Privacy Policy

Last updated: [date]

This Privacy Policy explains how Sheeply ("we", "us", "our") collects, uses, and protects your personal data when you visit or make a purchase from our online store, in accordance with the EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable French data protection law.

1. Data Controller

The data controller responsible for your personal data is:
Sheeply – [Company legal name]
[Registered address]
SIRET: [SIRET number]
Email: [support email]

2. What Data We Collect

  • Identity & contact data: name, billing and shipping address, email, phone number.
  • Order data: products purchased, order value, order history.
  • Payment data: processed securely by our payment providers; we do not store full card details.
  • Technical data: IP address, browser type, device information, and cookie identifiers.

3. Why We Use Your Data & Legal Basis

  • To process and deliver your orders — performance of a contract.
  • To provide customer support — performance of a contract / legitimate interest.
  • To send marketing emails, where you have subscribed — consent.
  • To comply with accounting and tax obligations — legal obligation.
  • To improve and secure our website — legitimate interest.

4. Cookies

Our store uses cookies and similar technologies to operate the site, remember your cart, and measure audience. Non-essential cookies are only set with your consent, which you can withdraw at any time via our cookie settings.

5. Sharing Your Data

We share data only with providers necessary to run our store, including our e-commerce platform (Shopify), payment processors, and shipping carriers. These providers act as processors and are bound by data protection agreements. Some may process data outside the EU under appropriate safeguards (e.g. Standard Contractual Clauses).

6. Data Retention

We keep your personal data only as long as necessary for the purposes described above, including legal accounting retention periods (generally up to 10 years for invoices under French law).

7. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. To exercise these rights, contact us at [support email]. You also have the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).

8. Contact

For any question regarding this policy or your personal data, contact Sheeply at [support email].