1. Introduction
iStore36, an independent online boutique operating the website istore36.com, is committed to protecting the privacy of its customers and visitors. This Privacy Policy explains how we collect, use, and protect your personal data.
2. Data Collected
2.1 Data Provided by the Customer
When creating an account or placing an order, we collect:
- Identity: first name, last name.
- Contact: email address, phone number (if applicable).
- Order: purchase history, product ordered, amount.
2.2 Automatically Collected Data
When browsing the site, we collect:
- Browsing: pages visited, visit duration, browsing path.
- Technical: IP address, browser type, operating system.
- Cookies: session cookies, cart cookies, preference cookies (see Section 6).
2.3 Payment Data
Payment transactions are processed by secure payment providers. iStore36 does not store full banking details (card number, security code). Only a transaction identifier and a masked card number are kept for tracking purposes.
3. Purpose of Processing
Your data is collected for the following purposes:
- Order management: processing, code delivery, tracking.
- Customer service: responding to questions and complaints.
- Communication: order confirmation, service updates, promotional offers (with consent).
- Site improvement: browsing analysis, anonymous statistics.
- Security: fraud detection and prevention.
4. Legal Basis for Processing
The processing of your data is based on:
- Performance of the sales contract (orders).
- Your consent (newsletter, marketing cookies).
- Our legitimate interest (security, service improvement).
5. Data Retention
- Customer account data: retained as long as the account is active, or 3 years after the last order.
- Order data: retained for 5 years from the date of the order, in accordance with accounting obligations.
- Browsing data: retained for a maximum of 13 months.
- Cookies: maximum duration of 13 months.
6. Cookies
The site uses the following types of cookies:
- Essential cookies: session, cart, login. Required for the site to function. Cannot be disabled.
- Functional cookies: language preference, currency. Enhance your experience.
- Analytics cookies: anonymized browsing statistics.
You can manage your cookie preferences through your browser settings.
7. Data Sharing
Your data is never sold, rented, or transferred to third parties for commercial purposes. It may be shared:
- With payment providers (transaction processing).
- With the subscription service operator (account activation ? credentials only).
- Upon legal request from competent authorities.
8. Data Security
iStore36 implements technical and organizational measures to protect your data:
- Secure HTTPS connection (SSL/TLS).
- Restricted access to personal data (authorized personnel only).
- Encrypted passwords (hashing).
- Monitoring of suspicious access.
9. Your Rights
In accordance with applicable regulations, you have the following rights regarding your data:
- Right of access: obtain a copy of your data.
- Right of rectification: correct inaccurate data.
- Right to erasure: request deletion of your data.
- Right to object: object to the processing of your data.
- Right to portability: receive your data in a usable format.
To exercise your rights, write to: support@istore36.com.
We respond within a maximum of 30 days.
10. Contact
Email: support@istore36.com
11. Updates
This policy may be updated to reflect changes to the site or regulations. Last updated: May 17, 2026.