Privacy policy

Last Update: March 19, 2026

France Galop attaches particular importance to the protection of your personal data and to respecting your privacy.

This Privacy Policy is intended to inform you clearly and transparently about how France Galop collects, uses, and protects your personal data when you access the website www.boutique-francegalop.com, use its services, or make a purchase (hereinafter the “Services”).

In the event of any conflict between the Terms and Conditions of Sale or Use and this Privacy Policy, this Privacy Policy shall prevail with respect to personal data.

1. Data Controller and Data Protection Officer (DPO)

FRANCE GALOP, headquartered at 15 Boulevard de Douaumont CS 64440 75819 Paris Cedex, is the Data Controller for personal data collected on this website and its sub-sites.

For any requests regarding the exercise of your rights, users can contact FRANCE GALOP via the email address contact-data-protection@france-galop.com and/or by writing to: FRANCE GALOP – 15 Boulevard de Douaumont CS 64440 75819 Paris Cedex.

2. Scope

This Privacy Policy applies to all processing of personal data carried out in connection with the use of the Services, in particular during:

• Browsing the website,

• Creating a customer account,

• Placing orders,

• Communicating with customer service,

• Using the tools and features offered by the store.

3. Personal Data Collected

Personal data refers to any information that can directly or indirectly identify an individual. Depending on your use of the Services, France Galop may process the following categories of data:

3.1 Identification and Contact Data

• First and last name

• Postal address

• Billing and shipping addresses

• Email address

• Phone number

3.2 Account Data

• Username and password (encrypted)

• Account preferences and settings

3.3 Transaction Data

• Products viewed, ordered, returned, or exchanged

• Order history

• Payment amounts, methods, and confirmations

Banking data is handled exclusively by secure payment providers; France Galop does not have access to it.

3.4 Communication Data

• Content of messages sent via contact forms or customer service

3.5 Technical and Navigation Data

• IP address

• Connection data

• Browser and device type

• Site usage data

4. Data Sources

Personal data is collected:

• Directly from you,

• Automatically during your browsing of the site (via cookies and similar technologies), only for technical cookies, and with your consent for non-essential cookies,

• Through technical providers, including Shopify,

• From partners when necessary to provide the Services.

5. Purposes and Legal Bases for Processing

6. Data Recipients

Personal data may be shared with:

• Authorized personnel at France Galop,

• Technical service providers acting on behalf of France Galop,

• Shopify as the hosting and store management platform,

• Administrative or judicial authorities when required by law.

France Galop does not sell personal data.

7. Hosting

The online store is hosted by Shopify.

In operating our online store, we use the Shopify platform, which may involve access to, hosting, or processing of certain personal data outside the European Economic Area, including by Shopify and its subcontractors. When such transfers occur, they are conducted in accordance with EU Regulation 2016/679 using appropriate safeguards, such as the European Commission’s standard contractual clauses or any other legally recognized mechanism.

8. Data Transfers Outside the European Union

As part of operating the online store, some personal data may be processed by Shopify and its subcontractors outside the European Union or the European Economic Area.

Such transfers are governed in accordance with Articles 44 and following of EU Regulation 2016/679 and rely on appropriate safeguards, including the European Commission’s standard contractual clauses where required. Shopify also clarifies that its contractual mechanisms cover international transfers within the group and to its subsequent subcontractors.

You can obtain more information about these safeguards and request a copy where applicable, as provided under the applicable regulations.

9. Data Retention

Personal data is retained for a period proportionate to the purposes pursued and applicable legal obligations.

• Data collected during site navigation via cookies and other trackers are kept for no more than 13 months from their placement or collection, in accordance with applicable regulations.

• Data collected for the creation and management of customer accounts are retained for the duration of the account. In cases of prolonged inactivity, accounts may be deleted after three (3) years from the last contact or activity, unless legal obligations require longer retention or to enable the establishment, exercise, or defense of legal rights.

• Data for managing orders, payments, delivery, and after-sales service are retained for the duration necessary to execute the contractual relationship, then archived for applicable legal periods.

• Data used for newsletters, commercial offers, or promotional communications are retained for three (3) years from the last contact from the individual.

• Data collected for notifications of one-time events or alerts about product/service availability are retained until the requested information is sent or, at the latest, until the end of the relevant event, unless legal obligations require otherwise.

After these retention periods, data is deleted or archived if its retention remains necessary for legal obligations or pre-litigation/litigation management.

10. Data Security

France Galop implements appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data.

11. Rights of Individuals

In accordance with applicable regulations, you have the following rights:

• Right of access

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to object

• Right to data portability

• Right to set directives regarding data after death

• Right to withdraw consent at any time

These rights can be exercised by contacting the Data Protection Officer.

12. Complaints

If you believe your rights are not being respected, you may file a complaint with the French Data Protection Authority (CNIL).

13. Changes to the Privacy Policy

This Privacy Policy may be modified at any time to reflect legal, regulatory, or operational changes. The version in effect is the one published on the website on the date of consultation.