Privacy policy

The trust you place in us is essential. At Breya, we are committed to protecting your personal data and to ensuring complete transparency about how we collect, use and protect the information you entrust to us while browsing and shopping on breyashop.com.

The purpose of this privacy policy is to inform you, in accordance with applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR) and French Law No. 78-17 of 6 January 1978, as amended, relating to information technology, data files and civil liberties.

1. Identity of the Data Controller and Exercising Your Rights

The controller of your personal data is:

Breya (sole proprietorship) SIRET: 948 495 254 00013 Registered office address: 226 Rue La Fayette, 75010 Paris, France Website: www.breyashop.com Contact email: contact@breyashop.com

In accordance with personal data protection regulations, you have the following rights:

  • Right of access: Obtain confirmation as to whether or not your data is being processed and, where applicable, access to that data.
  • Right to rectification: Request the correction of inaccurate or incomplete data concerning you.
  • Right to erasure ("right to be forgotten"): Request the deletion of your data under certain conditions.
  • Right to object: Object to the processing of your data on grounds relating to your particular situation, or object to the processing of your data for direct marketing purposes.
  • Right to restriction of processing: Request the temporary suspension of the processing of your data.
  • Right to data portability: Receive the data you have provided to us in a structured, commonly used and machine-readable format, and transmit it to another controller.
  • Right to withdraw your consent: Withdraw your consent at any time where processing is based on it.

To exercise any of these rights, you may send your request:

To help us process your request, we invite you to provide your surname, first name and email address. Where there is reasonable doubt as to your identity, a copy of a valid identity document may be requested. We undertake to respond to you as soon as possible and, in any event, within one month of receiving your request.

You also have the right to lodge a complaint with the competent supervisory authority (the CNIL in France: www.cnil.fr).

2. Definition of Personal Data

Personal data means any information relating to an identified or identifiable natural person. An "identifiable natural person" is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.

Data described as "pseudonymised" or "anonymised" may, depending on the context, be considered personal data if it allows an individual to be re-identified.

3. Collection of Personal Data

We collect and record personal data concerning you when you interact with the breyashop.com website, in particular when you:

  • Browse our website.
  • Add items to your basket.
  • Create a customer account.
  • Place an order or initiate a return.
  • Subscribe to our newsletters or alerts.
  • Write a product review.
  • Complete a form (e.g. contact, survey).
  • Contact our customer service team.

This data is collected, among other means, through cookies and other trackers, for which we obtain your consent in accordance with our Cookie Policy.

Depending on how you use the site, the information collected may include:

  • Your surname, first name, email address, postal address and telephone number.
  • Your purchase and browsing history on the site.
  • Technical information relating to your device and browser (device type, operating system, IP address, referring URL).

Unless otherwise indicated, the information requested when creating a customer account or placing an order is mandatory in order to process your order and perform the sales contract.

4. Purposes of Data Use

The personal data we collect is used for the following specific purposes:

  • Order and customer account management: Processing, fulfilment and tracking of your orders, management of returns and refunds, administration of your customer account.
  • Improving the user experience: Personalising your browsing, remembering your preferences, improving the usability and functionality of the site.
  • Communications and marketing: Sending newsletters and personalised promotional offers (subject to your consent), information about new products and updates to your orders.
  • Customer service: Handling your requests, providing assistance and resolving issues.
  • Fraud prevention and security: Detecting and preventing fraudulent activity, protecting our systems and our users.
  • Analysis and statistics: Conducting market research, satisfaction and opinion surveys, and analysing site usage in order to optimise our services and our offering.

5. Fraud Prevention

Breya reserves the right to verify the personal data provided when placing an order in order to prevent fraud and ensure the security of transactions. For this purpose, proof of identity and/or address may be requested. Breya reserves the right to cancel any order that does not satisfactorily meet the checks required for fraud prevention.

6. Sharing and Transfer of Data to Third Parties

Your personal information is treated with the utmost confidentiality. It will only be transferred to third parties in the following cases:

  • Fulfilment of your order and our services: We share strictly necessary data with our trusted service providers (carriers, payment solutions, hosting providers, technical services) so that they can carry out their duties in connection with your order or our contract. These providers are required to respect the confidentiality of your data and to process it solely for the purposes entrusted to them.
  • Marketing purposes (with your consent): Subject to your prior consent, your data may be used for Breya's own marketing purposes.
  • Legal obligation or official request: Your personal data may be disclosed to authorised bodies where required by law or where a judicial or administrative authority compels us to do so (for example, in connection with investigations into illegal activity or fraud, or to protect the safety of any person).

Breya is the sole owner of the information collected on breyashop.com. Your personal data will under no circumstances be sold, exchanged or rented to other companies without your consent, outside the scope of use defined in this policy.

Information that is not directly identifiable (pseudonymised or aggregated) may be transferred to third parties for analysis, marketing or statistical purposes.

7. Promotional Communications (Newsletters and Alerts)

When you subscribe to our newsletters or alerts, we send you personalised promotional communications by email or SMS.

You may unsubscribe from these promotional messages at any time:

  • By going to the "My Subscriptions" section of your customer account.
  • By clicking the unsubscribe link at the bottom of each promotional email.
  • By following the unsubscribe instructions included in each promotional SMS.

Please note that unsubscribing from promotional communications does not affect the receipt of essential service communications (e.g. order confirmations, shipping notifications).

8. Targeted Advertising and Display of Advertising Banners

In order to offer you products and offers likely to interest you, we use the data collected during your visit to our site to display advertising banners on other websites you visit.

This data is generally processed through cookies, pixels or web beacons. Our aim is to make our advertising more relevant and personalised according to your interests and the products you have previously viewed.

In this context, we mainly use pseudonymised data, and no directly identifiable personal data is retained in these trackers for this purpose. To find out more about cookies and how to manage them, please refer to our Cookie Policy.

9. Market Research, Satisfaction and Opinion Surveys

Data collected in the context of market research, satisfaction and opinion surveys, whether via the website or external forms, is not used for advertising purposes. It is neither transferred to third parties nor published.

If you take part in a survey, the specific purposes of the processing and use of your information will be clearly communicated to you. You may object at any time, in whole or in part, to the processing of this information by contacting Breya at contact@breyashop.com.

10. Cookies and Other Trackers

For detailed information on what cookies are, the types we use, their purpose and how to manage them, please refer to our Cookie Policy.

11. Security and Data Protection

We implement rigorous technical and organisational security measures to ensure the confidentiality, integrity and availability of your personal data. These measures are designed to protect your information against loss, destruction, unauthorised access, alteration or disclosure.

We use advanced encryption technologies, such as the TLS (Transport Layer Security) and SSL (Secure Socket Layer) protocols, to secure the transmission of sensitive data online, in particular when you log in to your customer account and during transactions.

Access to your personal information is strictly limited to employees who require it to carry out their specific duties (e.g. billing, customer service). The IT systems and servers used to store personal data are kept in a secure and controlled environment.

12. Log Files

Any access to the breyashop.com website results in the transmission of usage data by your browser, which is recorded in server log files (commonly referred to as "logs"). This data includes: the date and time of access, the name of the site accessed, the IP address, the referring URL (the link through which you arrived on our site), the volume of data transferred, as well as the product and version information of the browser used.

We analyse this data for the legitimate purposes of:

  • Maintaining and optimising our servers.
  • Continuously improving the site and associated services.
  • Detecting and correcting technical errors.
  • Preventing denial-of-service (DDoS) attacks and other security threats.

13. Secure Data Transmission

Your personal information is systematically encrypted before being transmitted to our service providers and when you log in to your customer account. We use recognised security protocols such as TLS and SSL to guarantee the confidentiality and integrity of your data during transfer.

14. Applicable Law and Jurisdiction

This Privacy and Personal Data Protection Policy is governed by and interpreted in accordance with French law. In the event of a dispute that cannot be resolved amicably, the matter will be brought before the competent French courts.