Terms of service

TERMS OF USE & PRIVACY POLICY – ROSEVA PARIS

This policy explains how personal data collected through roseva-paris.com (the "Site") is gathered, used, and protected.

1. DATA CONTROLLER
The Site is operated under the trading name ROSEVA PARIS, as part of an activity carried out under French sole trader ("micro-entreprise") status.
📧 Contact email: contact@roseva-paris.com

2. WHO ARE YOU?
When we use the terms "you" or "user", this refers to any person browsing the Site, placing an order on the Site, whether or not they hold a customer account.

3. WHY DO WE PROCESS YOUR DATA?
Personal data may be collected when you browse the Site (cookies), place an order, contact customer service, or sign up to our communications.

This data is used in particular for:

  • managing orders and deliveries,
  • customer service and after-sales support,
  • managing payments and refunds,
  • fraud prevention,
  • sending marketing communications (with your consent).

ROSEVA PARIS never stores any card details.

4. WHO RECEIVES YOUR DATA
Your data may only be shared with service providers strictly necessary for the Site to operate. Your data is never sold.

5. RETENTION PERIOD

  • Prospects: 3 years after last contact
  • Customers/orders: 5 years (legal and accounting obligations)
  • Card details: never retained

6. YOUR RIGHTS
In accordance with UK GDPR and the Data Protection Act 2018, you have the right to access, rectify, erase, restrict, and object to the processing of your data, the right to data portability, and the right to withdraw your consent at any time.

You can exercise your rights by writing to:
📧 contact@roseva-paris.com

You will receive a response within one (1) month at the latest. You may also lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk

7. COOKIES
The Site uses different types of cookies: essential, analytics, and advertising (subject to your consent). You can manage your preferences via the cookie banner or your browser settings.

8. INTERNATIONAL DATA TRANSFERS
Some data may be processed outside the United Kingdom (e.g. Shopify hosting). Appropriate safeguards are put in place in accordance with UK GDPR, including reliance on the UK's International Data Transfer Agreement (IDTA) or adequacy decisions where applicable.

9. SECURITY MEASURES
Appropriate technical and organisational measures are implemented to protect your personal data. Payments comply with PCI-DSS standards.

10. CHANGES TO THIS POLICY
This policy may be updated to remain compliant with legal and technical developments.