PRIVACY POLICY

OCEAN GUARD

Last updated: September 10, 2026

Ocean Guard attaches particular importance to protecting the personal data of its customers and visitors.

This Privacy Policy explains what personal data may be collected when using the oceanguard.co website, why it is used, with whom it may be shared, how long it is retained, and what rights data subjects have.

This policy is established in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act. The information provided must, in particular, identify the data controller, the purposes, the legal bases, the recipients, the retention periods, and the rights of data subjects.

1. Data Controller

The data controller for the personal data collected on oceanguard.co is:

Thomas Soulan – Sole Trader
Trading name: Ocean Guard
SIREN: 843 777 426
SIRET: 843 777 426 00019
Address: 3 rue des Remparts, 66470 Sainte-Marie-la-Mer, France
Website: oceanguard.co
Email: [EMAIL ADDRESS TO BE CREATED]

Ocean Guard does not currently have a Data Protection Officer (DPO). Personal data inquiries can be sent directly to the contact details above.

2. Personal Data That May Be Collected

When you use the Ocean Guard website or place an order, different information may be collected depending on how you use the site.

This may include your first and last name, mailing address, delivery address, billing address, email address, phone number when necessary for delivery, information about your orders and returns, products purchased, order amounts, communications with customer service, as well as certain technical information such as your IP address, browser type, device used, and certain browsing data.

When you make a payment, the information required to process the payment is handled by the payment service providers used by the store. Ocean Guard does not store your full credit card number or its security code.

The CNIL distinguishes, in particular, between identity data, order data, billing data, payment data, and direct marketing data for e-commerce websites.

3. Why Is Your Data Used?

The processing carried out by Ocean Guard is based on different legal bases provided for by the GDPR.

Each processing activity must be based on a specific legal basis; the main bases used in e-commerce include performance of the contract, legal obligation, legitimate interest, and consent.

4. Data Required for an Order

Certain data is mandatory to fulfill an order.

For example, Ocean Guard must know the Customer's name, delivery address, and contact details necessary to process and deliver the order.

If the Customer refuses to provide the information essential to fulfilling the contract, Ocean Guard will not be able to process the order in question.

However, signing up for a newsletter or accepting advertising cookies remains optional and must not be a condition for making a purchase.

5. Print-on-Demand and Printful

As of the date of this policy, all Ocean Guard products are manufactured using a print-on-demand model.

Ocean Guard therefore does not keep a stock of pre-printed Ocean Guard clothing for fulfilling orders.

When a Customer places an order, certain essential information must be sent to the production partner Printful so that it can manufacture, print, prepare, and ship the ordered product.

This may include the recipient's name, delivery address, contact details necessary for delivery, and information about the ordered product.

This data is only shared to the extent necessary to manufacture and fulfill the order.

Printful states that it acts as a processor for the data of a merchant's customers when fulfilling an order for that merchant.

6. Shopify

The oceanguard.co website runs on the Shopify platform.

Shopify provides, among other things, the technical infrastructure that allows the store to be displayed, orders to be managed, and certain payment and security functions, as well as other features necessary for the website to operate.

In certain situations, Shopify processes personal data on behalf of Ocean Guard, and in other situations provided for by its own services, Shopify may also act under its own processing responsibilities.

Shopify states that store customers should primarily contact the merchant when Shopify acts as a processor for the data processed on its behalf.

7. Other Data Recipients

Personal data may only be shared with service providers involved in the operation of Ocean Guard.

This may include Shopify, Printful, the payment service providers enabled on oceanguard.co, the carriers responsible for delivery, the technical service providers necessary for the operation or security of the website, and administrative, judicial, or tax authorities when required by a legal obligation.

Each service provider must only receive the information necessary to carry out its mission.

Ocean Guard does not share its customers' files with other companies so that they can freely solicit them without complying with the rules applicable to consent and data protection.

8. Data Transfers Outside the European Union

Some technical service providers used by Ocean Guard may process data from countries located outside the European Economic Area.

Shopify states, among other things, that certain European data may be transferred to Canada and other countries, including the United States. Shopify states that it uses appropriate legal mechanisms, including the adequacy decision applicable to Canada or comparable contractual safeguards such as standard contractual clauses when necessary.

Printful also states that certain data may be accessible or transferred between different international entities and mentions, in particular, the use, when necessary, of the European Commission's standard contractual clauses for transfers to third countries.

Ocean Guard ensures that it uses service providers that offer the safeguards required by applicable regulations.

9. Retention Period

Ocean Guard does not retain personal data indefinitely.

Information necessary for processing orders is retained for the duration required for the business relationship and may then be archived when required by law.

Accounting documents, including invoices and corresponding supporting documents, must generally be retained for 10 years from the end of the relevant financial year.

Data used for direct marketing purposes may be retained during the business relationship and then, in principle, for 3 years after its end or after the last relevant contact. For a prospect who has never purchased, the CNIL generally recommends three years from the time of collection or the last contact initiated by the prospect.

Data necessary to comply with an objection to direct marketing may be retained to prevent contacting the person concerned again.

Certain data may be retained longer when justified by a legal obligation, litigation, or the establishment, exercise, or defense of legal rights.

10. Newsletter and Marketing

When Ocean Guard offers a newsletter, users may voluntarily choose to subscribe.

When consent is required, the email address is only used for this purpose after the data subject has agreed.

Customers may withdraw their consent at any time, in particular by using the unsubscribe link in marketing emails or by contacting Ocean Guard.

Direct marketing by email to individuals is subject to specific rules and requires, in particular, prior information and, where required by law, prior consent.

The withdrawal of consent does not affect the lawfulness of the processing carried out before the withdrawal.

11. Cookies and Trackers

The oceanguard.co website may use cookies and similar technologies.

Some are essential for the website to function, in particular for remembering the cart, ensuring the security of the store, maintaining certain preferences, or enabling the ordering process. These cookies may be exempt from consent when they are strictly necessary for the service requested by the user.

Other cookies, in particular those used for personalized advertising, certain statistical tools, or certain social media services, generally require the user's prior consent before being placed.

When these cookies are used, oceanguard.co must allow the user to easily accept or refuse them. Refusing them must be as easy as accepting them. The CNIL generally recommends retaining the choice made for approximately six months before asking the user again.

Consent may be withdrawn at any time via the privacy or cookie settings made available on the store.

12. Data Security

Ocean Guard takes the reasonably necessary measures to protect personal data against unauthorized access, loss, modification, disclosure, or destruction.

The store relies, in particular, on the security measures provided by its technical service providers, such as Shopify and payment service providers.

As no computer system or data transmission over the Internet can guarantee absolute security, Ocean Guard cannot promise that no incident will ever occur.

Shopify also states that it implements measures designed to protect the security and integrity of systems processing personal and financial information.

13. Your Rights

In accordance with the GDPR and applicable French regulations, when the conditions provided for by law are met, you may exercise, in particular, your rights of access to your personal data, rectification, erasure, restriction of processing, objection, portability, as well as your right to withdraw your consent when processing is based on it.

A request may be sent to:

Ocean Guard – Thomas Soulan
3 rue des Remparts
66470 Sainte-Marie-la-Mer, France

or by email:

[EMAIL ADDRESS TO BE CREATED]

To prevent an unauthorized person from obtaining or modifying another Customer's data, Ocean Guard may request additional information to reasonably verify the identity of the requester when necessary.

14. Right to Object to Direct Marketing

You may object at any time to the use of your data for direct marketing purposes when this right applies.

When a marketing communication is sent by email, a simple way to unsubscribe must be provided.

Objection or withdrawal of consent to direct marketing does not prevent Ocean Guard from continuing to use the information strictly necessary to fulfill an order, provide after-sales service, or comply with its legal obligations.

15. Complaints to the CNIL

If you believe that the processing of your personal data does not comply with the regulations, you may first contact Ocean Guard so that your request can be reviewed.

You also have the right to lodge a complaint with the:

Commission nationale de l’informatique et des libertés (CNIL)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

The GDPR expressly provides the right to refer a complaint to a supervisory authority, and the CNIL also allows certain complaints to be filed online.

16. No Significant Automated Decision

Ocean Guard does not directly use personal data to make a decision based solely on automated processing that produces legal effects or similarly significant consequences for the Customer.

Some service providers may nevertheless use automated systems, in particular for security or fraud detection, in accordance with their own policies.

17. Minors

Ocean Guard products may be viewed by different audiences, but orders must be placed by a person with the necessary legal capacity to enter into the contract or with the required authorization from their legal representative.

Ocean Guard does not deliberately seek to collect more data about minors than is necessary for its services.

18. Amendments to the Privacy Policy

Ocean Guard may amend this Privacy Policy, in particular to reflect changes in its services, service providers, or regulations.

The last updated date at the top of this page will allow you to identify the applicable version.

When a significant change concerns the way personal data is used, Ocean Guard will take appropriate measures to inform users when required by regulations.

19. Contact

For any questions about this Privacy Policy or the use of your personal data:

Ocean Guard – Thomas Soulan
3 rue des Remparts
66470 Sainte-Marie-la-Mer, France
Website: oceanguard.co
Email: [EMAIL ADDRESS TO BE CREATED]