Privacy policy

Privacy policy

DATA PROTECTION STATEMENT

ARTICLE 1 - PERSONAL INFORMATION COLLECTED

When you make a purchase in our store, we collect, as part of our buying and selling process, the personal information you provide to us, such as your name, address and e-mail address.

In addition, when you browse our store, we automatically receive the Internet Protocol address (IP address) of your computer, which enables us to obtain more details about the browser and operating system you are using.

E-mail marketing (where applicable): With your permission, we may send you e-mails about our store, new products and other updates.

ARTICLE 2 - CONSENT

How do I obtain your consent?

When you provide us with your personal data to finalize a transaction, verify your credit card, place an order, schedule a delivery or return a purchase, we consider that you accept that we collect your data and use it solely for this purpose.

If we ask you to provide us with your personal data for any other purpose, for example for marketing purposes, we will ask you directly for your explicit consent or give you the opportunity to refuse it.


How can I withdraw my consent?

If, after having given your consent, you change your mind and no longer wish us to contact you, collect your data or share it, you can let us know by contacting us at the following address: contact@bosalia.com.
ARTICLE 3 - DISCLOSURE

We may disclose your personal information if we are required to do so by law or if you fail to comply with our terms and conditions.

SECTION 4 - SHOPIFY

Our store is hosted by Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our services and products to you.

Your data is stored in Shopify's data storage system and databases, as well as in Shopify's general application. Your data is stored on a secure, firewall-protected server.


Payment :

If you make your purchase via a direct payment method, Shopify stores your credit card information. This information is encrypted in accordance with the PCI-DSS (Payment Card Industry Data Security Standard). Information about your purchase transaction is retained as long as necessary to complete your order. As soon as your order is completed, the purchase transaction information is deleted.

All direct payment gateways comply with the PCI-DSS standard, which is managed by the PCI Security Standards Council and is the result of the joint efforts of companies such as Visa, MasterCard, American Express and Discover.

PCI-DSS requirements guarantee the secure processing of credit card data by our store and its service providers.

For more information, please see Shopify's Terms of Use here or Privacy Policy here.


SECTION 5 - THIRD PARTY SERVICES


In general, the third-party providers we use will only collect, use and disclose your information to the extent necessary to provide the services they provide.

However, some third-party suppliers, such as payment gateways and other payment processors, have their own privacy policies regarding the information we must provide to them for your purchase transactions.

For these suppliers, we recommend that you read their privacy policies carefully to understand how they treat your personal information.

Please note that some suppliers may have their headquarters or facilities in a jurisdiction other than yours or ours. Thus, if you decide to carry out a transaction requiring the services of a third-party supplier, your data may be subject to the laws of the jurisdiction in which the supplier is established or in which its facilities are located.

For example, if you reside in Canada and your transaction is made through a payment gateway located in the United States, your data used to finalize the transaction could be disclosed under U.S. law, including the Patriot Act.

As soon as you leave our site or are redirected to a third-party site or application, you are no longer subject to this privacy policy or to our site's terms and conditions of sale and use.

Links

You may leave our site by clicking on certain links on our site. We assume no responsibility for the data protection practices of these other sites and recommend that you read their data protection policies carefully.

ARTICLE 6 - SECURITY

In order to protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not lost, misused, accessed, disclosed, altered or destroyed inappropriately.

When you provide us with your credit card information, it is encrypted using the SSL security protocol and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we comply with all PCI-DSS requirements and apply additional standards generally recognized by the industry.


COOKIES

Here is a list of the cookies we use. We've listed them here to give you the opportunity to decide whether or not to allow them.

_session_id, a unique session identifier, allows Shopify to store information about your session (referrer, landing page, etc.).

_shopify_visit, no data recorded, remains in place for 30 minutes since your last visit. Used by our website provider's internal statistical tracking system to count the number of visits.

_shopify_uniq, no data recorded, expires at midnight (depending on visitor location) the following day. Calculates the number of visits to a store per unique customer.

cart, unique identifier, remains in place for 2 weeks, stores information about your shopping cart.

_secure_session_id, unique session identifier.

storefront_digest, unique identifier, undefined, if the store has a password, it is used to determine whether the current visitor has access.

SECTION 7 - AGE OF CONSENT

By using this Web site, you represent that you are at least the age of majority in the state or province in which you reside and that you have given us your consent for any minor for whom you are responsible to use this Web site.


SECTION 8 - CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time, so please check back frequently. Modifications and clarifications shall take effect immediately upon publication on the site. If we make any changes to the content of this policy, we will notify you here of the update so that you are aware of what information we collect, how we use it and under what circumstances we may disclose it.

If our store is acquired by or merged with another company, your information may be transferred to the new owners so that we can continue to sell products to you.


QUESTIONS AND CONTACT INFORMATION

If you would like to access, correct, amend or delete any personal information we hold about you, make a complaint or simply obtain further information, please contact our Data Protection Officer at contact@bosalia.com or by post at Bosalia.