Privacy policy

Who is responsible for your data
We take your privacy seriously and comply with the French Data Protection Act and the GDPR.

What we collect
When you visit or make a purchase, we may collect:

Your name, shipping and billing addresses, email, and phone number

Payment details (we do not store full card numbers – these go directly to our secure payment processors)

Technical data such as your IP address, browser version, and how you interact with our pages (through cookies)

How we use your data
We use your information to:

Process and fulfil your orders (including delivery updates and customer support)

Send you order confirmations and, if you have opted in, occasional promotional offers

Improve our website performance and understand what products interest our visitors

Comply with legal obligations (accounting, tax, and fraud prevention)

Legal grounds
We rely on:

Contract performance – for processing your orders and returns

Legitimate interest – for improving our site and preventing fraud

Your consent – for marketing emails (you can unsubscribe at any time by clicking the link in the email or by contacting us)

How long we keep data
We keep your personal data only as long as necessary. For order and accounting records, we retain information for up to 5 years as required by French tax law. For marketing purposes, we keep your data until you withdraw your consent.

Your rights
You have the right to access, correct, delete, or restrict the use of your personal data. You may also object to processing or ask for a copy of your data in a portable format. To exercise any of these rights, send an email to info@sharoo.eu with “Privacy” in the subject line. We will respond within one month.

Cookies
Our website uses essential cookies (to remember your cart and login) and analytical cookies (to count visitors and see which pages are popular). You can disable non‑essential cookies through your browser settings, but this may affect some features like personalised recommendations.

Security
We use SSL encryption for all data transfers, and our servers are protected by firewalls and access controls. While no system is 100% immune, we continuously update our security measures to protect your information.