Privacy policy
ARTICLE 1 – PERSONAL INFORMATION COLLECTED
Data controller: The data collected on this website is processed by ALTOS BRIDGE LLC - 1603 CAPITOL AVE STE 413 E239 CHEYENNE, WY 82001 – contact@vaquela.com
When you make a purchase from our store, as part of our buying and selling process, we collect the personal information you provide to us, such as your name, address and email address.
When you browse our store, we also automatically receive your computer’s Internet Protocol (IP) address, which allows us to obtain more details about the browser and operating system you use.
Email marketing (where applicable): With your permission, we may send you emails about our store, new products and other updates.
ARTICLE 2 – CONSENT
How do you obtain my consent?
When you provide us with your personal information to complete a transaction, verify your credit card, place an order, arrange a delivery or return a purchase, we assume that you consent to our collecting your information and using it for that purpose only.
If we ask you to provide your personal information for another reason, such as marketing, we will ask you directly for your explicit consent or give you the opportunity to decline.
How can I withdraw my consent?
If, after giving us your consent, you change your mind and no longer consent to us contacting you, collecting your information or disclosing it, you can notify us by contacting us at contact@vaquela.com. Or, as French Law No. 2014-344 of March 17, 2014 on consumer affairs allows anyone to refuse telephone solicitation by a professional with whom they have no ongoing contractual relationship, you can request registration on the telephone solicitation opt-out list directly on the government’s Bloctel website.
ARTICLE 3 – DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our General Terms and Conditions of Sale and Use.
ARTICLE 4 – SHOPIFY
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell you our services and products.
Your data is stored in Shopify’s data storage system and databases, and in Shopify’s general application. Your data is stored on a secure server protected by a firewall.
Payment:
If you complete your purchase through a direct payment gateway, Shopify will store your credit card information. This information is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Information relating to your purchase transaction is retained for as long as necessary to complete your order. Once your order is completed, the purchase transaction information is deleted.
All direct payment gateways comply with PCI-DSS, managed by the PCI Security Standards Council, which is the result of a joint effort by companies such as Visa, MasterCard and American Express.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
ARTICLE 5 – THIRD-PARTY SERVICES
In general, the third-party providers we use will only collect, use and disclose your information to the extent necessary to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we are required to provide to them for your purchase transactions.
For these providers, we recommend that you read their privacy policies carefully so that you can understand how they will handle your personal information.
Please remember that some providers may be located in, or have facilities located in, a jurisdiction different from yours or ours. Therefore, if you decide to proceed with a transaction that requires the services of a third-party provider, your information may then be governed by the laws of the jurisdiction in which that provider is located or the jurisdiction in which its facilities are located.
Some of our service providers (payment, hosting, transport) may process your data. They have their own privacy policies. When data is transferred outside the European Union, this transfer is governed by the safeguards provided for by the GDPR (European Commission Standard Contractual Clauses or an equivalent mechanism). We invite you to consult these providers’ privacy policies.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s General Terms and Conditions of Sale and Use.
You may leave our website by clicking on certain links on our website. We assume no responsibility for the privacy practices of these other websites and recommend that you read their privacy policies carefully.
ARTICLE 6 – SECURITY
To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, it will be encrypted using Secure Sockets Layer (SSL) technology and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
COOKIES
Here is a list of the cookies we use. We have listed them here so that you can choose whether you wish to allow them or not.
_session_id, unique session identifier, allows Shopify to store information about your session (referrer, landing page, etc.).
_shopify_visit, no data retained, persists for 30 minutes after the last visit. Used by our website provider’s internal statistics tracking system to record the number of visits.
_shopify_uniq, no data retained, expires at midnight (according to the visitor’s location) the following day. Counts the number of visits to a store by a unique customer.
cart, unique identifier, persists for 2 weeks, stores information about your shopping cart.
_secure_session_id, unique session identifier
storefront_digest, unique identifier, undefined if the store has a password, is used to determine whether the current visitor has access.
ARTICLE 7 – AGE OF CONSENT
By using this website, you declare that you are of legal age (18 years old) in your country of residence, or that you have obtained consent from a legal representative to use it.
ARTICLE 8 – CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their publication on the website. If we make changes to the content of this policy, we will notify you here that it has been updated, so that you know what information we collect, how we use it and under what circumstances we disclose it, where applicable.
If our store is acquired by or merged with another company, your information may be transferred to the new owners so that we can continue to sell you products.
GDPR
Customers’ personal data (addresses and order details) will be transmitted to the partners responsible for delivering the products.
To modify, view or delete your data, send us a request at the email address contact@vaquela.com.
Legal basis for processing
We process your personal data on the following legal grounds:
Performance of the contract: processing your order, delivery, handling returns and after-sales service.
Compliance with a legal obligation: retention of invoices and accounting and tax obligations.
Your consent: sending commercial communications (newsletter) and placing non-essential cookies.
Our legitimate interest: securing the website, preventing fraud and improving our services.
Retention periods
Your data is retained only for the period necessary for the purposes described:
Order and billing data: 10 years from the transaction (accounting obligation).
Customer account data: throughout the business relationship, then for 3 years after the last contact.
Prospecting / newsletter data: 3 years from the last contact or until you unsubscribe.
Cookies: a maximum of 13 months from the time they are placed.
Your GDPR rights
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights regarding your data:
Right of access: obtain a copy of the data we hold about you.
Right to rectification: correct inaccurate or incomplete data.
Right to erasure (“right to be forgotten”): request the deletion of your data.
Right to restriction of processing.
Right to object, particularly to direct marketing.
Right to data portability: retrieve your data in a structured and readable format.
Right to withdraw your consent at any time, without affecting processing already carried out.
How to exercise your rights
To exercise these rights, contact us by email at contact@vaquela.com. We undertake to respond within one month of receiving your request. You also have the right to lodge a complaint with the CNIL (www.cnil.fr) if you believe that your rights are not being respected.
Third-party recipients of your data
Your data is never sold. It may only be transmitted to our partners strictly necessary for fulfilling your order:
Our transport and logistics providers, to deliver your packages.
Our payment provider (Shopify Payments / Shop Pay and associated services), for the secure processing of transactions.
Our hosting provider (Shopify Inc.), which hosts the website and the data.
These partners use your data only for the intended purposes and are bound by confidentiality and security obligations.
QUESTIONS AND CONTACT DETAILS
If you wish to access, correct, modify or delete any personal information we hold about you, lodge a complaint, or simply obtain more information, contact our Privacy Compliance Officer at contact@vaquela.com.