Politique de confidentialité

This Privacy Policy explains how fostanix.shop collects, uses, stores, shares, and otherwise processes personal information when customers visit our online store, communicate with us, create an account, place an order, or otherwise use our services.

For privacy questions or requests:

Email: info@fostanix.shop

For purposes of personal data processed directly for the operation of the fostanix.shop store, fostanix.shop acts as the relevant data controller where applicable.

1. Scope

This Privacy Policy applies to personal information processed through fostanix.shop and related customer interactions.

It applies to website visitors, customers, people who communicate with our support team, and other individuals whose personal information we process in connection with operating our online store.

2. Information We May Collect

Depending on how you interact with fostanix.shop, we may process information including your name, email address, telephone number when provided, billing information, shipping information, order history, products purchased, returns and refund information, account details, communications with customer service, IP address, browser information, device information, website interactions, shopping-cart activity, cookie identifiers, fraud-prevention data, and other information reasonably required to provide our services.

Payment card information may be processed by payment providers and checkout service providers. fostanix.shop does not necessarily receive complete payment-card credentials.

3. Information You Provide Directly

You may provide personal information when you place an order, enter shipping and billing details, create or manage an account, contact customer support, request a return, exercise a consumer right, subscribe to permitted marketing communications, or submit another request through our store.

You are responsible for ensuring that information supplied to us is reasonably accurate.

4. Information Collected Automatically

When you visit our website, certain technical information may be collected automatically.

This may include device identifiers, IP address, browser type, operating system, referring pages, pages viewed, approximate location derived from technical information, session activity, and interaction information.

This data may be used to operate the website, maintain security, understand site performance, remember preferences, prevent fraud, and, where permitted, measure or improve marketing.

5. Purposes of Processing

We may process personal information to provide and fulfil orders; process payments; arrange shipment and delivery; communicate order updates; respond to customer service enquiries; process returns and refunds; maintain customer accounts; prevent fraud and misuse; maintain website security; comply with legal, tax, accounting, and regulatory obligations; establish, exercise, or defend legal claims; improve our services; analyse store performance; and provide marketing communications where a valid legal basis exists.

6. Legal Bases

Where the GDPR applies, personal data may be processed on one or more appropriate legal bases.

These may include performance of a contract, steps requested before entering a contract, compliance with a legal obligation, legitimate interests that are not overridden by the individual's rights and freedoms, and consent where consent is legally required.

GDPR transparency rules require organisations to inform individuals about matters such as the processing purposes, legal basis, retention, recipients, and applicable rights.

7. Orders and Contract Performance

When you place an order, we need certain information to process the purchase.

For example, we may need your name, contact details, delivery address, order details, and information required to confirm payment.

Without required information, we may not be able to accept or fulfil an order.

8. Fraud Prevention and Security

We may use relevant information to protect fostanix.shop, customers, payment providers, and other parties from fraud, unauthorised transactions, account misuse, security threats, and unlawful activity.

Where appropriate, this processing may be based on our legitimate interests or legal obligations.

9. Shopify

Our store uses Shopify technology.

Shopify may process customer personal information to provide the e-commerce platform and related services.

Shopify's current Data Processing Addendum states that Shopify processes merchant customer data as a processor for various services and may act as a separate controller for certain Enhanced Services. Shopify also requires merchants to provide appropriate privacy notices and lawful choices where required.

Personal information relating to customers in the European Economic Area may be processed through Shopify International Limited and Shopify's authorised affiliates and subprocessors subject to applicable data-protection safeguards.

10. Service Providers

We may share personal information with companies that assist us in operating our business, such as Shopify, payment processors, logistics providers, fulfilment providers, shipping carriers, fraud-prevention services, website technology providers, customer-support services, professional advisers, and analytics or marketing providers where permitted.

These parties may process information only to the extent reasonably necessary for their respective functions, subject to applicable contractual and legal obligations.

11. Legal Disclosure

We may disclose personal information where reasonably necessary to comply with a legal obligation, lawful request, court order, regulatory requirement, or other binding legal process.

Information may also be disclosed when reasonably necessary to protect legal rights, investigate fraud, protect customers, defend legal claims, or address threats to the security of our services.

12. Business Transactions

If fostanix.shop is involved in a merger, acquisition, restructuring, sale, financing, reorganisation, transfer of assets, or similar business transaction, relevant personal information may be disclosed or transferred as part of that transaction, subject to applicable data-protection law.

13. International Data Transfers

Some of our technology and service providers may process personal information outside France or outside the European Economic Area.

Where GDPR restrictions apply to an international transfer, appropriate transfer mechanisms or safeguards will be used where required.

Shopify's current data-processing terms describe mechanisms including Binding Corporate Rules and European Commission Standard Contractual Clauses for relevant international transfers.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for any additional period required or permitted by law.

Retention may depend on factors including whether an account remains active, whether a purchase has been completed, whether information is required for tax or accounting records, whether a dispute exists, whether a legal claim could reasonably arise, and whether continued retention is required by law.

French and EU privacy guidance requires organisations to specify retention periods or the criteria used to determine those periods.

When personal information is no longer required, we may delete, anonymise, or securely isolate it as appropriate.

15. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate essential site functions, remember customer choices, maintain shopping-cart functionality, support checkout, prevent fraud, measure performance, analyse website use, and, where permitted, support advertising or marketing.

Some cookies are strictly necessary for requested services and may not require consent.

Other cookies or trackers, particularly certain analytics, advertising, or behavioural technologies, may require prior consent.

CNIL guidance states that users must generally be informed and, for certain non-essential trackers, give consent before those trackers are placed or accessed.

Where required, fostanix.shop will provide a cookie-consent mechanism allowing visitors to make relevant choices.

16. Marketing Communications

Where legally permitted, we may send promotional communications concerning products, offers, or store news.

Where consent is required, marketing communications will only be sent after valid consent has been obtained.

Customers may withdraw marketing consent or unsubscribe from direct marketing communications.

Withdrawal from marketing does not prevent us from sending transactional communications that are necessary for an order, refund, security notice, legal obligation, or customer-service request.

17. Your GDPR Rights

Where the GDPR applies and subject to applicable conditions and exceptions, you may have rights to request access to personal data, correction of inaccurate personal data, deletion of personal data, restriction of processing, objection to certain processing, and portability of eligible data.

Where processing is based on consent, you may withdraw that consent without affecting the lawfulness of processing that occurred before withdrawal.

CNIL describes rights including access, rectification, erasure, restriction, data portability, and objection.

18. Exercising Privacy Rights

To submit a privacy request, email:

info@fostanix.shop

Please clearly describe your request and provide information reasonably necessary to identify the relevant account or transaction.

We may request reasonable verification before providing access to personal information or carrying out a request, particularly where necessary to prevent unauthorised disclosure.

We will respond within the period required by applicable law.

19. Right to Complain

Individuals who believe their personal information has been processed unlawfully may have the right to submit a complaint to the competent supervisory authority.

For individuals in France, the relevant authority is generally the Commission Nationale de l'Informatique et des Libertés (CNIL).

This right exists independently of contacting fostanix.shop directly.

20. Children

Our store is not intentionally designed to collect personal information from children who are not legally able to enter into the relevant transaction or provide valid consent.

If we learn that personal information relating to a child has been collected improperly, we will take appropriate steps in accordance with applicable law.

21. Data Security

We implement reasonable administrative, technical, and organisational measures intended to protect personal information against unauthorised access, misuse, alteration, accidental loss, disclosure, or destruction.

However, no electronic storage or Internet transmission system can guarantee complete security.

Customers should also take reasonable precautions to protect account credentials and should not disclose passwords to unauthorised persons.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, services, legal requirements, or regulatory guidance.

The version displayed on fostanix.shop will be the current version.

Material changes will be communicated where required by applicable law.

23. Contact

For privacy enquiries and data-protection requests:

fostanix.shop
Email: info@fostanix.shop