1. Purpose of data processing
Wooly Rouge, whose registered office is located at 60, rue de Lagny, 93100 Montreuil, operates an online retail website. This website enables us to receive orders from our customers, and the data collected in this process is stored and processed in a customer database.
This database enables us to:
- Manage orders, payments and deliveries.
- Carry out marketing activities (customer loyalty schemes, promotions) and send email advertisements to customers who have not objected or who have given their consent: for products similar to those they have ordered; for other products offered by the company; for example, if a customer buys a dress, a body cream may be offered to them.

2. Legal bases for processing
- Order management: the legal basis for processing is the performance of a contract (see Article 6(1)(b) of the General Data Protection Regulation).
- Sending marketing communications by email regarding products similar to those ordered by customers: the legal basis for processing is the company’s legitimate interest (see Article 6(1)(f) of the General - Data Protection Regulation), namely to promote our products to our customers.
- Sending commercial communications by email regarding other products offered by Wooly Rouge: the legal basis for processing is consent (see Article 6(1)(a) of the General - Data Protection Regulation), as required by Article L. 34-5 of the French Post and Electronic Communications Code.
- Sharing of email addresses with business partners: the legal basis for processing is consent (see Article 6(1)(a) of the General Data Protection Regulation).
- Accounting requirements involving the retention of data for a period of 10 years: the legal basis for processing is a legal obligation (see Article 6(1)(c) of the General Data Protection Regulation).

3. Categories of data
- Identity: title, surname, first name, address, delivery address, telephone number, email address, date of birth, internal processing code used to identify the customer, data relating to registration on opt-out lists.
- Order-related data: transaction number, purchase details, purchase amount, data relating to invoice payments (payments, outstanding amounts, discounts), product returns.
- Payment method data: credit card number, credit card expiry date, security code (which is immediately deleted).
- Data required for loyalty and marketing activities: purchase history.

4. Recipients of the data
The customer service and billing departments of Wooly Rouge are recipients of all categories of data.
Its subcontractors, responsible for delivering orders, are recipients of our customers’ names, addresses and telephone numbers.

5. Data retention period
- Data required for order management and billing: for the duration of the commercial relationship and for ten years to meet accounting obligations.
- Data required for loyalty schemes and marketing: for the duration of the commercial relationship and for three years from the date of the last purchase.
- Data relating to payment methods: this data is not retained by Wooly Rouge; it is collected during the transaction and is immediately deleted once the purchase has been paid for.
- Data concerning opt-out lists for marketing communications: three years.

6. Your rights
If you no longer wish to receive marketing communications from Wooly Rouge (exercising your right to object or withdrawing consent you have already given), please contact us.

If, after consenting to your data being shared with our business partners, you wish to change your mind and no longer receive marketing communications from them, please contact us.

You may access, rectify or have your personal data erased. You also have a right to data portability and a right to restrict the processing of your data (visit cnil.fr for more information on your rights).

To exercise these rights or if you have any questions regarding the processing of your data in this context, you can contact us by email at: info@woolyrouge.com or by post at:
WOOLY ROUGE
60, rue de Lagny
93100 Montreuil

If, after contacting Wooly Rouge, you feel that your data protection rights have not been respected, you may submit a complaint online to the CNIL.