Privacy policy

Privacy Policy

Last updated: July 16, 2026

1. Data controller

The data controller is V.S. di Sofiia Varzhanska, Registered Office: Via Valle Nuova 21, 21013 Gallarate (VA), Italy; VAT Number: 04131150122; REA Registration Number: VA-404076; PEC: v.s.shoes@pec.it; privacy and support email: help@lesparisiennes.it; general email: lesparisiennes@lesparisiennes.it; telephone: +39-0331-1030385.

2. Personal data we collect

Depending on how you use the store, we may collect identity and contact details, delivery and billing information, account details, order and return history, customer-service messages, marketing preferences, device and browser data, IP address, approximate location, cookie identifiers, browsing and interaction data, and fraud-prevention signals. Payment card information is processed by Shopify and payment providers; we generally receive transaction confirmation and limited payment details rather than complete card numbers.

3. Sources of data

We collect data directly from you, automatically when you use the website, and from service providers involved in payments, fraud prevention, delivery, customer support, analytics and marketing where permitted.

4. Purposes and legal bases

  • Contract: to manage accounts, orders, payments, delivery, returns, exchanges and customer support.
  • Legal obligation: to maintain accounting and tax records, comply with consumer law, respond to authorities and establish or defend legal claims.
  • Legitimate interests: to secure the store, prevent fraud, improve services and protect our business and customers, after balancing those interests against your rights.
  • Consent: to send optional marketing and to use non-essential analytics, personalisation or advertising technologies. Consent can be withdrawn at any time without affecting earlier lawful processing.

5. Required and optional information

Information marked as required during checkout or account creation is necessary to provide the requested service or conclude the contract. If it is not provided, we may be unable to process an order, deliver a creation or respond to a request. Marketing information and consent to non-essential cookies are optional and refusal does not prevent ordinary use of the store.

6. Recipients and processors

Data may be shared, only as necessary, with Shopify as the commerce platform, payment and fraud-prevention providers, couriers and fulfilment partners, email and customer-support providers, analytics and marketing providers used with the required consent, professional advisers, insurers, auditors and public authorities. Shopify's own processing is described in the Shopify Consumer Privacy Policy.

7. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another safeguard permitted by GDPR. Information about a relevant safeguard may be requested at help@lesparisiennes.it.

8. Retention

Order, invoice and accounting records are generally retained for ten years where required by Italian law. Customer-service and return correspondence is normally retained for up to twenty-four months after the request is closed, unless it is needed for a legal claim. Account data is retained while the account remains active and then deleted or restricted subject to legal retention duties. Marketing data is retained until consent is withdrawn or it is no longer necessary for the stated purpose. Cookie durations are listed in the Cookie Policy. Data may be retained longer where necessary to establish, exercise or defend legal claims.

9. Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction, portability or object to processing, and may withdraw consent at any time. You have an unconditional right to object to direct marketing. Requests can be sent to help@lesparisiennes.it. We may need to verify your identity and normally respond within one month.

You may lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, through www.garanteprivacy.it, or with the supervisory authority of your habitual residence.

10. Automated decisions

We do not make decisions that produce legal or similarly significant effects solely by automated means. Automated signals may be used to detect suspected fraud or security risks, with appropriate review where required.

11. Cookies, security and children

Cookie use and preference controls are described in the Cookie Policy. We use proportionate technical and organisational safeguards, but no internet transmission is completely risk-free. The store is not directed to children and we do not knowingly collect children's data contrary to applicable law.

12. Changes

We may update this Privacy Policy to reflect legal, technical or operational changes. The current version and update date will remain available on this page.