POLITIQUE DE CONFIDENTIALITÉ — RÉSUMÉ

Dernière mise à jour : 1er septembre 2026

THE LOOT - EI DEBOFFE LEA collecte et utilise vos données personnelles dans le cadre de la gestion de vos commandes, de notre relation client, de nos obligations légales et comptables, ainsi que de nos communications marketing lorsque nous disposons de la base légale appropriée.

Données collectées : nom, adresse de facturation et de livraison, adresse e-mail, numéro de téléphone, informations relatives aux commandes et transactions, informations que vous nous communiquez lorsque vous nous contactez, ainsi que certaines données techniques et de navigation.

Les données nécessaires au paiement peuvent être traitées directement par les prestataires de paiement concernés. Nous ne conservons pas les numéros complets de carte bancaire lorsque ceux-ci sont traités directement par nos prestataires de paiement.

Utilisation : traitement et livraison des commandes, gestion de la relation client, traitement des paiements, facturation et respect de nos obligations légales et comptables, sécurité et prévention de la fraude, fonctionnement et amélioration du site, ainsi que communications commerciales lorsque nous disposons d'une base légale appropriée.

Base légale : selon le traitement concerné, vos données peuvent être traitées pour l'exécution de votre contrat avec nous, pour respecter une obligation légale, dans le cadre de notre intérêt légitime, ou sur la base de votre consentement lorsque celui-ci est requis.

Partage des données : vos données peuvent être partagées avec Shopify et avec certains de nos prestataires de services, notamment les prestataires de paiement, de livraison et les prestataires techniques nécessaires au fonctionnement du site. Elles peuvent également être communiquées lorsque la loi nous y oblige ou lorsque cela est nécessaire à la protection de nos droits.

Nous ne vendons pas vos données personnelles.

Données relatives aux artistes : dans le cadre de nos relations professionnelles avec les artistes dont nous présentons ou vendons les œuvres, nous pouvons traiter leurs noms, coordonnées professionnelles, adresses, adresses e-mail, comptes de réseaux sociaux, photographies, informations relatives à leurs œuvres et informations nécessaires à la gestion de notre relation commerciale. Certaines informations commerciales et contractuelles restent confidentielles et ne sont pas destinées à être publiées.

Vos droits (RGPD) : vous disposez notamment d'un droit d'accès, de rectification, d'effacement, de limitation du traitement, d'opposition et, lorsque les conditions prévues par la réglementation sont réunies, de portabilité de vos données. Lorsque le traitement repose sur votre consentement, vous pouvez retirer celui-ci à tout moment.

Pour exercer vos droits : info@onlineloot.eu

Vous pouvez également introduire une réclamation auprès de la Commission nationale de l'informatique et des libertés (CNIL).

Cookies : notre site utilise des cookies et technologies similaires nécessaires à son fonctionnement ainsi que, selon les fonctionnalités utilisées, des cookies ou traceurs destinés à certaines fonctionnalités ou à la mesure d'audience. Lorsque votre consentement est requis, ces cookies ou traceurs ne sont utilisés qu'après votre consentement.

Vous pouvez gérer vos préférences via notre bandeau de consentement Shopify.

Conservation : nous conservons vos données pendant la durée nécessaire aux finalités pour lesquelles elles sont traitées et, lorsque la loi l'exige, pendant les durées légales applicables. Certaines pièces comptables, notamment les factures, sont conservées pendant 10 ans conformément aux obligations françaises. Les données utilisées à des fins de prospection commerciale sont conservées conformément aux règles françaises applicables et aux recommandations de la CNIL.

Pour toute question relative à vos données personnelles : info@onlineloot.eu

---

PRIVACY POLICY

Last updated: September 1, 2026

"THE LOOT" - EI DEBOFFE LEA operates this store and website, including all related information, content, features, tools, products and services (the "Services"). This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase through the Services, or otherwise communicate with us.

Personal Information We Collect or Process

We may collect or process the following categories of personal information, depending on how you interact with the Services:

• Contact details including your name, billing address, shipping address, phone number and email address.

• Transaction information including the products you purchase, return, exchange or cancel, your order history and transaction details.

• Communications with us including information you provide when contacting us or requesting customer support.

• Device and technical information including your IP address, browser type, device information, network information and other technical identifiers.

• Usage information including information regarding your interaction with and navigation of the Services.

• Payment-related information necessary to process transactions. Depending on the payment method selected, payments may be processed through payment services made available through Shopify, including card payments, Apple Pay, Shop Pay, PayPal and Klarna.

Customer account creation is currently disabled on our store, and we therefore do not collect customer account credentials such as usernames or passwords.

We do not knowingly collect sensitive personal information unless this is necessary and permitted by applicable law.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you when you place an order, contact us, provide information to us or subscribe to communications.

• Automatically through the Services, including through cookies and similar technologies, subject to applicable consent requirements.

• From our service providers, where they process personal information on our behalf.

• From artists we work with, where information is necessary to manage our professional relationship, present their work or fulfil our commercial arrangements.

How We Use Your Personal Information

Depending on how you interact with us, we may use your personal information for the following purposes:

• Provide and Manage the Services. We use your personal information to process and fulfil orders, process payments, arrange shipping, manage returns and exchanges, provide customer support and communicate with you about your orders.

• Billing and Legal Compliance. We use personal information where necessary to issue invoices, maintain accounting records, comply with tax and other legal obligations, and establish, exercise or defend legal claims.

• Security and Fraud Prevention. We may use personal information to maintain the security of our Services, prevent fraud and investigate potentially fraudulent, illegal or malicious activity.

• Marketing and Communications. We may use Shopify Email to send newsletters, promotional offers and other commercial communications. Where prior consent is required under applicable law, we will only send such communications after receiving your consent. You may unsubscribe from marketing communications at any time.

• Website Operation and Improvement. We may use technical and usage information to maintain, operate and improve our website and Services. Where cookies or similar technologies require consent under applicable law, they will only be used after that consent has been obtained.

• Artist and Business Relationships. We may process professional contact details, addresses, email addresses, social-media information, photographs, artwork-related information and other information provided by artists in order to manage our professional relationships, present their work and fulfil our commercial arrangements.

Legal Bases for Processing

Depending on the circumstances, we may process personal information on the following legal bases:

• Performance of a contract, including processing and delivering your order.

• Compliance with a legal obligation, including accounting, tax and other legal requirements.

• Legitimate interests, including securing our Services, preventing fraud, managing our business and maintaining professional relationships, where our interests do not override your rights and freedoms.

• Consent, where consent is required, including for certain marketing communications and non-essential cookies or similar technologies.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

How We Disclose Personal Information

We may disclose personal information to third parties where necessary to provide the Services or operate our business, including:

• Shopify, which provides the e-commerce platform on which our store operates;

• Payment providers, depending on the payment method selected, including providers used for card payments, Apple Pay, Shop Pay, PayPal and Klarna;

• Shipping providers, including La Poste, for the delivery of orders;

• Technical and service providers necessary for website operation, security, maintenance or customer service.

We may also disclose personal information when required by law, in response to a valid request from a public authority, or when necessary to protect our rights, property, customers or Services.

We do not sell your personal information.

Relationship with Shopify

Our store is powered by Shopify.

Shopify processes personal information in connection with providing the e-commerce platform and related services. Information submitted through our Services may therefore be processed by Shopify and by service providers engaged by Shopify, including providers that may be located outside France or the European Economic Area.

Shopify may also process certain information in accordance with its own privacy policy and applicable terms.

For more information regarding Shopify's processing of personal information, please consult:

https://www.shopify.com/legal/privacy

Third Party Websites and Services

The Services may contain links to or integrations with third-party websites, platforms or services.

If you follow a link to or interact with a third-party service that we do not control, that third party's own privacy policy and terms will apply. We are not responsible for the privacy or security practices of such third-party services.

Artist Information

As part of our commercial relationships with artists whose work we present or sell, we may collect and process professional information such as names, professional contact details, addresses, email addresses, social-media accounts, photographs, artwork-related information and contractual or business information.

Certain information relating to our commercial relationships with artists, including contractual, financial and other confidential business information, is not intended for public disclosure.

Information concerning artists that is publicly displayed on our website, social-media accounts or other communication channels is limited to information and content used to present the artist and their work.

Children's Data

Our Services are not specifically directed at children, and we do not knowingly collect personal information from children where such collection is prohibited by applicable law.

If you believe that we have collected personal information from a child in circumstances where we should not have done so, please contact us using the information below.

Security and Retention of Your Information

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or destruction.

We retain personal information only for as long as necessary for the purposes for which it is processed, or for longer where required or permitted by law.

Certain accounting records and supporting documents, including invoices, are retained for 10 years where required under French law.

Personal information used for commercial prospecting is retained in accordance with applicable French data-protection rules and CNIL recommendations. In particular, prospect data may generally be retained for up to three years from collection or the last contact from the prospect, while customer data used for commercial prospecting may generally be retained during the customer relationship and for up to three years following the end of that relationship, subject to applicable law.

Where necessary, information relating to consent or opposition to marketing communications may also be retained for the period necessary to demonstrate compliance and respect your preferences.

Your Rights and Choices

Under the GDPR and applicable French data-protection law, you have the following rights, subject to the conditions and exceptions provided by law:

• Right of access to your personal information;

• Right to rectification of inaccurate or incomplete information;

• Right to erasure in certain circumstances;

• Right to restriction of processing in certain circumstances;

• Right to object to certain processing, including direct marketing;

• Right to data portability, where the applicable legal conditions are met;

• Right to withdraw consent where processing is based on consent.

You may exercise your rights by contacting:

info@onlineloot.eu

We may need to verify your identity before processing certain requests.

We will respond within the time limits required by applicable law.

Marketing Communications

We may use Shopify Email to send newsletters, promotional offers and other commercial communications.

For individual customers and prospects, we will obtain prior consent where required by applicable law.

You may withdraw your consent or object to marketing communications at any time by using the unsubscribe link included in our emails or by contacting us at info@onlineloot.eu.

Unsubscribing from marketing communications will not prevent us from sending essential transactional communications relating to your orders, such as order confirmations, payment confirmations or shipping information.

Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the website, shopping cart, checkout and other essential functionality to operate.

Other cookies or similar technologies may be used for analytics, functionality or other purposes depending on the services and features enabled on our Shopify store.

Where consent is required under applicable law, such cookies or technologies will only be activated after you have provided your consent.

You can manage or withdraw your cookie preferences through the Shopify Customer Privacy / Cookie Banner.

Your choice should be reversible, and where applicable you may update your preferences at any time through the cookie-management mechanism made available on the Services.

International Data Transfers

Because we use Shopify, payment providers and other service providers, personal information may be processed or stored outside France or the European Economic Area.

Where personal information is transferred outside the European Economic Area, we will ensure that an appropriate legal transfer mechanism is used where required by applicable law, such as an adequacy decision, Standard Contractual Clauses adopted by the European Commission, or another lawful mechanism.

The actual locations and transfer mechanisms may vary depending on the service provider and the services used.

Complaints

If you have concerns about the way we process your personal information, please contact us first at:

info@onlineloot.eu

You also have the right to lodge a complaint with the French data-protection authority:

Commission nationale de l'informatique et des libertés (CNIL)

https://www.cnil.fr/

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, our processing activities or applicable legal requirements.

When we make changes, we will update the "Last updated" date at the beginning of this Privacy Policy.

Contact

If you have any questions about this Privacy Policy, our privacy practices, or the processing of your personal information, please contact:

THE LOOT — EI DEBOFFE LEA
13 chemin de l’arbre sec
59244 Petit-Fayt
France

Email: info@onlineloot.eu

For the purposes of applicable data-protection law, THE LOOT — EI DEBOFFE LEA  is the data controller of the personal information processed in connection with the Services.