Privacy Policy

Camille LAURENT, Entrepreneur individuel, trading as Trott en Provence / Scootory, is the controller of personal data processed for scootory.shop and customer orders, except where a named provider acts as an independent controller. Registered address: 49 Cours Mirabeau, 13100 Aix-en-Provence, France. Contact: support@scootory.shop.

This Privacy Policy applies when you browse the website, create an account, place or receive an order, contact us, request a return, submit a review, subscribe to marketing, exercise privacy rights, or otherwise interact with Scootory. It does not govern an independent third party’s website or service.

Depending on the interaction, we may collect:

• identity and contact data, including name, delivery/billing address, email and telephone number;
• order and transaction data, including products, prices, currency, discounts, tax, payment status, refunds and order correspondence;
• limited payment data, such as payment method, transaction identifier and masked card details supplied by the processor; we generally do not receive full card numbers;
• account data, credentials in protected form, preferences and saved addresses;
• device and usage data, including IP address, browser/device information, timestamps, pages, referral data, cookie identifiers and consent choices;
• support, complaint, return, warranty and product-safety information, including messages and submitted media;
• marketing preferences and engagement;
• fraud-prevention, sanctions-screening and security signals; and
• any information you choose to provide.

We collect data directly from you, automatically from your browser/device, and from service providers involved in checkout, payment, fraud prevention, warehousing, delivery, customer support, analytics or marketing. If another person places an order for you, we may receive your delivery details from that person.

We process personal data as follows:

We do not use consent where processing is necessary to perform an order. You may withdraw consent at any time without affecting processing already lawfully carried out.

We disclose only what is reasonably necessary to:

• Shopify and providers hosting or operating the store;
• payment processors, banks and fraud-prevention providers;
• warehousing, logistics and delivery service providers involved in processing an order;
• carriers, postal operators, customs agents and delivery platforms;
• customer-support, communications, analytics and marketing providers enabled in the store;
• professional advisers, insurers, auditors and authorities; and
• a buyer or successor in a genuine corporate transaction, subject to appropriate safeguards.

Order-service providers receive only the data necessary to process, deliver and support the order. We do not sell personal data for money. If applicable privacy law defines certain advertising disclosures as a “sale”, “sharing” or targeted advertising, we will provide the required opt-out control.

The controller is established in France. Some technology, payment, support, analytics or logistics providers may process data outside the EEA. Where required, an international transfer will rely on an adequacy decision, approved Standard Contractual Clauses, another lawful transfer mechanism, or a limited statutory derogation. Contact support@scootory.shop for information about the safeguards that apply and how to obtain a copy where available.

We retain personal data only as long as reasonably necessary for the stated purpose, including order processing, customer service, statutory guarantees, recalls, tax/accounting, fraud prevention and legal claims. Indicative periods are:

• orders, invoices and supporting accounting records: 10 years from the close of the relevant financial year, where French law requires that period;
• support, return and warranty files: contract/guarantee period plus the applicable limitation period;
• account data: while the account remains active, followed by a limited deletion/claims period;
• marketing data: until consent is withdrawn or the address is suppressed to respect an opt-out;
• security logs: for the period configured in the systems that generate them — write to us for the current period;
• cookie data: as listed in the Cookie Policy and the cookie preference centre.

We may retain a minimal suppression record to ensure an unsubscribe or objection remains effective.

Subject to applicable conditions and exceptions, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; object at any time to direct marketing; and request human review where a significant decision is based solely on automated processing. You may lodge a complaint with the data-protection authority in your country of habitual residence, place of work, or alleged infringement.

Send requests to support@scootory.shop. We may ask for proportionate verification and will normally respond within one month under GDPR, subject to lawful extension for complex requests. You may also lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) at cnil.fr, or with another competent EEA supervisory authority.

We may use automated fraud and payment-risk tools to flag or temporarily block transactions. Where GDPR Article 22 applies, we will provide required information and a route to human review.

We use reasonable technical and organisational measures appropriate to risk, including access controls, secure transport, provider due diligence and limited access. No internet service is completely secure. Customers should protect credentials and notify us of suspected account misuse.

The store is not directed to children and we do not knowingly solicit orders or marketing consent from children unable to provide valid consent or enter a contract under applicable law. A parent or guardian may contact us about a child’s data.

We may update this Policy to reflect law, technology or operations. The current version and effective date will appear on this page. Material changes will be communicated where required.