.

6. Payment Information

Payments may be processed through third-party payment providers.

We may receive transaction information required to confirm and manage an order, but payment providers may independently collect and process payment credentials in accordance with their own legal obligations and privacy practices.

7. Sharing Personal Information

We may share information with service providers where reasonably necessary to operate our business, including:

• Shopify and related e-commerce service providers;
• payment processors;
• logistics and shipping companies;
• warehouses and fulfilment partners;
• customer support providers;
• IT and hosting providers;
• analytics providers;
• marketing and advertising providers where legally permitted;
• fraud-prevention and security providers;
• professional advisers; and
• government authorities where legally required.

We do not disclose personal data merely for unrelated purposes without an appropriate legal basis.

8. International Data Transfers

Some of our technology or service providers may operate in countries outside France or the European Economic Area.

Where GDPR requirements apply to an international transfer of personal data, appropriate transfer mechanisms and safeguards will be used where required by law.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• operate essential website functionality;
• maintain shopping-cart and checkout functions;
• remember user preferences;
• understand website performance;
• prevent fraud;
• analyse website usage; and
• support advertising and marketing where permitted.

Under French rules, certain non-essential cookies and trackers require appropriate information and prior consent, while some strictly necessary technologies may be exempt from that consent requirement.

Where required, customers will be provided with cookie controls or consent options.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

Different categories of data may therefore be retained for different periods.

When information is no longer required, we may delete, anonymise or otherwise securely dispose of it, subject to applicable legal obligations.

11. Your GDPR Rights

Where the GDPR applies, individuals may have rights including:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to object to certain processing;
• the right to data portability where applicable;
• the right to withdraw consent where processing is based on consent; and
• rights relating to certain automated decision-making activities.

These rights are recognised within the GDPR framework and by the CNIL.

To exercise an applicable privacy right, contact info@astrthelabelx.shop.

We may request information reasonably necessary to verify your identity before processing certain requests.

12. Marketing Communications

You may unsubscribe from promotional email communications by using the unsubscribe function included in an email where available or by contacting us.

Unsubscribing from marketing messages does not necessarily prevent us from sending transactional or service communications concerning an existing order.

13. Children's Privacy

Our services are not intended to knowingly collect personal information from children where such processing would be unlawful without appropriate authorisation.

If you believe that a child has provided personal information in circumstances that violate applicable law, please contact us.

14. Security

We use reasonable organisational and technical measures intended to protect personal information against unauthorised access, disclosure, alteration, misuse or loss.

No internet transmission or storage system can be guaranteed to be completely secure.

15. Complaints

Individuals in France may have the right to submit a complaint concerning personal data processing to the Commission Nationale de l'Informatique et des Libertés (CNIL).

We encourage customers to contact us first where possible so that we have an opportunity to address the issue.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technologies, business practices or legal requirements.

The updated version will be published on this website with a revised "Last Updated" date.

17. Contact

For privacy questions or requests:

astrthelabelx.shop
Email: info@astrthelabelx.shop