Privacy policy
1. Data controller
ACHATUNION is the controller of personal data processed in connection with https://achatunionshop.com, except where a service provider acts as an independent controller for its own purposes.
Controller details: ACHATUNION, SASU with share capital of EUR 1, registered office at 1 Rue Sainte-Marguerite, 21200 Beaune, France; SIREN 948 095 849; email support@achatunionshop.com.
2. Personal data collected
Depending on how a visitor uses the store, ACHATUNION may collect identity and contact details; billing and delivery addresses; account credentials; order, return and customer service records; payment status and limited payment information; device, browser, IP address, cookie and usage information; communication preferences; and any information voluntarily provided in messages.
Complete card details are processed through authorised payment services and are not intended to be stored directly by ACHATUNION. Customers should not send payment card details by email.
3. Sources of data
Data is collected directly from customers and visitors, automatically through the Shopify storefront and permitted cookies, and from service providers involved in payment, fraud prevention, fulfilment, delivery, hosting and customer support.
4. Purposes and legal bases
Contract. Data is used to create and manage orders, take payment, deliver goods, issue invoices, process cancellations, returns, exchanges and refunds, and provide requested customer service.
Legal obligations. Data is used to maintain accounting and tax records, respond to lawful requests, fulfil consumer-law duties and establish compliance.
Legitimate interests. Data may be used to secure the website, prevent fraud and abuse, improve store operation, manage disputes and understand aggregate store performance, provided those interests are not overridden by individual rights.
Consent. Consent is relied on for optional marketing communications and for non-essential cookies or similar technologies where consent is legally required. Consent can be withdrawn at any time without affecting prior lawful processing.
5. Shopify and other recipients
The store is hosted on Shopify. Shopify processes customer data to provide the online storefront, checkout, security, infrastructure and related commerce services. Personal data may also be shared, only as necessary, with payment providers, banks, fulfilment and delivery providers, professional advisers, technical vendors and public authorities acting within their lawful powers.
ACHATUNION does not sell personal data. Service providers are expected to process information under appropriate contractual and confidentiality obligations where they act on ACHATUNION's behalf.
6. International transfers
Shopify and certain service providers may process data outside France or the European Economic Area. Where required, transfers are supported by an adequacy decision, approved contractual clauses or another lawful transfer mechanism, together with appropriate safeguards.
7. Cookies and consent choices
The site uses cookies or similar technologies that are necessary for functions such as security, checkout, cart contents and language or privacy preferences. Optional analytics, personalisation or advertising technologies will be used only where configured and where the required consent has been obtained.
Visitors can accept, reject or revise non-essential cookie choices through the store's Cookie Preferences or privacy settings. Browser settings may also block cookies, although blocking essential cookies can prevent parts of the store from working.
8. Marketing
Marketing email is sent only to people who have actively subscribed or where another lawful basis applies. Every marketing email will provide an unsubscribe method. Unsubscribing from marketing does not prevent service messages needed to administer an order or account.
9. Retention
Personal data is kept only for as long as necessary for the relevant purpose and applicable legal requirements. Order, invoice and accounting records may be retained for up to 10 years. Customer service and dispute records are kept for the time necessary to handle the request and establish or defend legal claims. Marketing details are kept until consent is withdrawn or the applicable inactivity period expires. Cookie durations depend on their purpose and the settings displayed in the consent tool.
When data is no longer required, it is deleted, anonymised or securely archived with restricted access where continued retention is legally required.
10. Individual rights
Subject to applicable conditions, individuals may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests or direct marketing. They may withdraw consent at any time and may provide instructions concerning personal data after death where French law allows.
Requests should be sent to support@achatunionshop.com. ACHATUNION may request proportionate information to verify identity. Individuals may also lodge a complaint with the Commission Nationale de l'Informatique et des Libertes (CNIL) at https://www.cnil.fr.
11. Security and children
Reasonable technical and organisational measures are used to protect personal data. No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.
The store is intended for adults capable of entering a purchase contract. ACHATUNION does not knowingly seek personal data from children for independent use of the store.
12. Changes
This policy may be updated to reflect legal, technical or operational changes. The current version and update date will be posted at https://achatunionshop.com/policies/privacy-policy.