Privacy policy

This Privacy Policy explains how verabradleyoutletx.shop collects, uses, discloses, stores and otherwise processes personal information when individuals visit our website, purchase products, communicate with us or otherwise interact with our online store.

For privacy-related questions or requests, contact:

Email: info@verabradleyoutletx.shop

This Policy is intended to reflect applicable European and French data-protection principles, including the General Data Protection Regulation where applicable.

The GDPR requires information concerning personal-data processing to be provided in a concise, transparent, understandable and accessible manner using clear language.

Data Controller

For personal information processed in connection with the operation of this online store, the store operator identified as:

verabradleyoutletx.shop

acts as the controller where it determines the purposes and means of processing.

Privacy enquiries can be directed to:

info@verabradleyoutletx.shop

Personal Information We May Collect

Depending on how you interact with our website, we may collect or receive categories of information including:

Identity Information

This may include:

• Name;
• Billing name;
• Shipping recipient name; and
• Other identifiers supplied during an order or customer-service interaction.

Contact Information

This may include:

• Email address;
• Telephone number where provided;
• Billing information;
• Shipping information; and
• Other contact details voluntarily submitted.

Order and Transaction Information

This may include:

• Products purchased;
• Product variations;
• Quantity;
• Order value;
• Order number;
• Discounts;
• Transaction status;
• Returns;
• Refunds; and
• Order history.

Payment-Related Information

Payments may be processed through Shopify, payment processors, banks or other payment-service providers.

We may receive information concerning payment status, payment method type, transaction references and fraud-screening results.

Complete card details may be processed directly by payment providers rather than stored by us.

Device and Technical Information

When you access the website, information may be collected automatically, such as:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Language settings;
• Approximate location derived from technical information;
• Referring URLs;
• Page interactions;
• Session information; and
• Diagnostic or security information.

Customer-Service Information

When you contact us, we may process:

• Your message;
• Email address;
• Order number;
• Product information;
• Photographs supplied in connection with a complaint;
• Return or refund information; and
• Other details necessary to handle the enquiry.

How We Use Personal Information

We may use personal information for purposes including:

• Operating our website;
• Processing orders;
• Providing checkout functionality;
• Taking and verifying payments;
• Arranging fulfilment and delivery;
• Sending order confirmations;
• Providing shipping updates;
• Managing returns and refunds;
• Responding to customer-service enquiries;
• Preventing fraud and misuse;
• Maintaining website security;
• Maintaining transaction and accounting records;
• Complying with legal obligations;
• Improving website functionality;
• Analysing website performance;
• Administering customer preferences;
• Managing marketing communications where legally permitted; and
• Establishing, exercising or defending legal claims.

Legal Bases for Processing

Where the GDPR applies, personal information is processed only where an appropriate legal basis exists.

Depending on the circumstances, those bases may include:

Performance of a Contract

We process information where necessary to:

• Process an order;
• Receive payment;
• Deliver products;
• Provide transaction-related communications;
• Manage returns; or
• Otherwise perform our obligations to customers.

Compliance With Legal Obligations

Information may be processed where necessary to comply with legal requirements relating to:

• Accounting;
• Tax;
• Consumer protection;
• Fraud prevention;
• Regulatory requests; or
• Other applicable laws.

Legitimate Interests

We may process information where necessary for legitimate business interests that are not overridden by the rights and interests of the individual.

Examples may include:

• Protecting the website against fraud;
• Improving our services;
• Securing systems;
• Managing customer relationships; and
• Establishing or defending legal claims.

Consent

Where applicable law requires consent, we may ask for consent before undertaking a particular activity, including certain marketing or non-essential cookie activities.

Where processing is based on consent, consent may be withdrawn in accordance with applicable law.

Shopify

Our store uses Shopify ecommerce infrastructure.

Shopify may process customer personal information to provide ecommerce, hosting, checkout, security and related services to merchants.

Shopify's current Data Processing Addendum describes Shopify acting as a processor for merchant customer data for relevant services and its use of subprocessors. Shopify also states that EEA customer data is initially processed by Shopify International Limited in Ireland.

Shopify may also process certain information under its own privacy terms where it acts independently for particular services.

Service Providers

We may disclose personal information to appropriately selected providers where reasonably necessary for operating our business.

Such providers may include:

• Shopify;
• Payment processors;
• Fraud-prevention providers;
• Shipping and logistics companies;
• Fulfilment providers;
• Hosting and technical providers;
• Analytics services;
• Customer-support services;
• Email communication services;
• Professional advisers; and
• Other providers necessary to operate the store.

These organisations may process information only in accordance with their applicable contractual and legal obligations.

Payment Processing

Payment details submitted during checkout may be processed by payment providers rather than directly by verabradleyoutletx.shop.

Payment providers may apply their own fraud prevention, legal compliance and security procedures.

Customers should review the information made available by the applicable payment provider where appropriate.

Shipping and Fulfilment

To deliver an order, relevant personal information may be shared with:

• Warehouses;
• Fulfilment partners;
• Postal operators;
• Courier companies;
• Logistics providers; and
• Other entities reasonably necessary for delivery.

The information disclosed is generally limited to what is reasonably necessary to process and deliver an order.

Cookies and Similar Technologies

Our website may use cookies and similar technologies for purposes such as:

• Maintaining shopping-cart functionality;
• Remembering preferences;
• Supporting secure checkout;
• Maintaining user sessions;
• Fraud prevention;
• Analytics;
• Measuring website performance; and
• Advertising or marketing where legally permitted.

French CNIL guidance provides that consent is generally required before storing or accessing certain non-essential trackers, while trackers that are strictly necessary for requested functionality may be exempt from that consent requirement.

Where required, visitors will be provided with privacy controls relating to non-essential cookies.

Shopify also provides customer-privacy tools, including cookie-banner functionality, for merchants.

Marketing Communications

Where legally permitted, we may send marketing communications concerning products, promotions or store updates.

Where prior consent is legally required, marketing communications will only be sent based on the appropriate consent.

Recipients may withdraw from marketing communications using the unsubscribe mechanism provided or by contacting:

info@verabradleyoutletx.shop

Transactional messages necessary for an existing order may still be sent even after marketing communications are disabled.

Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or where a longer retention period is required or permitted by law.

Relevant factors may include:

• The duration of the customer relationship;
• Accounting or taxation obligations;
• Consumer-law obligations;
• Fraud-prevention requirements;
• Chargeback periods;
• Limitation periods;
• Legal claims; and
• Security requirements.

When information is no longer required, it may be deleted, anonymised or otherwise securely handled in accordance with applicable requirements.

International Transfers

Because ecommerce services can involve providers operating internationally, personal information may be processed outside the country in which the customer lives.

Where GDPR-protected information is transferred outside the European Economic Area, appropriate transfer mechanisms and safeguards must be used where required by law.

Shopify states that European personal data transferred internationally is protected through applicable mechanisms, including approved Binding Corporate Rules in relevant circumstances.

Data Security

We seek to use reasonable technical and organisational safeguards appropriate to the nature of personal information and the risks associated with processing.

Measures may include appropriate access controls, service-provider safeguards, security monitoring and protected ecommerce infrastructure.

However, no internet transmission or storage system can be guaranteed to be absolutely secure.

Customers should protect account credentials and payment information and should contact us if they suspect unauthorised use.

Your Data Protection Rights

Where the GDPR or other applicable data-protection legislation applies, individuals may have rights including:

• The right to receive information concerning processing;
• The right of access;
• The right to request correction of inaccurate information;
• The right to request deletion in qualifying circumstances;
• The right to restrict processing in qualifying circumstances;
• The right to object to certain processing;
• The right to data portability where applicable;
• Rights concerning certain automated decision-making; and
• The right to withdraw consent where processing is based on consent.

CNIL guidance confirms that individuals have statutory rights allowing them to retain control over personal data concerning them.

Exercising Your Rights

Requests concerning personal information may be sent to:

info@verabradleyoutletx.shop

We may need to verify the requester's identity before fulfilling a request where verification is reasonably necessary to protect personal information.

Requests will be handled in accordance with applicable law.

Complaints

Individuals may contact us first if they believe that their personal information has been handled improperly.

They may also have the right to lodge a complaint with the competent data-protection supervisory authority, including the Commission nationale de l'informatique et des libertés (CNIL) in France where applicable.

Children's Privacy

Our website is intended for ordinary ecommerce transactions and is not designed to knowingly collect personal information from children in circumstances prohibited by applicable law.

Where a person does not have legal capacity to complete a transaction, appropriate parental or guardian involvement may be required.

Business Transfers

If our business or assets are involved in a restructuring, merger, sale, acquisition or similar transaction, personal information may be disclosed or transferred where legally permitted and subject to appropriate safeguards.

Legal Disclosure

We may disclose information where reasonably necessary to:

• Comply with applicable law;
• Respond to lawful requests;
• Protect customers;
• Prevent fraud;
• Protect our rights or property; or
• Establish, exercise or defend legal claims.

Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect legal, technical, operational or business developments.

Material changes will be communicated where required by applicable law.

The current version will be published through verabradleyoutletx.shop.

Contact

For privacy questions or data-protection requests:

verabradleyoutletx.shop
Email: info@verabradleyoutletx.shop