Data protection

Privacy Policy

At URSUL Paris, we attach great importance to the protection of your personal data. This policy explains how we collect, use and safeguard your information when you browse or purchase on our websites: ursul.fr, ursul.com and ursul.es.

1. Data Controller

URSUL SARL
184 bis rue du Faubourg Saint-Martin
75010 Paris – France

For any request regarding your personal data, you may contact us using our contact form.

2. Personal Data Collected

Data Provided Directly

• First and last name
• Postal address
• Email address
• Phone number
• Order and purchase information
• Messages sent via contact forms

Data Collected Automatically

• IP address
• Browser and device technical data
• Pages viewed and browsing behaviour
• Cookies and similar tracking technologies

Payment Data

Payments are processed securely by our providers (Shopify Payments, PayPal, Alma, etc.). URSUL Paris never stores your banking information.

3. Purposes of Processing

Your data is used to:

• process and deliver your orders,
• manage payments,
• provide customer service,
• personalise your browsing experience,
• send marketing communications (with your consent),
• improve our services and perform anonymised analytics,
• comply with our legal obligations.

We do not sell or rent your personal data.

4. Legal Basis

We process your data on the following legal grounds:

• Performance of a contract (orders, deliveries, returns),
• Consent (newsletter, marketing),
• Legitimate interest (security, fraud prevention),
• Legal obligation (accounting, taxation).

5. Data Retention

Your data is kept for:

• Orders: 10 years (legal requirement),
• Customer account: until deleted,
• Marketing data: 3 years after last interaction,
• Cookies: according to your preferences.

6. Data Recipients

Your data may be shared with:

• Payment providers (Shopify Payments, Alma, PayPal…)
• Carriers (La Poste, Colissimo, DHL…)
• Technical service providers (Shopify, emailing services, analytics…)
• Authorities if required by law

All our partners commit to GDPR compliance.

6 bis. Processing of Data through Shopify Network Intelligence

Our websites are hosted by Shopify. As part of the Shopify Network Intelligence programme, certain technical and behavioural data may be combined, in an aggregated and anonymised manner, with data from other Shopify merchants. This aggregation helps enhance platform performance and security, and provides services such as:

• advanced analytics,
• fraud prevention,
• growth insights and recommendations,
• optimised shopping experience.

No data allowing you to be personally identified is shared with other merchants.

You may consult Shopify’s Consumer Privacy Policy here:
Shopify Privacy Policy

If you wish to limit the use of your data for these purposes, you may manage your preferences through our cookie banner or use the opt-out features provided by your browser.

7. Your Rights

You have the following rights:

• right of access,
• right to rectification,
• right to erasure,
• right to restriction of processing,
• right to object,
• right to data portability,
• right to withdraw consent at any time.

To exercise your rights, please use our contact form. We will respond within 30 days.

8. Security

We implement strong measures to protect your personal data:

• secure HTTPS connection,
• certified payment systems,
• restricted access to personal data,
• continuous monitoring for potential vulnerabilities.

9. Cookies

Our websites use cookies to:

• ensure essential site functions,
• measure traffic,
• improve browsing experience,
• provide personalised content.

You may manage your preferences through our cookie banner.

10. Updates

This policy may be updated to reflect legal or technical changes. The most recent version is always available on this page.

11. Contact

For any questions regarding your personal data, please contact us using our contact form.