Privacy Policy
Privacy policy
This Privacy Policy explains how Sue Ure Ceramics ("we", "us", "our") collects, uses and protects your personal data when you use our website www.sueuremaison.live ("the Site") or place an order with us.
We are committed to handling your data lawfully, fairly and transparently in accordance with the EU General Data Protection Regulation (GDPR), the French Loi Informatique et Libertés, and the supervisory guidance of the Commission Nationale de l'Informatique et des Libertés (CNIL).
1. Who we are (the data controller)
Sue Ure Ceramics is the controller of your personal data, meaning we are responsible for deciding how and why it is processed.
- Business name
- Sue Ure Ceramics
- Trading as
- Sue Ure Maison
- SIRET
- 401 424 270 00015
- VAT (TVA)
- FR71 401 424 270
- Address
- 1174 Chemin de Sauviac, 32300 St Michel, France
- info@sueureceramics.com
- Telephone
- +33 (0)9 67 79 03 45
For any question about your personal data, please contact us at the email address above. We aim to respond to all data requests within one month.
2. What personal data we collect
We collect the following categories of personal data:
2.1 Information you provide directly
- Order details: name, billing address, delivery address, email, phone number, items purchased.
- Payment details: processed by our payment providers (we do not store card numbers ourselves).
- Account details: if you create a customer account, your password and order history.
- Communications: emails or messages you send us, including any information you choose to include.
- Marketing preferences: if you sign up to our newsletter, your email address and any preferences you set.
- Withdrawal requests: name, email and order reference submitted through our withdrawal form.
2.2 Information collected automatically
- Technical data: IP address, browser type, device type, operating system, time zone.
- Usage data: pages viewed, links clicked, time spent on the Site, referring website.
- Cookies and similar technologies: see section 8 below.
3. How we use your data and our legal basis
We process your personal data only where we have a lawful basis to do so under GDPR (article 6):
| Purpose | Legal basis |
|---|---|
| Processing your order, payment and delivery | Performance of a contract (art. 6.1.b) |
| Managing your customer account | Performance of a contract (art. 6.1.b) |
| Responding to your enquiries | Legitimate interest (art. 6.1.f) |
| Sending order confirmations, dispatch updates and transactional emails | Performance of a contract (art. 6.1.b) |
| Sending marketing newsletters | Your consent (art. 6.1.a) |
| Site analytics and improving our service | Legitimate interest or your consent (cookies) |
| Fraud prevention and security | Legitimate interest (art. 6.1.f) |
| Complying with our legal obligations (tax, accounting, consumer law) | Legal obligation (art. 6.1.c) |
4. Who we share your data with
We share your personal data only with trusted processors who help us run our business, and only to the extent necessary. We never sell your personal data.
4.1 Service providers (processors)
- Shopify International Limited (Ireland): e-commerce platform that hosts our Site and processes orders. See Shopify's Privacy Policy.
- Payment processors (e.g. Stripe, PayPal): handle your payment securely. We do not store your full card details.
- Carriers (La Poste / Colissimo, DHL, Royal Mail and others): to deliver your order.
- Email service providers (e.g. Shopify Email, Klaviyo): to send transactional and (with your consent) marketing emails.
- Form and customer support services: to handle withdrawal requests and contact form submissions.
- Analytics providers: to understand how the Site is used (subject to cookie consent where required).
4.2 Other recipients
- Public authorities, regulators or courts where we are required to do so by law.
- Professional advisers (accountants, lawyers) bound by confidentiality obligations.
5. International data transfers
Some of our processors (notably Shopify and certain analytics providers) may transfer your data outside the European Economic Area (EEA), including to the United Kingdom and the United States.
Where this happens, we ensure your data is protected by appropriate safeguards under GDPR, such as:
- An EU adequacy decision for the destination country (e.g. UK adequacy decision).
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- The EU-US Data Privacy Framework for certified US processors.
6. How long we keep your data
We keep your personal data only for as long as necessary for the purpose for which it was collected, or as required by law.
| Category | Retention period |
|---|---|
| Order and invoicing data | 10 years (French commercial and tax law) |
| Customer accounts | Active accounts indefinitely; inactive accounts after 3 years are reviewed for deletion (CNIL guidance) |
| Marketing subscriptions | Until you unsubscribe, then 3 years for record-keeping |
| Withdrawal and returns records | 5 years from completion |
| Customer service correspondence | 3 years from last contact |
| Cookies and analytics | Maximum 13 months (CNIL recommendation) |
7. Your rights under GDPR
You have the following rights in relation to your personal data:
- Right of access (art. 15): to obtain a copy of the data we hold about you.
- Right to rectification (art. 16): to have inaccurate or incomplete data corrected.
- Right to erasure (art. 17): to have your data deleted, subject to legal retention obligations.
- Right to restriction (art. 18): to limit how we use your data in certain situations.
- Right to data portability (art. 20): to receive your data in a structured, commonly used format.
- Right to object (art. 21): to object to processing based on legitimate interests, including marketing.
- Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.
- Right to provide post-mortem instructions: to set out what happens to your data after death (French Loi Informatique et Libertés).
How to exercise your rights: contact us at info@sueureceramics.com. We may ask for proof of identity to make sure we don't share your data with the wrong person. We will respond within one month.
Complaints: if you are not satisfied with our response, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. www.cnil.fr
8. Cookies and similar technologies
The Site uses cookies and similar technologies to function properly, to remember your preferences, and (with your consent) to measure traffic and personalise content.
8.1 Categories of cookies
- Strictly necessary cookies: required for the Site to function (shopping basket, login, security). No consent required.
- Functional cookies: remember your preferences (language, region). Consent-based.
- Analytics cookies: help us understand how the Site is used. Consent-based.
- Marketing cookies: used to show relevant advertising on other websites. Consent-based.
8.2 Managing your cookie preferences
You can accept, decline or customise cookies through the cookie banner displayed when you first visit the Site. You can change your preferences at any time using the cookie settings link in the footer, or by clearing cookies in your browser.
9. Marketing communications
We will only send you marketing emails if you have opted in (e.g. by subscribing to our newsletter). Every marketing email contains an unsubscribe link, and you can opt out at any time by emailing info@sueureceramics.com.
Unsubscribing from marketing does not affect transactional emails about your orders, which are sent under contract.
10. Children
The Site and our products are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can delete it.
11. Security
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include encryption in transit (HTTPS), restricted access to data, and working only with reputable processors who provide their own security guarantees.
No method of transmission over the internet is 100% secure. While we do our best to protect your data, we cannot guarantee its absolute security.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business or in the law. The "Last updated" date at the top of this page shows when the most recent change was made. We recommend checking this page periodically.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
- By email: info@sueureceramics.com
- By phone: +33 (0)9 67 79 03 45
- By post: Sue Ure Ceramics, 1174 Chemin de Sauviac, 32300 St Michel, France