Privacy policy

Privacy Policy — SHARK THE BOX
 
Last updated: May 2026
 
SHARK THE BOX is committed to protecting your privacy and handling your personal data with the highest standards of care and transparency. This Privacy Policy explains what data we collect, why we collect it, how we use it and what rights you have regarding your personal information.
 
---
 
SECTION 1 — WHO WE ARE
 
SHARK THE BOX is a commercial brand operated from France, selling premium iPhone accessories worldwide through our website sharkthebox.com.
 
This website is built on the Shopify platform, operated by Shopify Inc. (151 O'Connor Street, Ground floor, Ottawa, Ontario, K2P 2L8, Canada), and is hosted on OVH Cloud infrastructure (2 rue Kellermann, 59100 Roubaix, France).
 
For any privacy-related questions or requests: support@sharkthebox.com
 
---
 
SECTION 2 — DATA WE COLLECT
 
2.1 — Information You Provide Directly
When you place an order, create an account or contact us, we collect:
- Full name
- Email address
- Shipping and billing address
- Phone number (if provided)
- Payment information (processed and encrypted by Shopify Payments — we never store raw card data)
- Order history and preferences
- Communications sent to our support team
 
2.2 — Information Collected Automatically
When you browse our website, we automatically collect:
- IP address and approximate geographic location
- Browser type and version
- Device type (desktop, mobile, tablet)
- Pages visited, time spent and navigation path
- Referring website or source
- Cookie identifiers
 
2.3 — Information from Third Parties
We may receive limited information from payment processors, advertising platforms and analytics services in connection with your interaction with our website or ads.
 
---
 
SECTION 3 — HOW WE USE YOUR DATA
 
Your personal data is used for the following purposes:
 
- To process, fulfill and deliver your orders
- To send order confirmations, shipping notifications and tracking information
- To respond to customer support inquiries
- To detect and prevent fraud or unauthorized activity
- To improve our website, products and customer experience
- To comply with applicable legal obligations
- To send marketing communications, only if you have opted in
 
We process your data on the legal bases of contract performance, legitimate interest and, where applicable, your explicit consent.
 
---
 
SECTION 4 — DATA SHARING
 
We do not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your data with trusted service providers strictly for the purpose of operating our business, including:
 
- Shopify Inc. (platform and payment processing)
- OVH Cloud (website hosting and infrastructure)
- Shipping and logistics carriers (to deliver your order)
- Analytics providers (aggregated, anonymized traffic data)
- Legal or regulatory authorities (if required by law)
 
All third-party service providers are contractually obligated to protect your data and use it only for the specified purpose.
 
---
 
SECTION 5 — COOKIES AND TRACKING
 
Our website uses cookies and similar tracking technologies to enhance your experience, analyze traffic and serve relevant advertising. Types of cookies we use include:
 
- Essential cookies: required for the website to function correctly
- Functional cookies: remember your preferences and settings
- Analytics cookies: help us understand how visitors interact with our site
- Marketing cookies: used to deliver relevant ads and track campaign performance
 
By continuing to browse our website, you consent to our use of cookies. You may withdraw consent or manage cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect website functionality.
 
---
 
SECTION 6 — DATA RETENTION
 
We retain your personal data for as long as necessary to:
- Fulfill your orders and provide customer support
- Comply with legal, accounting and reporting obligations
- Resolve disputes and enforce our agreements
 
Order data is typically retained for a minimum of 5 years in accordance with French commercial law. You may request deletion of your personal data at any time, subject to legal retention requirements.
 
---
 
SECTION 7 — YOUR RIGHTS UNDER GDPR
 
If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
 
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure: request deletion of your personal data ("right to be forgotten")
- Right to restriction: request that we limit how we use your data
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interest or for direct marketing
- Right to withdraw consent: withdraw consent at any time where processing is based on consent
 
To exercise any of these rights, please contact us at support@sharkthebox.com. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at cnil.fr.
 
---
 
SECTION 8 — CALIFORNIA CONSUMER PRIVACY ACT (CCPA)
 
If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to request deletion and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at support@sharkthebox.com.
 
---
 
SECTION 9 — DATA SECURITY
 
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. These measures include encrypted connections (SSL/TLS), access controls and secure payment processing through Shopify's PCI-DSS certified infrastructure.
 
However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong passwords and protect your account credentials.
 
---
 
SECTION 10 — CHILDREN'S PRIVACY
 
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately at support@sharkthebox.com so we can delete it.
 
---
 
SECTION 11 — MEDIA, IMAGES AND REVIEWS
 
Some images and videos featured on our website are sourced from social media platforms for illustrative and marketing purposes. The product sold on our site is identical in composition, quality and functionality to what is depicted. No misrepresentation is intended.
 
Customer reviews displayed on our website are sourced from verified purchasers of the same product through our supplier network. These reviews reflect authentic customer experiences and are not fabricated or paid for.
 
---
 
SECTION 12 — CHANGES TO THIS POLICY
 
We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Your continued use of the website following any changes constitutes acceptance of the updated policy.
 
---
 
SECTION 13 — CONTACT
 
For any questions, concerns or requests regarding your privacy:
 
Email: support@sharkthebox.com
Brand: SHARK THE BOX
Country: France
Website: sharkthebox.com