Privacy Policy

This Privacy Policy explains how GALLICUS Sp. z o.o., trading as Les Échiquiers du Roi (“we”, “us”, “our”), collects, uses, shares and protects personal data when you visit or use our website, place an order, contact us, subscribe to our communications, or otherwise interact with us.

Please read this Privacy Policy together with our cookie banner and cookie settings, which explain how you can manage your privacy choices.

1. Who We Are

Data Controller
GALLICUS Sp. z o.o.
34/15 Rynek Główny
31-010 Kraków
Poland

Contact email:
service@les-echiquiers-du-roi.fr

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us using the details above.

2. Scope of This Policy

This Privacy Policy applies to personal data collected through:

• our website;
• the checkout and ordering process;
• customer service communications;
• newsletter or marketing subscriptions;
• advertising, analytics and consent management tools used on our website;
• social media or forms that link to this Policy.

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data.

3.1 Identity and Contact Data

• first name and last name;
• billing address;
• shipping address;
• email address;
• telephone number.

3.2 Order and Transaction Data

• products viewed, added to cart, purchased or returned;
• order number;
• order value, currency, discounts and shipping method;
• payment status;
• refund and after-sales history.

3.3 Payment Data

We do not store full payment card details ourselves. Payments are processed by our payment providers. We may receive limited payment-related information such as payment status, payment method type, partial identifiers and fraud-related signals.

3.4 Customer Relationship Data

• your correspondence with our customer service team;
• account details, if you create an account;
• product interests, saved carts or preferences;
• reviews, feedback and similar submissions.

3.5 Device, Browser and Technical Data

• IP address;
• browser type and version;
• device type and operating system;
• language settings;
• time zone;
• referrer URL;
• page views and navigation events;
• approximate location derived from IP address.

3.6 Marketing and Advertising Data

• whether you opened or clicked a marketing email;
• campaign source, medium and advertising identifiers;
• interactions with our advertisements and website;
• audience membership or suppression status;
• consent choices relating to analytics, advertising and personalisation.

3.7 Consent and Preference Data

• whether you accepted, rejected or customised cookies and similar technologies;
• the date, time and scope of your consent choices;
• regional privacy settings and preference changes.

3.8 Optional Data You Provide

• engraving or personalisation text;
• survey responses;
• messages, attachments or other content you voluntarily send to us.

4. How We Collect Personal Data

We collect personal data:

• directly from you, when you place an order, fill in a form, create an account, subscribe to marketing communications or contact us;
• automatically from your device or browser when you use our website, through cookies, pixels, tags, logs and similar technologies, subject to your choices and applicable law;
• from service providers who help us operate the website, process payments, deliver orders, prevent fraud, analyse traffic and run advertising;
• from advertising and analytics partners, where permitted by law and in accordance with your consent choices where required.

5. Why We Use Personal Data

5.1 To Perform Our Contract With You

• processing and delivering your order;
• taking payment and issuing refunds;
• sending order confirmations and service communications;
• handling customer support, returns and complaints;
• providing personalisation or engraving services you request.

5.2 To Comply With Legal Obligations

• accounting, tax and invoicing obligations;
• fraud prevention and security obligations;
• responding to lawful requests from public authorities, courts or regulators;
• keeping records as required by applicable law.

5.3 For Our Legitimate Interests

Where permitted by law, we may process personal data for our legitimate interests, provided your rights and freedoms do not override those interests.

• operating, securing and improving our website;
• managing logistics, fulfilment and customer service;
• detecting and preventing fraud, abuse and technical incidents;
• measuring the performance of our website, products and service communications;
• maintaining internal reporting and business administration;
• defending or establishing legal claims.

5.4 Based on Your Consent

• placing or reading non-essential cookies and similar technologies;
• using analytics technologies;
• using advertising and remarketing technologies;
• sharing certain data with analytics and advertising partners for measurement or personalised advertising;
• sending direct marketing where consent is required.

You can withdraw your consent at any time through our cookie settings, the unsubscribe link in our emails, or by contacting us.

6. Legal Bases for Processing

Where UK GDPR, EU GDPR or similar laws apply, we rely on one or more of the following legal bases:

• performance of a contract with you;
• compliance with a legal obligation;
• our legitimate interests, where those are not overridden by your rights;
• your consent, where consent is required.

7. Cookies and Similar Technologies

We use cookies and similar technologies on our website. These may include:

• strictly necessary technologies, required for core website functions, security, checkout and fraud prevention;
• analytics technologies, used to understand traffic, usage and website performance;
• functionality technologies, used to remember choices and improve your experience;
• advertising and remarketing technologies, used to measure advertising effectiveness, attribute conversions, create audiences and, where permitted, personalise ads.

For users in the United Kingdom, the European Economic Area and Switzerland, non-essential cookies and similar technologies are used only where and after valid consent has been obtained, unless an exemption applies under applicable law.

You can manage your choices at any time through our cookie settings. If you withdraw consent, this will apply going forward. Some cookies already stored on your device may remain until they expire or are manually deleted.

8. Google-Specific Disclosures

We use Google services, which may include:

• Google Ads;
• Google Analytics;
• Google tag / Google Tag Manager;
• conversion tracking;
• remarketing features;
• Google Consent Mode v2;
• enhanced measurement and related advertising or analytics features, where enabled.

When these tools are active and permitted by your choices, Google may collect or receive information from your browser, device and interactions with our website, which may include:

• IP address;
• page URL and referrer;
• browser and device information;
• cookie identifiers and similar identifiers;
• page views and events;
• purchase or conversion-related information;
• approximate location derived from IP address;
• consent signals;
• user data related to advertising, where lawfully collected and configured.

We use these Google services to:

• measure website traffic and performance;
• understand how users interact with our website;
• measure the effectiveness of our advertising;
• attribute conversions;
• create or suppress remarketing audiences;
• improve reporting and campaign optimisation;
• personalise ads only where the required consent has been obtained.

We use Google Consent Mode v2 to communicate consent choices to Google tags. Depending on your choices, certain Google features may be limited, disabled or operate in a restricted mode.

9. Other Advertising, Analytics and Consent Partners

9.1 E-commerce Platform and Website Infrastructure

• Shopify, which provides the e-commerce platform and related store infrastructure.

9.2 Consent Management

• Consentmo, which helps manage consent choices and privacy preferences on our website.

9.3 Payment Providers

• Shopify Payments;
• PayPal;
• Klarna.

These providers process payment-related information in accordance with their own privacy notices and legal obligations.

9.4 Logistics and Fulfilment Providers

• Our warehouse supplier, for order preparation, stock handling, shipping support, returns processing and related customer fulfilment operations.

9.5 Advertising and Analytics Partners

• Google;
• Meta;
• Pinterest;
• TikTok.

These partners may receive information about your activity on our website, subject to your consent choices where required, for purposes such as audience creation, conversion measurement, campaign attribution, ad delivery and advertising optimisation.

9.6 Professional, IT and Security Service Providers

We may also share personal data with providers of hosting, customer support, email delivery, fraud prevention, legal, accounting and business support services where necessary for the operation of our business.

9.7 Authorities and Legal Recipients

We may disclose personal data where required by law or where reasonably necessary to protect our rights, customers or business, including to courts, regulators, tax authorities or law enforcement agencies.

10. International Data Transfers

We are established in Poland and may use service providers located in the European Economic Area, the United Kingdom and other countries.

Where personal data is transferred outside the United Kingdom or the European Economic Area, we take steps designed to protect it in accordance with applicable data protection laws. Depending on the circumstances, these safeguards may include:

• an adequacy decision;
• standard contractual clauses;
• the UK International Data Transfer Addendum;
• other lawful transfer mechanisms recognised under applicable law.

You may contact us for more information about the safeguards used for specific transfers.

11. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, including to comply with legal, tax, accounting, reporting and warranty obligations, resolve disputes and enforce our agreements.

Retention periods vary depending on the type of data and the purpose of processing. In general:

• order, invoicing and accounting records are retained for the period required by applicable law;
• customer service records are retained for as long as necessary to manage the relationship and any after-sales issues;
• analytics and advertising data are retained according to the relevant tool settings and our legitimate business needs, subject to your consent choices where required;
• consent records are retained as needed to demonstrate compliance.

12. Your Rights

Depending on your location and the law that applies to you, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing, including direct marketing and certain processing based on legitimate interests;
• receive your personal data in a portable format, where applicable;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with a competent supervisory authority.

To exercise your rights, please contact us at:

service@les-echiquiers-du-roi.fr

If you unsubscribe from marketing communications, we may still send you service-related messages concerning your orders or customer relationship with us.

13. Direct Marketing

If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may send you information about our products, launches, editorial content, promotions and brand news.

You can opt out at any time by:

• clicking the unsubscribe link in our emails;
• changing your preferences, where available;
• contacting us directly.

We may also use your consent choices and prior interactions with our website to control whether advertising is shown, limited or personalised.

14. Automated Decision-Making and Profiling

We may use limited forms of profiling, segmentation, attribution, audience building or fraud screening in connection with website operation, analytics and advertising.

We do not make decisions producing legal or similarly significant effects based solely on automated processing without appropriate safeguards where required by law.

15. Data Security

We implement technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

16. Children

Our website is not directed at children, and we do not knowingly collect personal data from children in connection with the sale of our products.

If you believe that a child has provided us with personal data, please contact us so that we can take appropriate steps.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or business developments.

When we do, we will post the updated version on this page and revise the “Last updated” date.

18. Contact and Complaints

If you have any questions, requests or complaints regarding this Privacy Policy or the way we process personal data, please contact:

GALLICUS Sp. z o.o.
34/15 Rynek Główny
31-010 Kraków
Poland
Email: service@les-echiquiers-du-roi.fr

You may also have the right to lodge a complaint with the data protection authority in the country where you live, work or where you believe a violation of data protection law has occurred.

19. Cookie Settings

Our cookie settings and cookie banner form part of this privacy framework and should be read together with this Privacy Policy.

They are intended to provide up-to-date information about the categories of cookies and similar technologies used on our website, and to allow you to accept, reject or customise your choices where required by law.