PRIVACY POLICY

This policy explains how O’CLOCK STORE uses your personal data when you browse our website, create an account, place an order, contact our team or subscribe to our marketing communications.

1. Who is responsible for your data?

The data controller is O’CLOCK STORE, a French limited liability company (SARL), registered with the Nantes Trade and Companies Register under number 927 459 917, with its registered office at 22 Mail Pablo Picasso, Immeuble Skyline, 44000 Nantes, France.

Data protection requests are handled directly by our team. You can contact us at contact@oclockstore.fr or write to our registered office.

2. What data do we collect?

Depending on the services you use, we process the following categories of data:

• Customer account: identity details, title if provided, email address, authentication information and communication preferences.
• Orders and deliveries: billing and delivery details, telephone number, items ordered, amounts, order references, tracking information, returns and refunds.
• Payments: the payment method selected, payment status and transaction references needed to track your order. We do not have access to your full payment card numbers or card security codes.
• Communications with our team: contact details, message content and documents you send us by email, contact form or chat.
• Marketing communications: email address, consent and unsubscribe preferences, as well as the contents of your shopping cart when you consent to marketing communications that include abandoned cart reminders.
• Customer reviews: identity details, email address and order reference used to invite you to share your experience.
• Technical and browsing data: IP address, browser and device information, technical identifiers and interactions with the website, depending on the features used and your cookie preferences.

The data primarily comes from the information you provide and your use of the website. We also receive information needed to track payments and deliveries from the relevant service providers.

Mandatory fields are indicated on the forms. Without the necessary information, we cannot create your account, process your order or respond to your request. Subscribing to marketing communications is optional and is not a condition for creating an account or purchasing a product.

3. Why do we use your data?

• To create and manage your account and handle your purchases, payments, deliveries, returns and after-sales service requests: this processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract.
• To respond to your enquiries: where your enquiry concerns a purchase, processing is based on taking steps prior to entering into a contract or performing a contract; for other enquiries, it is based on our legitimate interest in responding to people who contact us.
• To issue and retain invoices, maintain our accounting records and respond to legally justified requests from authorities: this processing is based on our legal obligations.
• To email you our news, gift vouchers, offers and abandoned cart reminders: this processing is based on your consent.
• To invite you to review your purchase: this processing is based on our legitimate interest in gathering customer feedback and improving our services, without including direct marketing in the invitation.
• To maintain website security, prevent misuse and defend our rights: this processing is based on our legitimate interest in protecting our business, our customers and our systems.
• To measure website traffic and personalise content or advertising using non-essential tracking technologies: this processing is based on your consent.

4. Marketing communications and abandoned cart reminders

When you agree to receive our marketing communications, we may email you our news, product selections, gift vouchers and exclusive offers. These communications may also include messages allowing you to return to a shopping cart left on our website and complete your purchase.

Simply creating an account or accepting this policy does not constitute a subscription to marketing communications.

You may withdraw your consent at any time, free of charge, by using the unsubscribe link included in each marketing message or by writing to us at contact@oclockstore.fr. Withdrawal does not affect the lawfulness of processing based on your consent before its withdrawal.

Unsubscribing does not affect messages necessary to process your purchases or provide the services you request, including order confirmations, delivery updates and customer service responses.

5. Who receives your data?

Your data is accessible to our team and to recipients who need it for the purposes described in this policy. We do not sell your personal data.

• Dispatch and delivery: the brands or distributors that ship your order directly, as well as carriers, including Colissimo and the carriers used by these partners. The information shared may include your name, address, telephone number, email address and the necessary details of your order.
• Payment: the service providers involved according to the payment method selected, including Stripe, PayPal and Alma, as well as the parties necessary to process payments through Apple Pay, Google Pay or American Express.
• Hosting and maintenance: OVHcloud for website hosting and the technical service providers responsible for its development and maintenance, who may access the data necessary to carry out their work.
• Email and communications: Infomaniak for our email service and Brevo for managing and sending newsletters.
• Accounting: our accounting firm, Amarris, and the tools used to manage accounting documents, including Dext. The firm may access invoices containing personal details and relevant information held in our management system.
• Customer service: Smartsupp for chat conversations. We do not use its AI chatbot or browsing session recording features.
• Customer reviews: Trustpilot for sending invitations to share your experience and managing reviews on its platform.
• Analytics and advertising: the providers of the tools used on the website, including Google and Meta, depending on the features enabled and your consent.
• Authorised authorities and advisers: where required by law or necessary for the establishment, exercise or defence of legal claims.

Our team handles your after-sales service enquiries directly. Your contact details are not shared with brands for the purpose of managing after-sales service.

Some recipients, including payment service providers and review platforms, may also process data to fulfil their own obligations and for their own purposes, as described in their privacy policies.

6. How long do we retain your data?

Retention periods depend on how the data is used and on our obligations. Data used in day-to-day operations is kept separate from documents retained in restricted-access archives for legal or evidential purposes.

• Customer account: retained while in use, then deleted after two years of inactivity, following advance notice allowing you to request that it be kept open. Documents needed to meet legal obligations, honour warranties or resolve a dispute are retained separately.
• Orders, returns and after-sales service: retained while the order and related requests are being handled and for the duration of applicable warranties. Records needed as evidence are then archived for the applicable limitation periods, generally five years, subject to the specific obligations below and any ongoing proceedings.
• Invoices and supporting accounting documents: ten years from the end of the relevant financial year.
• Contracts concluded online for an amount of €120 or more: retained from the date they are concluded and for ten years from delivery.
• Direct marketing: for prospective customers, three years from collection or the last contact initiated by them; for customers, for the duration of the commercial relationship and then for three years after it ends. Marketing messages stop as soon as consent is withdrawn.
• Identifiable abandoned carts: three months from the last change to the cart, unless it results in an order. This period does not mean that reminders are sent continuously throughout that time.
• General enquiries and chat conversations: twelve months after the enquiry or conversation has been closed. Where they concern an order, a warranty or a dispute, the necessary records follow the retention periods applicable to the relevant case.
• Objections to direct marketing: the information strictly necessary to honour your objection is retained for at least three years and is not used for marketing purposes.
• Requests to exercise your rights: retained while the request is being handled, after which the records necessary to demonstrate our response are retained for the applicable limitation period. Any identity document requested to resolve reasonable doubt about your identity is deleted after verification, unless there is a specific, duly justified need to retain it.

Once the applicable retention periods have expired, data is deleted or irreversibly anonymised. Documents retained to meet a legal obligation or in connection with a dispute are not reused for direct marketing.

7. Cookies and other tracking technologies

The website uses cookies and similar technologies. Some are necessary for it to function, particularly to manage sessions, retain shopping cart contents, secure communications and remember your privacy preferences.

Other tracking technologies are used to measure website traffic or personalise content and advertising. Tracking technologies that require consent must only be used after you have given your consent. Refusing these technologies does not prevent you from making purchases on the website.

The services concerned include Google Analytics for website analytics and the Meta pixel for advertising features. Certain third-party content or services, such as embedded video players, may also involve data exchanges with their providers.

You can accept or reject non-essential cookies through the banner displayed on the website. Continuing to browse does not constitute consent. You also have the right to withdraw your consent at any time.

The lifespans of tracking technologies and the retention periods for associated data depend on their purpose and the service concerned. They are not the same for all cookies. If you have any questions about tracking technologies or how to exercise your choices, you can contact us at contact@oclockstore.fr.

8. Data transfers outside the European Union

Certain partners located in Switzerland receive the contact and delivery details necessary to ship your order directly to you. Our email service provider, Infomaniak, is also established in Switzerland. Switzerland benefits from a European Commission adequacy decision recognising an adequate level of protection for personal data.

The use of certain international service providers, particularly for payments, analytics or advertising, may also involve processing outside the European Economic Area. Depending on the recipient and country concerned, these transfers must be covered by an adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses and, where necessary, supplementary measures.

You can request further information about the recipients, the countries concerned and the applicable safeguards, including how to obtain a copy of those safeguards, by contacting contact@oclockstore.fr.

9. Protecting your data

Data protection relies on technical and organisational measures appropriate to the risks, including restricting access to authorised persons and securing the tools used. Service providers acting on our behalf are required to process data within the scope of their duties and in accordance with the obligations applicable to them.

We encourage you to use a private, sufficiently strong password, not to share it and to report any suspected misuse of your account to us.

10. Your rights and how to exercise them

Subject to the conditions laid down by applicable law, you have the following rights:

• Access: to find out whether we process your data and obtain a copy of it.
• Rectification: to have your personal data corrected or completed.
• Erasure: to request the deletion of your data where the applicable conditions are met, subject in particular to our legal retention obligations.
• Restriction of processing: to request that certain uses of your data be suspended in the circumstances provided for by applicable law.
• Objection: to object, on grounds relating to your particular situation, to processing based on our legitimate interests. You may object to direct marketing at any time without giving a reason.
• Data portability: to receive the data you have provided in a structured, commonly used format where its processing is carried out by automated means and is based on your consent or on a contract.
• Withdrawal of consent: to withdraw your consent at any time for processing based on that consent.
• Instructions concerning your data after your death: to set out instructions regarding the retention, erasure and disclosure of your data after your death.

To exercise your rights, write to contact@oclockstore.fr or to O’CLOCK STORE, 22 Mail Pablo Picasso, Immeuble Skyline, 44000 Nantes, France, specifying your request and providing the information needed to locate the data concerned.

We will respond within one month of receiving your request. This period may be extended by two further months due to the complexity or number of requests; you will be informed of any extension within the first month. If we have reasonable doubts about your identity, we may request the additional information necessary to verify it.

You may also lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), at www.cnil.fr/fr/plaintes or by post to: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

11. Updates to this policy

This policy may be updated to reflect changes to our services, tools or applicable law. Where a change requires it, you will be provided with additional information and your consent will be obtained before the relevant processing begins.

Last updated: 4 November 2026.