The purpose of this privacy policy is to inform users of the Briana website about how their personal data is collected, used and protected, in accordance with Regulation (EU) 2016/679 on data protection (GDPR) and current French legislation.

1. Data Controller

The data controller for personal data is:

Ken Calveyrac and Cassy Fremont
Legal form: SAS
Share capital: €4000
Registered office: 45 rue d'Armagnac, 33800 Bordeaux
Registered under number: 888 347 820 00043. Contact email address: contact@brianashoes.com

2. Personal data collected

The following data may be collected when using the Briana website:

• Identity: last name, first name

• Contact information: postal address, email address, telephone number

• Order information: products purchased, amounts, history

• Payment data (processed exclusively by secure providers)

• Browsing data: IP address, browser type, cookies

No sensitive data as defined by the GDPR is collected.

3. Purposes and legal basis of processing

The processing of personal data is based on the following legal grounds:

Purpose	Legal basis
Order processing	Contract execution
Delivery and tracking	Contract execution
Returns and refund management	Contractual obligation
Customer service	Legitimate interest
Accounting and tax obligations	Legal obligation
Sending commercial communications	Consent
Navigation analysis and statistics	Consent

4. Data Recipients

Personal data may only be transmitted to service providers necessary for the operation of the site, including:

• Payment providers: Stripe, PayPal

• Delivery providers: Colissimo, GLS

• E-commerce platform: Shopify

• Marketing and analytics tools: Meta, Omnisend

• Website host: Shopify

These service providers act as subcontractors and are contractually bound to respect the confidentiality of the data.

5. Transfers outside the European Union

Some data may be transferred outside the European Union, particularly when technical or payment tools located outside the EU are used.

These transfers are governed by appropriate safeguards , such as standard contractual clauses approved by the European Commission , in accordance with Articles 44 et seq. of the GDPR.

6. Data retention period

Personal data is retained for the following periods:

• Customer data: duration of the business relationship

• Billing data: 10 years

• Marketing data: up to the point of withdrawal of consent

• Cookies: 12 months

7. Data Security

The data controller implements appropriate technical and organizational measures to ensure the security, integrity and confidentiality of personal data.

Bank details are never stored by Briana and are processed only by secure payment providers.

8. User Rights

In accordance with the GDPR, users have the following rights:

• Right of access

• Right of rectification

• Right to erasure

• Right to restriction of processing

• Right to object

• Right to data portability

These rights can be exercised at any time by sending a request to: contact@brianashoes.com

The user also has the right to lodge a complaint with the competent authority:
CNIL – National Commission for Information Technology and Civil Liberties (France)

9. Cookies

The Briana website uses cookies necessary for its operation, as well as cookies subject to user consent for statistical and marketing purposes.

On the first visit, a cookie management banner allows the user to accept, refuse or configure non-essential cookies.

10. Policy Amendment

This privacy policy may be modified at any time to remain compliant with legal or technical developments.
The version in effect is the one published on the website on the date of consultation.

11. Contact

For any questions relating to the protection of personal data, the user can contact: contact@brianashoes.com