This Privacy Policy explains how Ciroga collects, uses, and protects your personal information, in line with the EU General Data Protection Regulation (GDPR). By using our website, you acknowledge the practices described in this policy.
1. Who Controls Your Data
Ciroga is the data controller responsible for personal data collected through this website.
Address: 28 Passage Henri IV, 81100 Castres, France
2. How to Contact Us About Privacy
For any question about how we use your personal data: support@ciroga.com
3. Information We Collect
- Order information: name, delivery and billing address, email, phone number, shoe size, and payment details.
- Technical data: IP address, browser type, device information.
- Support interactions: emails or messages you send to us.
- Marketing preferences: if you choose to subscribe to our newsletter.
4. Legal Bases Under the GDPR
- Contract: To process and deliver your order, handle payments, returns, and customer service.
- Legal obligation: To meet tax, accounting, and regulatory requirements.
- Legitimate interest: To improve our website, prevent fraud, and keep our services secure.
- Consent: For marketing emails and non-essential cookies. You can withdraw consent at any time.
5. How We Use Your Information
- To process and deliver your orders.
- To communicate with you about your purchase, exchange, or return.
- To improve our website and customer experience.
- To send marketing communications if you have given consent.
6. Data Retention
- Order and invoice records: kept for up to 10 years, as required by applicable accounting law.
- Customer support messages: kept for up to 2 years.
- Marketing data: kept until you withdraw consent or after 3 years without interaction.
7. Third-Party Service Providers & International Transfers
We share data only with trusted service providers who help us operate:
- WordPress / WooCommerce and our hosting provider – website hosting and order management.
- Payment processors – such as [Stripe, PayPal, or card payment gateways].
- Email service providers – for order confirmations and newsletters.
- Logistics and delivery partners – including our warehousing and fulfilment partners outside the European Union, who prepare and dispatch your order.
Because some orders are fulfilled from outside the European Economic Area, limited data (name, address, phone number) may be transferred outside the EEA strictly for delivery purposes. These transfers are protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
8. Security
We take reasonable technical and organisational measures to protect your data. Payment details are encrypted and processed by our payment providers according to PCI-DSS standards; we never store your full card details.
9. Cookies
We use cookies to make the website work, remember your cart, and — with your consent — analyse traffic and show relevant advertising. See our Cookie Policy for details.
10. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data or request its deletion.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent for marketing at any time.
To exercise any of these rights, contact support@ciroga.com. You also have the right to lodge a complaint with your national data protection authority — in France, the CNIL (www.cnil.fr).
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.
12. Contact Information
Customer Service Hours: Monday to Friday, 9:00 AM – 5:00 PM (CET)
Email: support@ciroga.com
Phone: +33 5 63 71 78 76
Address: 28 Passage Henri IV, 81100 Castres, France
Last updated: [date]