Privacy

Data controller

• Business name: BSHOPER GROUP
• Registered office: 32 Rue de Paris 92100 Boulogne-Billancourt
• Tél. : +33 7 80 98 96 69
• SIRET: 105 869 606 00019
• Data protection contact: support@bshoper.fr

Processed data

• Account and order data (identity, email, phone, delivery/billing addresses).
• Payment-related data strictly required for checkout processing (via payment providers).
• Consented browsing data (cookies/preferences/analytics) according to your choices.
• Customer support data (messages, evidence files, case history).

Purposes and legal bases

• Contract performance: order handling, delivery, support and refunds.
• Legal obligations: invoicing, accounting and fraud prevention.
• Legitimate interest: security, service quality and abuse prevention.
• Consent: non-essential cookies and optional personalization features.

Retention periods

• Cookie consent/refusal proof: up to 395 days.
• Analytics/personalization events (if consented): up to 180 days.
• Pseudonymous recommendation profiles (if consented): up to 180 days.
• Contract-related records: according to applicable EU legal obligations.

Your rights (EU)

• Right of access, rectification, erasure and restriction.
• Right to object and right to data portability where applicable.
• Right to withdraw consent at any time for optional cookies.
• Right to lodge a complaint with the competent supervisory authority.

Cookies and preferences

• No non-essential cookie is stored before explicit consent.
• You can accept, refuse or customize with equal ease.
• Consent withdrawal remains available at any time.

Manage my cookies

Mobile application (Android and iOS)

• Camera: used only when you choose to take a photo for a file upload. No photo is taken without your explicit action.
• Push notifications: with your consent, we send notifications related to your orders, messages and promotions via Firebase Cloud Messaging (FCM). You can disable notifications at any time in your device settings.
• Biometric authentication: Face ID, Touch ID or fingerprint may be used to secure access to your account. Biometric data remains on your device and is never transmitted to our servers.
• Secure storage: your session credentials are stored in encrypted form on your device (Keychain on iOS, EncryptedSharedPreferences on Android).
• Analytics data: Firebase Analytics and Crashlytics collect performance and stability data to improve the application. A technical identifier of your device (ANDROID_ID on Android) and its model are sent to our servers to register and deduplicate push notification tokens (FCM), and may be associated with your account. Your photo gallery is accessed only for file uploads you initiate.
• No personal data is shared with third parties beyond what is described in this policy.