Privacy policy
Last updated: 20 August 2026
This Privacy Policy explains how ATELIER SAPOÉ collects, uses, stores and shares personal data when you visit, use or make a purchase through https://sapoestore.com, communicate with us or otherwise interact with SAPOÉ STORE.
1. Data controller
ATELIER SAPOÉ, a French simplified joint-stock company with a sole shareholder (SASU), is the controller of personal data processed for the operation of SAPOÉ STORE.
Registered office: 12 Rue Étienne Dolet, 93170 Bagnolet, France
Privacy contact: support@sapoestore.com
2. Personal data we collect
Depending on how you interact with the Website, we may collect:
identity and contact data, including name, email address, billing address and delivery address;
order and transaction data, including products ordered, order value, payment status, refunds and delivery information;
account data, where customer accounts are enabled, including login and preference information;
communications, customer-service requests, return requests and information you choose to provide;
technical and usage data, including IP address, browser, device identifiers, pages viewed, shopping-cart activity and cookie identifiers; and
marketing preferences and evidence of consent or objection.
Payment-card details are processed by authorised payment providers. ATELIER SAPOÉ does not intentionally store complete card numbers or card security codes.
3. How we collect data
directly from you when you place an order, create an account, contact us, request a return or subscribe to communications;
automatically through necessary website technologies and, with consent where required, analytics or advertising technologies; and
from service providers involved in payments, fraud prevention, fulfilment, delivery, hosting and customer support.
4. Purposes and legal bases
We process personal data only where a lawful basis applies, including:
Contract: to process payment, fulfil and deliver orders, manage returns and refunds, provide customer service and administer accounts;
Legal obligation: to maintain accounting, tax and transaction records, respond to lawful requests and comply with product-safety and consumer-protection duties;
Legitimate interests: to secure the Website, prevent fraud, improve operations, protect legal rights and understand service performance, provided those interests are not overridden by your rights; and
Consent: for non-essential cookies and electronic marketing where consent is required. Consent may be withdrawn at any time without affecting earlier lawful processing.
5. How we share personal data
We may share the minimum personal data necessary with:
Shopify and its affiliated processors for store hosting, checkout, security and commerce services;
payment processors and fraud-prevention providers;
carriers and fulfilment providers for delivery and returns;
information-technology, email, analytics, customer-support and professional service providers used by the store;
public authorities, courts or regulators where disclosure is legally required; and
a purchaser or successor in connection with a genuine business reorganisation, subject to appropriate safeguards.
We do not sell personal data for money. If the Website uses advertising or data-sharing features that are legally treated as a sale or sharing in another jurisdiction, the applicable consent and opt-out controls will be provided.
6. Shopify
The Website is hosted on Shopify. Shopify processes customer and visitor data to provide the commerce platform and may process data in accordance with its own privacy documentation and its agreements with ATELIER SAPOÉ. Information about Shopify's privacy practices is available at https://www.shopify.com/legal/privacy.
7. International transfers
Some service providers may process personal data outside France or the European Economic Area. Where required, transfers are protected by an adequacy decision, approved contractual clauses or another lawful transfer mechanism, together with appropriate safeguards.
8. Data retention
We retain personal data only for as long as necessary for the purpose collected and to meet legal, accounting, tax, product-safety and dispute-resolution requirements. In particular:
order, invoice and accounting records may be retained for up to 10 years where required by French law;
customer-service, return and dispute records are retained for the time necessary to resolve the request and defend legal rights;
marketing data is retained until consent is withdrawn, an objection is made, or the applicable review period expires; and
cookie and technical data is retained for the period stated in the cookie settings or as otherwise permitted by law.
9. Cookies and similar technologies
The Website uses strictly necessary cookies for functions such as security, cart operation, checkout and language preferences. Where required, analytics, personalisation or advertising cookies are activated only after consent. You can accept, refuse or adjust non-essential cookies through the cookie banner or privacy settings. Refusing non-essential cookies does not prevent access to the store's essential functions.
10. Your rights
Subject to applicable conditions, you may request access, correction, erasure, restriction, portability or objection to processing. You may withdraw consent at any time and may object to direct marketing without giving a reason.
Send requests to support@sapoestore.com. We may request information reasonably necessary to verify identity. You may also lodge a complaint with the French data-protection authority, the Commission nationale de l'informatique et des libertés (CNIL), at https://www.cnil.fr.
11. Security
We use reasonable technical and organisational measures appropriate to the nature and risk of the data. No online transmission or storage system is completely secure, and customers should protect account credentials and notify us of suspected unauthorised access.
12. Children
The Website is not directed to children. We do not knowingly collect personal data from children without the involvement or authorisation required by applicable law. Contact us if you believe a child has provided data improperly.
13. Changes and contact
We may update this Policy to reflect legal, operational or technical changes. The latest version and update date will appear on this page. Questions or rights requests may be sent to support@sapoestore.com.