Privacy policy

This Privacy Policy describes how whitefoxboutiquex.shop collects, uses, discloses, stores, and otherwise processes personal information when you visit our website, communicate with us, create an account, place an order, or otherwise interact with our services.

For privacy questions or requests:

Email: info@whitefoxboutiquex.shop

This Policy is intended to reflect applicable data-protection requirements, including the General Data Protection Regulation where applicable. GDPR transparency obligations include informing individuals about the controller, purposes and legal bases of processing, recipients, retention, transfers, and applicable data-subject rights.

1. Personal Information We May Collect

Depending on how you interact with whitefoxboutiquex.shop, we may collect information including:

  • Name;
  • Billing address;
  • Shipping address;
  • Email address;
  • Telephone or contact information supplied during checkout;
  • Customer-account information;
  • Order information;
  • Products purchased or considered;
  • Returns and refund information;
  • Customer-service communications;
  • Payment-related transaction information;
  • Device information;
  • Browser information;
  • IP address;
  • Cookie identifiers;
  • Website usage information;
  • Referral information;
  • Fraud-prevention and security information;
  • Marketing preferences; and
  • Information you voluntarily provide when communicating with us.

We seek to collect only information reasonably necessary for legitimate business, contractual, legal, security, or consent-based purposes.

2. Payment Information

Payments are generally processed by payment processors, financial institutions, card networks, Shopify-supported payment services, or other authorised payment providers.

We do not require customers to send complete payment-card details or security codes through ordinary email.

Payment providers may process information according to their own legal obligations and privacy practices.

3. How We Collect Information

We may receive personal information:

  • Directly from you;
  • Automatically when you use our website;
  • Through cookies and similar technologies;
  • Through Shopify and related ecommerce services;
  • From payment providers;
  • From shipping and fulfilment providers;
  • From fraud-prevention and security providers;
  • From analytics and advertising services where legally permitted; and
  • From other third parties where permitted by law.

4. Purposes of Processing

We may process personal information for purposes including:

Order fulfilment: receiving, verifying, processing, shipping, and managing purchases.

Contract administration: managing orders, payments, returns, refunds, complaints, and customer accounts.

Customer service: responding to questions and providing assistance.

Fraud and security: detecting suspicious activity, preventing fraud, protecting transactions, and maintaining website security.

Legal compliance: maintaining records and complying with tax, accounting, consumer-protection, regulatory, or other legal obligations.

Store administration: operating, maintaining, analysing, troubleshooting, and improving our website and services.

Marketing: sending marketing communications or supporting advertising activities where permitted and, where required, based on valid consent.

Analytics: understanding how customers use our website and improving user experience where permitted by applicable law.

5. Legal Bases for Processing

Where the GDPR applies, personal data may be processed on one or more legal bases, including:

Performance of a contract: when processing is necessary to take steps requested by you before entering a contract or to perform a purchase contract.

Legal obligation: when processing is required to comply with applicable laws.

Legitimate interests: where processing is reasonably necessary for legitimate business purposes and those interests are not overridden by your rights and freedoms.

Consent: where applicable law requires your freely given, specific, informed, and unambiguous consent.

The CNIL confirms that consent under the GDPR must be freely given, specific, informed, and unambiguous.

6. Shopify

Our online store is hosted and supported using Shopify.

Shopify processes customer information in connection with the provision of its ecommerce platform and related services. Shopify specifically advises merchants subject to the GDPR to inform customers that the store is hosted by Shopify and that Shopify processes customer personal data in connection with the services it provides.

Depending on the Shopify features configured for a store, information about customer activity may also be processed by Shopify and relevant service providers for platform functionality, security, personalisation, analytics, advertising, or other services permitted by applicable law and configured by the merchant.

Shopify maintains its own privacy information regarding its processing activities.

7. Service Providers

We may disclose personal information to service providers where reasonably necessary for the operation of our business.

These may include providers involved in:

  • Ecommerce hosting;
  • Payment processing;
  • Order fulfilment;
  • Shipping and logistics;
  • Customer service;
  • IT infrastructure;
  • Cloud storage;
  • Fraud prevention;
  • Cybersecurity;
  • Analytics;
  • Advertising;
  • Marketing communications;
  • Accounting;
  • Legal or regulatory compliance.

Service providers are expected to process information in accordance with applicable contractual and legal requirements.

8. Shipping Providers

To deliver an order, it may be necessary to provide relevant information to shipping carriers, fulfilment centres, postal operators, logistics partners, customs service providers, or other delivery-related organisations.

Information shared may include the customer's name, delivery address, contact details, order reference, and information reasonably necessary to complete delivery.

9. Legal Disclosures

We may disclose information when reasonably necessary to:

  • Comply with applicable law;
  • Respond to a lawful court order or regulatory request;
  • Protect our legal rights;
  • Protect customers or third parties;
  • Investigate fraud;
  • Enforce our agreements; or
  • Protect the security and integrity of our services.

10. Business Transactions

If all or part of the business associated with whitefoxboutiquex.shop is reorganised, transferred, merged, financed, sold, or otherwise involved in a corporate transaction, information may be transferred as part of that transaction where legally permitted.

Any such processing remains subject to applicable data-protection requirements.

11. Cookies and Similar Technologies

whitefoxboutiquex.shop may use cookies, pixels, local storage, tags, and similar technologies to provide website functionality, maintain shopping carts and sessions, remember preferences, maintain security, analyse website performance, and, where permitted, support advertising.

Certain cookies and trackers require prior consent, while strictly necessary technologies may be exempt from that requirement. The CNIL states that users must be informed and generally provide prior consent before certain non-essential cookies and trackers are placed or accessed.

Where required, we use a cookie or consent-management mechanism allowing customers to make appropriate choices regarding non-essential technologies.

Continuing to browse the website is not treated as valid consent where applicable law requires an affirmative action.

12. Marketing Communications

Where permitted by law, we may communicate with customers about products, store information, promotions, or other commercial content.

Where consent is legally required, marketing will be based on valid consent.

Customers may withdraw marketing consent or unsubscribe using the mechanism provided in the relevant communication or by contacting:

info@whitefoxboutiquex.shop

Withdrawal of marketing consent does not prevent us from sending transactional messages necessary to administer an existing order or customer-service request.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, contractual, accounting, tax, fraud-prevention, dispute-resolution, and record-keeping requirements.

Retention periods may vary depending on:

  • The type of information;
  • The purpose for which it is processed;
  • Applicable statutory obligations;
  • The existence of a customer relationship;
  • Potential or actual disputes; and
  • Security and fraud-prevention needs.

Information that is no longer required will be deleted, anonymised, or otherwise handled in accordance with applicable law and technical capabilities.

14. International Data Transfers

Some service providers may process personal information outside France or the European Economic Area.

Where personal data subject to GDPR restrictions is transferred internationally, appropriate legal transfer mechanisms and safeguards will be used where required.

Shopify states that even where certain merchant customer data is stored in Europe, international transfers may still occur as part of its processing infrastructure.

15. Security

We use reasonable administrative, organisational, and technical measures intended to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

However, no internet transmission, storage platform, or information-security system can be guaranteed to be completely secure.

Customers are responsible for maintaining the confidentiality of account credentials and should contact us if they suspect unauthorised account activity.

16. Your GDPR Rights

Where the GDPR applies, and subject to legal conditions and exceptions, you may have rights including:

  • The right of access;
  • The right to rectification;
  • The right to erasure;
  • The right to restriction of processing;
  • The right to data portability where applicable;
  • The right to object to certain processing;
  • The right to withdraw consent where processing is based on consent; and
  • The right to lodge a complaint with a competent supervisory authority.

These rights are recognised under the GDPR and by the CNIL.

17. Exercising Your Rights

To submit a privacy request, contact:

info@whitefoxboutiquex.shop

Please clearly describe the right you wish to exercise and provide sufficient information for us to identify the relevant data.

Where reasonably necessary, we may request additional information to verify your identity and prevent unauthorised disclosure or deletion of personal information.

We will process valid requests in accordance with applicable legal requirements.

18. Right to Complain

Individuals whose personal data is subject to French data-protection law may have the right to submit a complaint to the Commission Nationale de l'Informatique et des Libertés (CNIL) or another competent supervisory authority.

The right to lodge a complaint is part of the required privacy information under French and EU data-protection rules.

19. Children's Privacy

Our services are intended for individuals who are legally capable of entering into online purchasing transactions or who use the services with appropriate legal authorisation.

We do not knowingly seek to collect personal information from children for purposes inconsistent with applicable law.

20. Third-Party Services

Our website may contain links to third-party websites or services.

We do not control the privacy practices of independent third parties.

Customers should review the privacy policies of third-party services before providing personal information directly to them.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

  • Our business practices;
  • Website features;
  • Shopify services;
  • Service providers;
  • Technology;
  • Security procedures; or
  • Applicable legal requirements.

The current version will be published on whitefoxboutiquex.shop with an updated revision date where appropriate.

22. Contact

For privacy questions, data-protection enquiries, or requests to exercise applicable rights:

whitefoxboutiquex.shop
Email: info@whitefoxboutiquex.shop