Privacy Policy

Last updated: 01/07/2026

This privacy policy describes how OUTSHOP collects, uses, and protects the personal data of users and customers, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the French Data Protection Act (Loi Informatique et Libertés).

Data Controller

The data controller is: [TO BE COMPLETED – Entrepreneur's first and last name], reachable at: quantila.services@gmail.com.

Data Collected

We collect the following data:

  • Identity and contact data: last name, first name, email address, postal address, phone number.
  • Order data: products ordered, amount, purchase history.
  • Payment data: processed securely by our payment providers; we do not store your full bank details.
  • Browsing data: IP address, browser type, pages viewed, via cookies (see the Cookie Policy).

Purposes of Processing

Your data is used for:

  • Processing and shipping your orders;
  • Managing customer relationships and after-sales service;
  • Sending you commercial communications (with your consent);
  • Improving our site and our services;
  • Complying with our legal and accounting obligations.

Legal Basis

The processing is based, depending on the case, on: contract performance (order processing), consent (marketing, non-essential cookies), legal obligation (accounting), and legitimate interest (service improvement, fraud prevention).

Data Recipients

Your data may be transmitted to our subcontractors and partners strictly for the purposes mentioned above: host (Shopify), payment providers, carriers, and logistics services. These providers are bound by confidentiality and security obligations.

Transfer outside the European Union

Some providers (including Shopify) may process data outside the EU. These transfers are governed by appropriate safeguards (standard contractual clauses of the European Commission).

Retention Period

Order data is retained for the duration of the commercial relationship, then archived in accordance with legal deadlines (including 10 years for accounting documents). Marketing data is retained until consent is withdrawn, and for a maximum of 3 years after the last contact.

Your Rights

In accordance with the GDPR, you have the rights to access, rectify, erase, restrict, object to, and portability of your data, as well as the right to define directives regarding their fate after your death. To exercise these rights, contact us at: quantila.services@gmail.com.

You also have the right to lodge a complaint with the CNIL (French National Commission for Data Protection): www.cnil.fr.

Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.

Contact

For any questions regarding this policy: quantila.services@gmail.com.