Privacy Policy

The data controller for the processing of personal data is The Old Riviera. To exercise your rights or request information, please contact us at contact@theoldriviera.com.

Company name, registered office and VAT number will be indicated here once provided by the controller.

We collect only the data necessary to provide our service to you:

• Contact details: first and last name, email, phone number, shipping and billing address.
• Order data: products purchased, amounts, order history.
• Account data: your account credentials (password stored in encrypted form).
• Technical data: IP address, device type, browser, pages visited.
• Payment data: handled directly by our certified payment providers (we do not store your card details).

We use your data to:

• Process and ship your orders.
• Provide customer support and manage returns or exchanges.
• Send you service communications (confirmations, shipping updates, notices).
• With your consent, send you marketing communications and newsletters.
• Improve the site experience through aggregated analytics.
• Comply with legal and tax obligations.

The processing of your data is based on the performance of the purchase contract, your explicit consent (for marketing and newsletters), legal obligations, and our legitimate interest in improving the service.

We share your data exclusively with selected partners necessary for the provision of the service:

• E-commerce platform: Shopify (order and checkout management).
• Couriers: for order delivery.
• Payment providers: for secure processing of transactions.
• Email marketing tools: only with your consent.

Each of these partners operates in compliance with GDPR and under adequate contractual safeguards.

The site uses technical and functional cookies and — with your consent — analytics and marketing cookies. You can manage your preferences at any time via the cookie banner or your browser settings.

We retain your data for as long as necessary for the purposes indicated and to comply with legal obligations. Order data is retained for the period required by tax law. Marketing data is retained until consent is withdrawn.

At any time you may exercise the following rights under the GDPR:

• Access to your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure ("right to be forgotten").
• Restriction of or objection to processing.
• Data portability.
• Withdrawal of consent at any time.
• Lodging a complaint with the relevant data protection authority.

To exercise your rights, write to contact@theoldriviera.com.

We adopt appropriate technical and organisational measures to protect your data from unauthorised access, loss or disclosure. Transactions take place over an encrypted connection (SSL/TLS).

We reserve the right to update this Privacy Policy. Any changes will be published on this page along with the date of the last update.