Politique de confidentialité

Privacy Policy

Last updated: 16/072026

1. Data Controller

For the purposes of the General Data Protection Regulation (GDPR), the data controller responsible for your personal data is:

Onaboc

Privacy Policy

Last updated: [Insert Date]

This Privacy Policy describes how Onaboc ("we", "us", or "our"), operated by [Insert Legal Entity Name], collects, uses, and discloses your personal information when you visit or make a purchase from onaboc.com (the "Site").

By using the Site, you agree to the collection and use of information in accordance with this policy.

1. Data Controller

For the purposes of the General Data Protection Regulation (GDPR), the data controller responsible for your personal data is:

Onaboc [Insert Legal Entity Name] [Insert Full Address, Île-de-France, France] Phone: 09 87 45 65 98 Email: support@onaboc.com

If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.

2. Information We Collect

We collect the following categories of personal information:

2.1 Information You Provide to Us

Contact details (name, email address, shipping/billing address, phone number)
Order information (products purchased, order history, payment details — processed securely by our payment providers)
Account information, if you create an account
Communications you send us (emails, contact form submissions, customer support requests)

2.2 Information Collected Automatically

Device and browser information (IP address, browser type, operating system)
Usage data (pages visited, time spent on Site, referring URLs)
Cookies and similar tracking technologies (see Section 5)

2.3 Information from Third Parties

Payment confirmation data from our payment processor(s)
Advertising interaction data from Google Ads (see Section 5.2)

3. How We Use Your Information

We use your personal information for the following purposes:

Purpose	Legal Basis (GDPR)
Processing and fulfilling your orders	Performance of a contract
Managing your account	Performance of a contract
Customer support and communication	Performance of a contract / Legitimate interest
Sending order confirmations and shipping updates	Performance of a contract
Fraud prevention and security	Legitimate interest
Advertising and remarketing via Google Ads	Consent
Complying with legal obligations (tax, accounting)	Legal obligation
Improving our Site and services	Legitimate interest

4. Sharing Your Information

We do not sell your personal information. We share your information only with the following categories of recipients, as necessary to operate our Site:

Shopify: Our e-commerce platform provider, which processes data on our behalf to host the Site and manage orders.
Payment processors: To securely process your payments (e.g., Shopify Payments and other supported providers). We do not store your full payment card details.
Shipping and fulfillment partners: To deliver your orders.
Google Ads: For remarketing and conversion tracking purposes (see Section 5.2).
Legal and regulatory authorities: Where required by law.

These third parties are only permitted to use your personal information as necessary to provide services to us and are required to maintain appropriate data protection standards.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device to help the Site function and to collect information about how you use it.

5.2 Google Ads Remarketing

We use Google Ads remarketing to advertise our products to visitors who have previously visited our Site. This means:

Google may use cookies to serve ads based on your prior visits to our Site.
Third-party vendors, including Google, may show our ads on other websites you visit across the internet.
No personally identifiable information is collected by Google through this process; only cookie-based, pseudonymous identifiers are used.

Your consent: Because we target users in the EU/EEA, we only activate Google Ads remarketing cookies after obtaining your consent through our cookie consent banner, in accordance with GDPR and the ePrivacy Directive. You may withdraw your consent at any time by adjusting your cookie preferences on our Site.

Opting out: You can opt out of Google's use of cookies for ad personalization by visiting Google Ads Settings or by using the Network Advertising Initiative opt-out page.

5.3 Managing Cookies

You can also manage or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of the Site.

6. International Data Transfers

Your information may be transferred to, and processed in, countries outside the European Economic Area (EEA), including by service providers such as Shopify and Google, which may process data in the United States or other jurisdictions.

Where such transfers occur, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or reliance on an adequacy decision, to protect your personal information in accordance with GDPR requirements.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:

Order and transaction data: retained in accordance with applicable tax and accounting laws (typically up to 10 years in France/EU).
Marketing and remarketing consent data: retained until you withdraw consent or for a maximum of 13 months (per CNIL recommendations for cookies), whichever is earlier.
Customer support communications: retained for as long as necessary to resolve your inquiry and for a reasonable period afterward.

8. Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your personal data, subject to certain exceptions.
Right to restrict processing: Request that we limit how we use your data.
Right to data portability: Request your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interest or for direct marketing purposes (including Google Ads remarketing).
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@onaboc.com. We will respond to your request within one month, as required by GDPR.

You also have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés) — www.cnil.fr.

9. Children's Privacy

Our Site is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The updated version will be posted on this page with a revised "Last updated" date.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Onaboc 8 rue laurin rueil-malmaison 92500 Phone: 09 87 45 65 98 Email: support@onaboc.com