Privacy policy

This Privacy Policy explains how SQUARE processes personal data when you use squarebpv.com, place an order or contact us.

1. Data Controller

The data controller is SQUARE, identified in the Company Information section below.

For privacy requests, email support@squarebpv.com.

2. Personal Data We May Process

Depending on how you use the store, we may process:

Your name, email address, billing address and delivery address;
Products ordered, order details, payment status, delivery and tracking information;
Customer-service communications, return, exchange and refund information;
Technical information such as IP address, browser type, device information, session data, security information and cookie preferences;
Newsletter contact details if you subscribe.

Payment-card data is processed through the payment services available at checkout. SQUARE does not normally receive or store complete card numbers on its own systems.

3. Why We Process Personal Data

We may process personal data to:

Process orders, payments, invoices, delivery and tracking;
Provide customer support, returns, exchanges and refunds;
Prevent fraud and secure the website;
Meet accounting, tax and other legal obligations;
Send newsletters where you have subscribed;
Improve website performance where permitted by applicable law.

4. Legal Bases

Depending on the situation, processing is based on:

Performance of a contract, including order fulfilment and customer support;
Compliance with legal obligations;
Legitimate interests in operating and securing the store and preventing fraud;
Consent, where consent is required, including for certain cookies and optional marketing communications.

5. Recipients of Data

We may share personal data only where necessary with service providers involved in:

Shopify ecommerce infrastructure and technical services;
Secure payment processing;
Delivery, tracking and logistics;
IT, security, accounting and professional services.

We may also disclose information where required by law.

6. International Transfers

Some service providers may process data outside the European Economic Area. Where required, appropriate safeguards are used in accordance with applicable data-protection law.

7. Retention

We keep personal data only for as long as necessary for the purposes described in this policy, including applicable legal, accounting, tax and dispute-resolution obligations.

8. Your Rights

Subject to applicable law, you may request access to, correction or deletion of your personal data, restriction of processing, objection to certain processing, withdrawal of consent where processing relies on consent, or data portability.

To exercise your rights, email support@squarebpv.com.

You may also lodge a complaint with the French data-protection authority, the CNIL, or the supervisory authority in your country of residence.

9. Security

We use reasonable organisational and technical measures designed to protect personal data. No method of internet transmission or storage is completely secure.