Privacy policy

This Privacy Policy describes how Bonille (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from bonille.shop or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to:

Communicate with you.
Provide or improve the Services.
Comply with any applicable legal obligations.
Enforce any applicable terms of service.
Protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes, or can be associated with you.

1. Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

Contact details: Name, address, phone number, and email.
Order information: Name, billing address, shipping address, payment confirmation, email address, and phone number.
Account information: Username, password, security questions, and other credentials used for security.
Customer support information: Information you choose to include in communications with us (e.g., messages sent through the Services).

Note: Some features may require you to provide certain details. You may choose not to provide them, but doing so may prevent you from accessing those features.

2. Information We Collect About Your Usage

We automatically collect certain information about your interaction with the Services ("Usage Data") using cookies, pixels, and similar technologies ("Cookies"). Usage Data may include:

Device information and browser type.
Network connection details and IP address.
Other details regarding your interaction with the Site and your account.

3. Information We Obtain from Third Parties

We may obtain information about you from third parties and service providers acting on our behalf, including:

E-commerce platforms: Companies supporting our store, such as Shopify.
Payment processors: Entities collecting payment details (e.g., bank account, debit/credit card info, billing address) to fulfill orders and perform our contract with you.
Tracking partners: Online tracking technologies (pixels, web beacons, SDKs) used when you open emails, click links, or interact with our ads.

How We Use Your Personal Information

Providing Products and Services: To fulfill orders, process payments, send account or transaction notifications, arrange shipping, handle returns/exchanges, and manage your account. If opted-in, Shopify may match your account with other Shopify services per their Privacy Policy.
Marketing and Advertising: To send promotional communications by email, text, or mail, and to show tailored advertisements on our Site and third-party platforms.
Security and Fraud Prevention: To detect, investigate, or act against potential fraudulent, illegal, or malicious activity. You are responsible for keeping your credentials safe. Contact us immediately if you suspect a breach.
Communicating with You: To deliver customer support and continuously refine our Services based on our legitimate business interests.

Cookies

We use Cookies to power and improve our Site, remember your preferences, run analytics, and optimize user experience. Third parties may also use Cookies to tailor ads across different sites. For details on Cookies related to Shopify, visit Shopify Cookie Policy.

Managing Cookies: Most browsers accept Cookies by default, but you can adjust your browser settings to block or remove them. Disabling Cookies may impact feature functionality.
Global Privacy Control (GPC): We honor GPC signals. If detected, we treat it as a valid opt-out request for targeted advertising/data sharing for that browser or associated account. Learn more at Global Privacy Control. We do not recognize other "Do Not Track" signals.

How We Disclose Personal Information

We may disclose personal information to third parties under specific conditions, including:

Service Vendors: Partners handling IT, payment processing, analytics, customer support, storage, and fulfillment.
Marketing Partners: Third parties who use your information in accordance with their own privacy notices.
Consent & Direction: When you request or direct disclosures (e.g., social media logins or shipping requests).
Corporate Structure: Affiliates within our business group.
Legal & Business Events: In connection with mergers, bankruptcy, legal compliance (subpoenas), or to protect our rights and users.

Categories Disclosed (Past 12 Months)

Identifiers & Customer Records: Contact details, order info, account details (shared with vendors, payment processors, fulfillment, and analytics partners).
Commercial Information: Order history and support logs.
Usage & Geolocation Data: IP addresses and network activity.

Sale and Sharing of Data

Over the past 12 months, we have "sold" or "shared" identifiers, commercial info, and usage data with business and marketing partners for targeted advertising. We do not knowingly sell or share personal data of individuals under 16 years of age.

Third-Party Websites and Links

Our Site may link to third-party platforms. We do not control or guarantee the security or privacy practices of non-affiliated sites. Please review their policies independently. Publicly shared information on social networks may be visible to other platform users.

Children's Data

Our Services are not intended for children, and we do not knowingly collect personal data from them. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

Security and Retention of Your Information

Security: No security system is completely impenetrable. Information in transit may not always be secure; avoid sending sensitive information through unencrypted channels.
Retention: Data retention periods depend on account maintenance needs, legal obligations, dispute resolution, and active contracts.

Your Rights

Depending on your jurisdiction, you may hold the following rights regarding your personal information:

Right to Access / Know: Request details about the personal data we hold and how it is processed.
Right to Delete: Request removal of your personal information.
Right to Correct: Request correction of inaccurate information.
Right to Data Portability: Receive a copy of your data or request transfer to a third party.
Restriction of Processing: Request that we pause or limit processing.
Withdrawal of Consent: Revoke consent where processing relies on it.
Right to Appeal: Request a review if we deny your request by responding directly to our denial notice.
Communication Preferences: Unsubscribe from marketing emails via the link provided in the message (non-promotional emails regarding orders/accounts will still be sent).

To exercise your rights, contact us using the details below. We will verify your identity before processing. Authorized agents making requests must provide written authorization. Non-discrimination is guaranteed when exercising legal privacy rights.

Complaints & International Users

Complaints: Contact us directly if you have concerns. If unresolved, you may lodge a complaint with your local data protection authority.
International Transfers: Your data may be transferred and stored outside your country. For European data transfers outside Europe, we rely on standard safeguards such as standard contractual clauses (SCCs).