Privacy Policy

We collect the following types of personal data: Identity data: First name, last name, email address, phone number, and delivery address, provided when you create an account or place an order. Transaction data: Order history, payment information (processed securely by our payment provider — we do not store your full card details), and delivery preferences. Technical data: IP address, browser type, device information, and browsing behaviour on our website, collected automatically through cookies and similar technologies. Marketing data: Your preferences regarding receiving marketing communications, newsletter subscription status, and interactions with our emails. We do not collect any special categories of personal data (such as health data, racial or ethnic origin, or political opinions).

We use your personal data for the following purposes: Order processing: To process and fulfil your orders, manage payments, and arrange delivery. Customer support: To respond to your enquiries, manage returns and exchanges, and provide after-sales support. Account management: To create and manage your customer account, including order history, saved addresses, and favourites. Marketing: To send you promotional emails, product recommendations, and exclusive offers — only if you have opted in. You can unsubscribe at any time. Website improvement: To analyse browsing behaviour, improve our website performance, and personalise your shopping experience. Legal compliance: To comply with legal obligations, prevent fraud, and protect our rights.

We process your personal data based on the following legal grounds: Contract performance: Processing is necessary to fulfil our contract with you when you place an order. Consent: For marketing communications and non-essential cookies. You can withdraw your consent at any time. Legitimate interests: For website analytics, fraud prevention, and improving our services, where these interests do not override your rights and freedoms. Legal obligation: Where processing is required to comply with applicable laws and regulations.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected: Account data: Retained for as long as your account is active. You may request deletion of your account at any time. Order data: Retained for 5 years from the date of purchase, as required by accounting and tax regulations. Marketing data: Retained for 3 years from your last interaction with our marketing communications, unless you unsubscribe earlier. Technical data (cookies): Retained for a maximum of 13 months, in accordance with applicable regulations.

Under GDPR and applicable data protection laws, you have the following rights: Right of access: You may request a copy of the personal data we hold about you. Right to rectification: You may ask us to correct any inaccurate or incomplete data. Right to erasure: You may request the deletion of your personal data, subject to legal retention obligations. Right to restriction: You may request that we restrict the processing of your data in certain circumstances. Right to data portability: You may request your data in a structured, machine-readable format. Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, please contact us at: [email protected]. We will respond within 30 days.

Our website uses three categories of cookies: Essential cookies (always active): - Language preference: Determined by the URL (e.g. /fr/ or /en/), no cookie is set. - Currency preference (NEXT_CURRENCY): Remembers your selected currency (EUR, GBP, USD, AUD). - Shopping cart: Cart identifier stored locally to keep your items. - Authentication: Login token stored locally for customer accounts. - Favourites: Wishlist stored locally in your browser. - Cookie consent: Remembers your cookie preference. Analytics cookies (subject to your consent): - PostHog Analytics: A web analytics tool hosted in the European Union (PostHog EU). It helps us understand how visitors use the site (page views, purchase journeys) to improve your experience. This data is anonymised. Advertising cookies (set only if you click "Accept all"): - Snap Pixel (Snap Inc.): measurement of our advertising campaigns on Snapchat - Meta Pixel (Meta Platforms Ireland Ltd): measurement of our campaigns on Instagram and Facebook - TikTok Pixel (TikTok Technology Ltd): measurement of our campaigns on TikTok - Google Ads (Google Ireland Ltd): measurement of our Google Ads campaigns - Google Analytics (Google Ireland Ltd): audience measurement feeding our Google Ads campaigns These tools tell us whether a visit or purchase followed one of our ads. Personal data (email) is hashed before being sent. You can change your preference at any time by clearing your browser cookies.

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it: - All data transmitted between your browser and our website is encrypted using SSL/TLS technology. - Payment processing is handled by PCI-DSS compliant payment providers. - Access to personal data is restricted to authorised personnel only. - We conduct regular security audits and vulnerability assessments. Despite our best efforts, no method of electronic transmission or storage is 100% secure. If you suspect any security breach, please contact us immediately.

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), particularly where our service providers (e.g., Hostinger, Shopify, email services) are based. Where such transfers occur, we ensure that appropriate safeguards are in place, such as: - Standard Contractual Clauses approved by the European Commission. - Transfers to countries recognised as providing an adequate level of data protection. - PostHog EU: Analytics data is stored exclusively on servers located within the European Union. By using our website, you acknowledge that your data may be processed in accordance with these safeguards.

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe that your child has provided personal data to us, please contact us immediately. We will take steps to delete such data from our systems. Minors aged 16 and over may use our website with parental or guardian consent.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any significant changes will be communicated to you via email (if you have an account) or through a notice on our website. We encourage you to review this policy periodically. The date of the last update is indicated at the top of this page.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us: FootSupporter SAS Email: [email protected] You also have the right to lodge a complaint with your local data protection authority (in France: CNIL — Commission Nationale de l'Informatique et des Libertés).