Update date: May 25, 2018
1/ Personal information
The use of our website involves the processing of certain personal information.
Personal data are processed in accordance with European Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (also known as the General Data Protection Regulation: GDPR), and repealing Directive 95/46/EC.
2/ Processing of personal data
The notion of "personal data" includes all information relating to an identified or identifiable natural person, such as name, location data, IP address, contact details, personal characteristics, but also other documents that allow the person to be identified.
Processing" means any operation applied to personal data, from collection to destruction. We are responsible for the processing of your personal data.
3/ Personal data processed
Personal data communicated voluntarily
You are free to choose whether or not to provide your personal data. We collect the personal data that you provide to us, regardless of how you do it. In order to access certain parts of our website or to carry out transactions, we may ask you to provide us with certain personal data in the following ways:
by filling out forms (for example, a "Contact Us" form) on our website;
by subscribing to newsletters or other communications;
by interacting on social networks;
contacting us by phone, email or other contact information;
by registering your email address on our store directories.
Generally, the type of personal data you provide to us includes name, surname, address, contact details and any details necessary for any inquiries or complaints.
However, the processing of your requests, the conclusion of a contract and the delivery of products can be refused if essential data are not provided. You are solely responsible for the accuracy of the data you provide and/or fill in.
Automatically collected personal data
When you visit our website, our server automatically collects certain information generated by the browser or device, which may in some cases constitute personal data, including:
your IP address;
the date, time and duration of your visit to our website;
your browser type;
your operating system;
the pages you visit;
other information about your computer or device;
The information collected automatically is not used to identify you and is not cross-checked with information voluntarily provided.
4/ Purposes of processing personal data
Processing of personal data for which we are responsible
We process and use your personal data only for the purpose for which it is intended. The purposes of this processing are as follows:
Processing necessary to perform a past or future contract:
- to provide requested documents and communications;
- to provide after-sales service;
- providing information on products and commercial offers;
- delivery and invoicing of products and services offered via our website;
- technical management of our website and customer administration;
- to evaluate transactions involving the website or our products and services;
- operate, evaluate, improve, develop and maintain the website (including monitoring and analyzing trends, website access and use for advertising, marketing and marketing research);
- operate, improve and develop our products and services in a broad sense; tailor our website to users' needs;
- contact users to respond to their questions or complaints;
- protect and ensure the security of the website, confidential and proprietary information;
- to manage, protect against, and investigate fraud, exposure to risk, claims and other liabilities, including, without limitation, breach of our contractual terms or of laws or regulations;
- after anonymization of personal data, to compile statistics regarding the number of visits to various parts of our website.
Processing necessary to comply with a legal obligation: keeping accounts, VAT, keeping proof of online sales.
Processing necessary to defend our legitimate interests or those of third parties:
the exercise of fundamental rights, including the bringing of legal proceedings, both by us and by a third party;
the prevention of fraudulent use of our website;
prospecting and marketing.
Further details on how we process your personal data can be provided to you on request.
The personal data that is collected via cookies is used solely to simplify your use of the website and to collect statistical data about the use of the website. This collection allows us to analyze the traffic on our website and to improve it. Cookies are never used for advertising purposes.
Purposes not covered by this privacy statement
If we intend to process your personal data for a purpose not provided for in this privacy statement, we will contact you via the e-mail address you have provided to inform you of this new processing and its purpose, it being understood that you will have the possibility to refuse this processing.
5/ Direct marketing
We may use your personal data to periodically send you direct marketing communications about commercialized products that may interest you. These will take the form of targeted emails, mailings, SMS or online advertising. We limit direct marketing to a reasonable and proportionate level, based on the information we hold.
Where explicit application is required, we will seek your consent.
You have the right to opt-out of direct marketing at any time - to stop, follow the unsubscribe or opt-out links located in the email communications we send you, contact us or email us at firstname.lastname@example.org.
We also use your personal data to tailor or personalize the advertisements, offers, and content made available to you based on your use of our website or other applications, platforms, or mobile services, and by analyzing the performance of those advertisements, offers, and content, as well as your interaction with those advertisements, offers, and content. We may also recommend content to you based on information we have collected about you and your viewing habits. This is called "profiling".
Personal data is stored and hosted by Shopify and Google Cloud, who provide the management and hosting of the www.britishshoes.fr website.
All personal data will be kept strictly confidential and will not be communicated to third parties, except with explicit and prior agreement or communication necessary to our external technical service providers and/or subcontractors to enable the delivery of our products.
British Shoes will not sell or rent personal data to third parties.
7/ Withdrawal of your consent
You can always withdraw the consent you have given us for the processing of your personal data by sending us a dated request in writing or electronically, with a copy of your identity card, or via your online customer account at www.britishshoes.fr.
No withdrawal is possible for processing that is carried out on the basis of a contract or that is necessary to defend our legitimate interests or those of a third party. The withdrawal will therefore have no impact on such processing.
The withdrawal of your consent will not affect the lawfulness of processing already carried out on the basis of the consent given before the withdrawal.
8/ Length of retention of personal data
We apply a general rule of keeping the personal data we process only as long as necessary to fulfill the purposes for which it was collected.
In general, we retain your personal data for a period of time corresponding to a statute of limitations setting out the period during which actions may be brought before a court. For example, we will retain your personal data for the period of the statute of limitations to keep an accurate record of your transactions with us. However, in some cases, we may retain personal data for different periods of time, for example where British Shoes is required to do so in accordance with legal, tax and accounting requirements, or if required by a court of law, legal authority, or other governmental body entitled to make a request, for as long as necessary.
9/ Your rights
Right of access, rectification and deletion of data
You have the right to request access to your personal data and to obtain a copy of your personal data held, to request rectification of inaccurate or incomplete data, to request erasure of your personal data.
No erasure is possible if the processing of such data is necessary for the performance or execution of a contract, or for argument or defense in a legal action.
Limitation of processing
In some cases, you have the right to obtain a limitation of the processing of your personal data by authorizing storage only when:
- you dispute the accuracy of your personal data ;
- when the processing is unlawful and you object to the erasure of your data;
- when you need the data for the establishment, exercise or defense of a legal claim and we no longer need your personal data for the purposes of the processing.
You have the right to receive the personal data that you have provided to us or to transmit such data. No receipt or transmission is possible if the processing of your personal data is necessary for the performance and/or execution of a contract, for the argument or defence of a legal claim.
Automated decision making
You have the right not to be subject to a decision that is made solely on the basis of automated processing and that produces legal effects concerning you or significantly affects you. This right does not exist if this decision is necessary for the performance or execution of a contract.
You have the right to object to the processing of your personal data that is necessary for our legitimate interests, provided that it is for reasons related to your particular situation and for direct marketing purposes. No objection is possible if the processing of your personal data is necessary for the performance of a contract.
10/ Exercising your rights
You may exercise these rights by sending us a dated request, in writing or electronically, with a copy of your identity card.
If we believe that you are not entitled to exercise one or more of these rights, we will inform you in writing.
British Shoes aims to protect your personal data from unauthorised access, improper use or disclosure, falsification, inadvertent disclosure to third parties, unauthorised modification, unlawful destruction or accidental loss, and we use and maintain reasonable processes, systems and technology to do so. The www.britishshoes.fr website uses the HTTPS protocol which guarantees the confidentiality and integrity of data sent by the user and received from the server. Passwords are never stored in clear text but are encrypted in the database. All server accesses (sftp / ssh / imap / smtp / ...) and all backups are encrypted and managed by the host VIXNS. The storage period of backups by the host VIXNS is 30 days. Information on IP addresses of connection to the server and http logs are kept for 1 year by VIXNS by legal obligation.
However, you acknowledge that no Internet transmission is completely secure or error-free, and that the processes, systems and technologies used and maintained by British Shoes may be subject to malicious acts. Therefore, we cannot be held responsible for any direct or indirect damage resulting from a wrongful or illicit use of your personal data by a third party.
If you consider that the processing of your personal data violates the applicable law, you have the right to lodge a complaint with the data protection authority of your usual place of residence, your place of work or the place of the alleged violation.
13/ Changes to this Privacy Statement
It is possible that this privacy statement will be expanded or adapted in the future. We therefore advise you to consult this privacy statement regularly.
14/ Contact information
If you have any questions about this Statement or wish to exercise any of your rights, we have a Data Protection Officer who can be contacted at
British Shoes - s.a.s. LOLI
47 boulevard Rabatau
E-mail : email@example.com