Privacy policy

1. Data controller

The data controller for the personal data collected on the website www.overcut.fr is:

Clément Roullier — Overcut
Sole trader (auto-entrepreneur) — SIRET: 93310620500018
Email: contact@overcut.fr

2. Data collected

As part of your use of the website and your purchases, Overcut may collect the following data:

First name and last name
Email address
Delivery and billing address
Phone number (if provided)
Browsing data (cookies, IP address, pages visited)
Order history

Overcut does not collect any banking data. Payments are processed directly by Shopify Payments, a secure platform compliant with PCI DSS standards.

3. Purposes of processing

The data collected is used for the following purposes:

Processing and tracking your orders
Managing the customer relationship (responding to your requests)
Sending confirmations and information relating to your orders
Sending commercial communications if you have consented to them (newsletter)
Improving the user experience on the website
Complying with our legal obligations

4. Legal basis for processing

The data processing carried out by Overcut relies on the following legal bases:

Performance of the contract — for processing your orders and managing your customer account
Legitimate interest — for improving the website and preventing fraud
Consent — for sending newsletters and marketing communications
Legal obligation — for retaining certain accounting and tax records

5. Retention period

Personal data is kept for as long as necessary for the purposes for which it was collected:

Order data: 5 years from the date of the order (accounting obligation)
Customer account data: duration of the commercial relationship + 3 years
Newsletter data: until you unsubscribe
Browsing data: 13 months maximum

6. Data sharing

Overcut does not sell your personal data. It may be shared with the following service providers strictly within the scope of their assignment:

Shopify — hosting and management of the online store
Carriers — for the delivery of your orders
CTCOM — embroidery production workshop

These service providers are bound by strict contractual obligations regarding the protection of your data.

7. Cookies

The website overcut.fr uses cookies to ensure it works properly and to improve your experience. The types of cookies used are:

Essential cookies — required for the cart and the store to function
Analytics cookies — to understand how the website is used (anonymised)
Marketing cookies — only if you have consented to them

You can adjust your cookie preferences at any time via the website's consent banner.

8. Your rights

In accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679), you have the following rights over your personal data:

Right of access — obtain a copy of your data
Right to rectification — correct inaccurate data
Right to erasure — request the deletion of your data
Right to restriction — restrict the use of your data
Right to data portability — receive your data in a structured format
Right to object — object to certain processing operations
Right to withdraw consent — at any time, for processing based on consent

To exercise your rights, contact us at: contact@overcut.fr

You also have the right to lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr

9. Security

Overcut implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. The website is secured using the HTTPS protocol. Banking data is encrypted and never passes through our servers.