Politique de confidentialité

This Privacy Policy explains how plus-size-clothing.shop collects, uses, shares, stores, and otherwise processes personal information when you visit our website, make a purchase, contact us, create or use available account features, subscribe to marketing communications, or otherwise interact with our online store.

This policy is intended to provide transparency regarding our processing of personal data, including processing subject to the European Union General Data Protection Regulation and applicable French data-protection rules.

1. Who Is Responsible for Your Information

For personal information processed in connection with operation of the store, plus-size-clothing.shop acts as the store operator and, where applicable, as data controller.

Contact:

Email: info@plus-size-clothing.shop

Our store is operated using Shopify's e-commerce platform. Shopify and other service providers may process information in connection with hosting, checkout, security, analytics, order fulfilment, payment processing, or other services.

Shopify states that personal data relating to customers in the EEA, United Kingdom, and Switzerland is initially processed by Shopify International Limited in Ireland.

2. Personal Information We May Collect

Depending on how you interact with our store, information processed may include:

• your name;
• billing and delivery details;
• email address;
• telephone number when supplied;
• products ordered;
• shopping-cart information;
• order history;
• transaction and payment-related information;
• communications you send to us;
• return and refund information;
• account information where customer accounts are available;
• device information;
• browser information;
• IP address;
• cookie and similar technology information;
• website usage and interaction information;
• marketing preferences;
• fraud-prevention and security information.

Payment-card information may be processed directly by payment providers or Shopify's payment infrastructure. Customers should not send full payment-card information to us by ordinary email.

3. How We Collect Information

Information may be collected directly from you when you place an order, contact customer service, submit information through the website, subscribe to marketing, or otherwise interact with us.

Information may also be collected automatically through cookies, pixels, server logs, device technologies, and similar mechanisms, subject to applicable consent requirements.

We may additionally receive information from Shopify, payment processors, fulfilment providers, shipping providers, fraud-prevention services, analytics providers, and other service providers supporting operation of the store.

4. Purposes of Processing

We may process personal information to:

process and fulfil orders;

accept and administer payments;

provide order confirmations and transactional communications;

arrange delivery;

manage returns, refunds, cancellations, and customer-service requests;

provide products and services requested by customers;

maintain website functionality;

detect and prevent fraud, abuse, security incidents, and unlawful activity;

protect our rights and the rights of customers;

comply with accounting, taxation, consumer-protection, legal, and regulatory requirements;

improve website functionality and customer experience;

measure website performance;

maintain internal business records;

send marketing communications where permitted;

manage customer consent and privacy preferences; and

establish, exercise, or defend legal claims.

5. Legal Bases for Processing

Where the GDPR applies, we rely on appropriate legal bases depending on the processing activity.

These may include performance of a contract, steps requested before entering a contract, compliance with legal obligations, legitimate interests, and consent.

For example, order information is generally processed because it is necessary to fulfil a purchase contract.

Certain security and fraud-prevention activities may be based on our legitimate interests in protecting customers, our store, and our systems.

Where consent is legally required, such as for certain non-essential cookies or certain marketing activities, processing based on consent will occur only after the required consent has been obtained.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies for functions including shopping-cart operation, checkout, authentication, security, preferences, analytics, and advertising.

Cookies strictly necessary for operation of the website may be used where permitted without consent.

Other cookies or trackers requiring consent under applicable French rules should not be placed or accessed until the user has provided the required consent.

The CNIL states that users must be informed and must give prior consent before certain cookies or trackers are stored or read, while certain exempt technologies can operate without consent.

Where a cookie-management tool is available, you can use it to manage your choices.

Withdrawing consent does not affect processing lawfully carried out before withdrawal.

7. Marketing Communications

We may send promotional emails where permitted by law.

Where consent is required, we will seek consent before sending the relevant marketing communication.

You may unsubscribe from marketing emails by using the unsubscribe mechanism contained in the communication or by contacting:

info@plus-size-clothing.shop

Transactional communications concerning your order, payment, shipping, security, returns, or other service-related matters are not promotional communications and may still be sent when necessary.

8. Sharing Personal Information

We may share personal information with organisations that assist us in operating our store, including Shopify, payment processors, hosting and infrastructure providers, fulfilment providers, delivery carriers, customer-support providers, analytics providers, security services, fraud-prevention providers, professional advisers, and technology providers.

We may also disclose information where required by law, lawful process, regulatory request, or where reasonably necessary to protect legal rights, prevent fraud, enforce agreements, or protect users.

We do not authorise service providers to use information for unrelated purposes merely because they process information on our behalf.

9. International Data Transfers

Some service providers may process information outside France or outside the European Economic Area.

Where GDPR restrictions on international transfers apply, appropriate legal transfer mechanisms should be used, which may include adequacy decisions, Standard Contractual Clauses, or other legally recognised safeguards.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by applicable law.

Retention periods may depend on the type of information, contractual obligations, accounting and tax requirements, consumer-protection requirements, fraud-prevention needs, limitation periods, and legal claims.

When personal information is no longer necessary, we may delete, anonymise, or securely dispose of it, subject to applicable legal requirements.

11. Security

We use reasonable administrative, organisational, and technical measures designed to protect personal information against unauthorised access, misuse, alteration, disclosure, loss, or destruction.

No online system or method of electronic transmission can be guaranteed to be completely secure.

Customers are responsible for protecting passwords and account credentials associated with their use of the store.

12. Your GDPR Rights

Subject to applicable conditions, individuals in France and the European Economic Area may have rights including:

the right to access personal information;

the right to request correction of inaccurate information;

the right to request deletion;

the right to request restriction of processing;

the right to object to certain processing;

the right to data portability where applicable;

the right to withdraw consent where processing is based on consent; and

the right to lodge a complaint with a competent data-protection supervisory authority.

French official guidance requires businesses to inform individuals about their data-processing purposes, recipients, retention, applicable rights, and their right to complain to the CNIL.

13. Exercising Your Rights

To exercise a privacy right, contact:

info@plus-size-clothing.shop

We may request information reasonably necessary to confirm identity before fulfilling certain requests.

We will process valid requests in accordance with applicable data-protection law.

14. Complaints

If you have concerns about how we process personal information, we encourage you to contact us first at:

info@plus-size-clothing.shop

Where applicable, you also have the right to lodge a complaint with the French data-protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL).

15. Children

Our store is intended for customers legally capable of making online purchases.

We do not knowingly seek to collect personal information from children for purposes inconsistent with applicable law.

If you believe that a child has provided personal information improperly, contact us at info@plus-size-clothing.shop.

16. Third-Party Websites

Our website may contain links to external websites.

We do not control the privacy practices of third parties. Customers should review the privacy notices of external websites before submitting personal information to them.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business practices, technology, Shopify configuration, legal requirements, or regulatory guidance.

The version made available on the website will apply from its stated publication or update.

18. Contact

For privacy-related questions or requests:

plus-size-clothing.shop
Email: info@plus-size-clothing.shop