Privacy policy

Onirala operates this store and website, including all information, content, features, tools, products and related Services, in order to offer you a personalised shopping experience (the "Services"). Onirala is powered by Shopify, which enables us to provide the Services to you. This privacy policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction, or otherwise communicate with us.

Please read this privacy policy carefully. By using and accessing the Services, you acknowledge that you have read this policy and understand the collection, use and disclosure of your data as described below.

Personal information we collect or process

When we use the term "personal information", we mean information that identifies you or can reasonably be associated with you. We may collect or process the following categories:

Contact details, including your name, address, billing address, shipping address, phone number and email address.
Financial information, including payment card details, transaction data, payment method and payment confirmation.
Account data, including your username, password, preferences and settings.
Transaction data, including items you view, add to cart, purchase, return, exchange or cancel.
Communications with us, including when you send a support request.
Device data, including information about your device, browser, IP address and other unique identifiers.
Usage information, including how and when you interact with the Services.

Sources of personal information

Directly from you, when you create an account, use the Services or communicate with us.
Automatically through the Services, by means of cookies and similar technologies.
From our service providers, when they process your information on our behalf.
From our partners or other third parties.

How we use your personal information

To provide, personalise and improve the Services. Processing your payments, managing your orders, remembering your preferences, handling purchases, returns and exchanges, creating and managing your account, arranging delivery, allowing you to post reviews.
Marketing and advertising. Sending marketing messages by email or SMS, and displaying online advertising for our products or Services.
Security and fraud prevention. Verifying your account, ensuring a secure checkout experience, detecting and preventing fraudulent activity.
Communicating with you. Customer support, responding to your requests, maintaining our business relationship.
Legal reasons. Complying with applicable law or responding to valid legal process.

How we disclose personal information

With Shopify, vendors and other third parties who perform Services on our behalf (payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
With business and marketing partners in order to offer you personalised advertising.
When you instruct us to do so or give your consent.
To comply with legal obligations or to protect our rights and those of our users.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information relating to your access to and use of the Services. Information submitted through the Services will be transmitted to Shopify as well as to third parties that may be located in countries other than your own.

Third-party websites and links

The Services may contain links to websites operated by third parties. We are not responsible for the privacy or security of those sites.

Children's data

The Services are not intended for children and we do not knowingly collect personal information about minors.

Security and retention of your information

No security measure is perfect and we cannot guarantee "perfect security". How long we keep your personal information depends on how long we need it to maintain your account, provide the Services or comply with legal obligations.

Your rights and choices

Right of access and to know
Right to erasure
Right to rectification
Right to data portability
Managing communication preferences (unsubscribing from promotional emails)
Right to object to processing and to restrict processing
Right to withdraw consent

Complaints

If you have complaints about how we handle your personal information, please contact us using the details below. You also have the right to lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the supervisory authority of your country of residence.

International transfers

We may transfer, store and process your personal information outside the country where you live. Transfers outside the EEA rely on recognised transfer mechanisms such as the European Commission's standard contractual clauses.

Changes to this policy

We may update this privacy policy from time to time. We will post the revised policy on this site and update the "Last updated" date.

Contact

For any question about our privacy practices or to exercise your rights: ecommercebasti@proton.me