Privacy policy

This Privacy Policy explains how rothysyx.shop collects, uses, stores, shares and otherwise processes personal information when you visit our website, make a purchase, communicate with us or otherwise interact with our services.

For privacy-related questions or requests, contact:

Email: info@rothysyx.shop

This policy is intended to operate consistently with applicable European data-protection requirements, including the General Data Protection Regulation where applicable.

The GDPR requires organisations to provide transparent information about how and why personal information is processed.

1. Personal Information We May Collect

Depending on how you interact with rothysyx.shop, we may collect:

Identity Information

Such as:

• Name;
• Billing name;
• Shipping recipient name; and
• Account details.

Contact Information

Such as:

• Email address;
• Billing address;
• Shipping address; and
• Other contact details voluntarily supplied.

Order and Transaction Information

Such as:

• Products ordered;
• Order number;
• Purchase history;
• Order value;
• Returns;
• Refunds;
• Shipping information; and
• Customer-service history.

Payment Information

Payments may be processed by Shopify, payment providers, card processors or other authorised financial-service providers.

We may receive transaction-related information without necessarily receiving or retaining complete payment-card credentials.

Device and Technical Information

Depending on website configuration, we or our service providers may receive:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Cookie identifiers;
• Session information;
• Referral source;
• Website interaction information; and
• Security-related technical data.

Communications

If you contact us, we may retain your message and information reasonably necessary to respond to your request.

2. How We Collect Information

Personal information may be collected:

• Directly from you;
• Through the checkout process;
• Through customer-account functionality;
• When you contact customer support;
• Automatically through website technologies;
• From payment and fulfilment providers;
• From Shopify and related ecommerce service providers;
• From fraud-prevention and security providers; and
• From other lawful sources.

3. Why We Process Personal Information

We may process personal information to:

• Provide our website and services;
• Process and fulfil orders;
• Confirm and administer payments;
• Arrange shipping and delivery;
• Manage returns and refunds;
• Communicate about orders;
• Respond to customer-support enquiries;
• Maintain customer accounts;
• Detect and prevent fraud;
• Protect our systems and customers;
• Maintain business records;
• Comply with tax, accounting and legal requirements;
• Establish, exercise or defend legal claims;
• Analyse website operation;
• Improve services;
• Measure performance; and
• Send permitted marketing communications.

4. Legal Bases for Processing

Where the GDPR applies, processing may rely on one or more lawful bases.

Performance of a Contract

We process information necessary to take steps at your request before entering into a contract and to perform a contract with you, including processing purchases, payments, shipping, returns and customer-service requests.

Legal Obligation

Certain information may be processed or retained to comply with accounting, tax, consumer-protection, fraud-prevention or other legal obligations.

Legitimate Interests

We may process information where necessary for legitimate business interests that are not overridden by your rights, such as securing our website, preventing fraud, maintaining services, handling disputes and understanding service performance.

Consent

Where consent is legally required, we may rely on consent for activities such as certain marketing communications, analytics technologies or non-essential cookies.

Where processing is based on consent, the GDPR permits the individual to withdraw that consent.

5. Shopify and Service Providers

Our store uses Shopify ecommerce technology.

Information may be processed through Shopify infrastructure and by companies that provide functions necessary for ecommerce operations.

We may also share relevant information with service providers supporting:

• Payment processing;
• Order fulfilment;
• Shipping and logistics;
• Website hosting and infrastructure;
• Customer support;
• Fraud prevention;
• Security;
• Analytics;
• Marketing;
• Accounting;
• Professional advice; and
• Legal compliance.

We seek to limit disclosures to information reasonably necessary for the relevant purpose.

6. Payment Processing

Payment information may be transmitted directly to payment processors and financial institutions necessary to authorise and complete a transaction.

Those providers may process information under their own legal obligations, privacy practices and security procedures.

7. Shipping and Fulfilment

Information such as your name, delivery address, contact information and order details may be shared with fulfilment partners, warehouses, postal operators, couriers and logistics providers where necessary to deliver your purchase.

8. Cookies and Similar Technologies

rothysyx.shop may use cookies and similar technologies for functionality, security, checkout operation, preferences, analytics and permitted marketing activities.

Some technologies are technically necessary and may not require consent.

Where French or EU law requires consent before placing or accessing non-essential cookies or similar trackers, such technologies should be used only after valid consent has been obtained.

CNIL guidance confirms that prior consent is required for certain cookies and trackers, while some technically necessary trackers may be exempt.

Users should be provided with appropriate controls to manage applicable cookie preferences.

9. Marketing Communications

Where legally permitted, we may send information regarding our products, services or promotions.

Where consent is required, marketing communications will be sent on the basis of that consent.

You may unsubscribe from electronic marketing communications through the unsubscribe function provided in the message or by contacting info@rothysyx.shop.

Opting out of marketing does not prevent us from sending transactional or service communications relating to an order or account.

10. International Data Transfers

Because ecommerce technology providers, payment processors, cloud-service providers and logistics providers may operate internationally, personal information may be processed outside your country.

Where GDPR rules governing international transfers apply, appropriate lawful transfer mechanisms and safeguards should be used.

11. Data Retention

We retain personal information only for periods reasonably necessary for the purposes for which it was collected and for applicable legal, accounting, tax, security and dispute-resolution requirements.

CNIL guidance confirms that personal data should not be retained indefinitely and that retention periods should be determined according to the purpose of processing and applicable legal obligations.

For example, transaction records may need to be retained longer than ordinary marketing information because of accounting, tax or legal requirements.

12. Data Security

We use reasonable administrative, technical and organisational safeguards intended to protect personal information against unauthorised access, unlawful processing, loss, misuse, alteration or disclosure.

No internet transmission or electronic storage method can be guaranteed to be absolutely secure.

13. Your Data Protection Rights

Depending on applicable law and the circumstances of processing, you may have rights including:

• The right to receive information about processing;
• The right of access;
• The right to rectification;
• The right to erasure;
• The right to restriction of processing;
• The right to object;
• The right to data portability;
• The right to withdraw consent where processing is based on consent; and
• Rights relating to certain automated decision-making.

CNIL describes rights of access, rectification, opposition and portability, among other GDPR protections.

To exercise an applicable right, contact:

info@rothysyx.shop

We may request information reasonably necessary to verify your identity before fulfilling a request.

14. Right to Object to Direct Marketing

You may object at any time to the processing of your personal information for direct marketing purposes.

Where you unsubscribe from marketing, limited information may be retained on a suppression list to ensure that your opt-out preference is respected.

15. Complaints

If you believe that your personal information has been processed in violation of applicable data-protection law, please contact us first at:

info@rothysyx.shop

Where GDPR rights apply, you may also have the right to lodge a complaint with the competent supervisory authority, including the Commission nationale de l'informatique et des libertés (CNIL) where it is the competent authority.

16. Children's Privacy

Our website is intended for customers legally capable of entering into the relevant purchase transaction.

We do not knowingly seek to use children's personal information for inappropriate marketing purposes.

If you believe personal data relating to a child has been processed improperly, contact info@rothysyx.shop.

17. Third-Party Websites

Our website may contain links to third-party websites.

We do not control the privacy practices of independent third parties, and customers should review the privacy information provided by those websites.

18. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes in our services, technologies, legal requirements or business practices.

The current version will be published on rothysyx.shop with an updated revision date.