The personal information we collect or process

When we use the term "personal information," we mean information that identifies you or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or rendered anonymized. We may collect or process the following categories of personal information, including inferences drawn from that personal information, depending on your interactions with the Services, your place of residence, and applicable law:

• Contact details : name, address, billing address, delivery address, telephone number, email address.
• Financial information : card numbers (credit/debit), bank account information, payment details and confirmation, payment method.
• Account information : username, password, security questions, preferences and settings.
• Transaction information : items viewed, added to cart, wanted, purchased, returned, exchanged or cancelled, transaction history.
• Communications : content of your messages (customer service, requests, feedback).
• Device information : device, browser, network, IP address, unique identifiers.
• Usage information : interactions with the Services, dates and methods of access.

Sources of personal information

• Directly with you : account creation, use of Services, communications.
• Automatically via the Services : via your device, our sites, cookies and similar technologies.
• With our service providers : technologies and processing carried out on our behalf.
• With partners or third parties .

How we use your personal information

• Providing, adapting and improving the Services : executing the contract, processing payments and orders, remembering preferences, managing account, shipments, returns/exchanges, reviews, recommendations and personalization.
• Marketing and advertising : sending marketing communications (email, SMS, mail), online advertising on our Services and third-party sites depending on your activity.
• Security and fraud prevention : authentication, detection, and intervention in the event of fraudulent/illegal activity. You are responsible for maintaining the confidentiality of your login credentials.
• Communicating with you : customer service, request management, business relationship.
• Legal reasons : legal compliance, procedures, application of our terms and policies.

How we disclose personal information

We may disclose your personal information in the following cases:

• With Shopify, service providers and other third parties providing services on our behalf (IT, payments, analytics, customer service, cloud, processing and shipping).
• With business and marketing partners for personalized marketing and advertising based on your online activity with different merchants and on various sites.
• On instruction or with your consent (shipping, social widgets, third-party connections).
• With our affiliates / group .
• In the context of a transaction (merger, bankruptcy filing), for legal compliance, the application of our terms/policies, and the protection of our rights, the Services, users or third parties.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access and use of the Services to provide and improve them. The information you submit may be transferred to Shopify and third parties located in other countries. We also use enhanced Shopify features that integrate data from your interactions with our store, other merchants, and Shopify. In these cases, Shopify is the data controller responsible for processing your data to respond to your requests to exercise your rights. For more information, please see Shopify's Consumer Privacy Policy and the Shopify Privacy Portal.

Third-party websites and links

The Services may contain links to third-party websites. We encourage you to review their privacy and security policies. We do not guarantee the confidentiality/security or the accuracy/completeness of the information on these sites. Information provided in public/semi-public areas (including social networks) may be visible to other users. The inclusion of a link does not imply endorsement unless otherwise stated.

Children's data

The Services are not intended for children, and we do not knowingly collect personal information from minors under the age of majority in your jurisdiction. Parents/guardians may request the deletion of a child's data by contacting us. As of the effective date, we are not aware of any "sharing" or "sale" of personal information from individuals under the age of 16.

Security and storage of your information

No security measure is perfect, and we cannot guarantee absolute security. Avoid unsecured channels for sensitive information. Data retention periods depend on factors such as account management, service provision, legal obligations, disputes, and the enforcement of contracts/policies.

Your rights and your choices

Depending on your place of residence and the applicable law, you may have the following rights (not absolute, applicable depending on circumstances):

• Right of access / information to your personal information.
• Right to erasure (deletion of personal information).
• Right to correct inaccurate information.
• Right to data portability (copying and transferring in certain cases).
• Right to object to the sale/sharing of data for targeted advertising purposes . You can object to these uses. If you access our site with the Global Privacy Control signal enabled, we will treat it as an opt-out request for the device and browser used, and, if possible, for the associated account. With the exception of GPC, we do not recognize other "Do Not Track" signals.
• Communication preferences : unsubscribe from promotional emails (we may still send you non-promotional emails related to your account/orders).

If you reside in the UK or the EEA, you may also, subject to local laws: (i) object to or request the restriction of certain processing; (ii) withdraw your consent where the processing depends on it (without retroactive effect on the previous lawfulness).

You can exercise these rights through the designated areas on the Services or by contacting us (see Contact ). To learn more about the processing carried out by Shopify and your rights, please visit https://privacy.shopify.com/fr .

We will not penalize you for exercising your rights. We may need to verify your identity, or that of an authorized representative (with supporting documents), before processing a request. We will respond within the legal timeframes.

Complaints

For any complaints regarding our processing of your personal information, please contact us (see Contact ). Depending on your place of residence, you may contest our decision or contact the competent data protection authority in your region (a list of authorities for the EEA is available from the European Commission).

International transfers

We may transfer, store, and process your personal information outside your country of residence. For transfers outside the EEA/UK, we use recognized mechanisms (European Commission standard contractual clauses or UK equivalents), unless an adequacy decision is made.

Changes to this Privacy Policy

We may update this Policy at any time (changes in practices, operational/legal/regulatory reasons). We will publish the revised version, update the "Last Updated" date, and provide notice as required by law.

Contact

If you have any questions about our privacy practices or this Policy, or if you wish to exercise your rights, please call us, email us at contact@elsbenvinguts.com , or write to us at: Carrer Major 19, Pas de la Casa, AD200, Andorra. For the purposes of applicable data protection legislation, we are the data controller of your personal information.