Privacy Policy

Introduction

The company SHOPALIZ, a Simplified Joint Stock Company (SAS) with share capital of €100, registered under number 992 661 173 at the Tarascon Trade and Companies Register, with registered office at ZA La Capelette, Impasse des Micocouliers, 13520 Maussane-les-Alpilles, France (hereinafter "Shopaliz"), is committed to protecting the privacy and personal data of users of its website www.shopaliz.com and its platform (hereinafter the "Service").

This Privacy Policy is intended to inform users and customers (hereinafter "Users") of the way in which their personal data is collected, processed, retained and protected, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the French Data Protection Act (Loi Informatique et Libertés) as amended.

By using the Service or communicating personal data to Shopaliz, the User acknowledges having read this Privacy Policy.

Article 1: Data controller

SHOPALIZ SAS
ZA La Capelette, Impasse des Micocouliers, 13520 Maussane-les-Alpilles, France
SIREN: 992 661 173 — EU VAT: FR14992661173
Represented by: Damien Payet
Data protection contact: privacy@shopaliz.fr

Article 2: Personal data collected

Shopaliz collects the following categories of personal data, depending on the User's use of the Service: identification data (name, email, phone number); billing data (postal address, payment method details — full card data is not stored by Shopaliz but by Stripe); connection and usage data (IP address, browser type, pages visited, connection timestamps); data related to the Customer's Shopify store (store name, URL, synchronised data: products, orders, stock).

Article 3: Purposes and legal bases

Data is processed for the following purposes: performance of the contract (account management, Service delivery, billing, support, Shopify synchronisation); compliance with legal obligations (invoice retention, response to judicial requests); Shopaliz's legitimate interests (Service improvement, audience measurement, fraud prevention, platform security); Customer consent (newsletters, commercial communications, non-essential cookies — consent may be withdrawn at any time).

Article 4: Data recipients

Personal data may be shared with: Shopaliz's technical subcontractors (OVH/OVHCloud hosting, Stripe payment, OneSignal push notifications, Google Analytics); integrated partners to the extent strictly necessary for enabled features (Shopify, Klaviyo, Trustpilot, Judge.me, Smile.io, etc.); competent authorities upon request and within the framework of legal obligations. Shopaliz does not sell or rent Customer personal data to third parties.

Article 5: International transfers

Some subcontractors or partners (Shopify, OneSignal, Google) may be established outside the European Union. In such cases, transfers are governed by appropriate safeguards in accordance with the GDPR, notably standard contractual clauses adopted by the European Commission or an adequacy decision.

Article 6: Retention periods

Customer account data: retained for the duration of the contractual relationship, then for 3 years after contract end for commercial prospecting purposes (unless the Customer objects). Billing data: 10 years in accordance with accounting and tax obligations. Connection logs: 1 year. Cookies: up to 13 months in accordance with CNIL recommendations. Upon expiry of these periods, data is deleted or anonymised.

Article 7: Your rights

Under the GDPR and the French Data Protection Act, you have the following rights: access, rectification, erasure (subject to legal retention obligations), restriction of processing, data portability, objection, withdrawal of consent, and the right to define directives on the fate of your data after death. To exercise these rights, contact: privacy@shopaliz.fr or by post to: SHOPALIZ, ZA La Capelette, Impasse des Micocouliers, 13520 Maussane-les-Alpilles. Shopaliz will respond within one month of receipt of the request.

Article 8: Complaint to the supervisory authority

If you believe that the processing of your personal data constitutes a breach of the GDPR, you have the right to lodge a complaint with the French data protection authority (CNIL): online at https://www.cnil.fr/ or by post at CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07. You may also lodge a complaint with your local supervisory authority within the European Union.

Article 9: Cookies

The Shopaliz site uses cookies. Strictly necessary cookies do not require consent. For analytics, personalisation and advertising cookies, consent is collected on the first visit via a cookie banner. You may modify your preferences at any time. For more information, please consult this Privacy Policy.

Article 10: Security

Shopaliz implements appropriate technical and organisational measures to ensure the security and confidentiality of personal data and to protect it against any unauthorised access, loss, alteration or disclosure.