Privacy Policy

Last updated: 27.01.2026

This Privacy Policy explains how Rockchic France (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit or make a purchase from www.rockchic.eu (the “Site”).

The Site is built and hosted on Squarespace, which provides the online e-commerce platform that allows us to sell our products and services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable French data protection laws.

1. Data Controller

Rockchic France
Registered address: 4 rue Marc-Eugène de Goulard, 31510 Luscan (France)
Email: michele@rockchic.eu

2. Personal Data We Collect

a) Information you provide directly

When you place an order, create an account, or contact us, we may collect:

  • Full name

  • Billing and shipping address

  • Email address

  • Phone number

  • Account information (if applicable)

  • Order and transaction details

  • Messages sent via contact forms or email

Payment information is processed securely by Squarespace and its payment providers. We do not store full payment card details.

b) Information collected automatically

When you browse the Site, we may automatically collect:

  • IP address

  • Browser and device information

  • Operating system

  • Pages viewed and interactions

  • Referring URLs

  • Cookies and similar technologies

3. Purpose and Legal Basis for Processing

Your personal data is processed only when we have a lawful basis to do so:

PurposeLegal BasisProcessing orders and paymentsPerformance of a contractAccount managementPerformance of a contractCustomer supportLegitimate interestTransactional emails (order confirmations, shipping updates)Performance of a contractMarketing emails (if opted in)ConsentWebsite analytics and improvementLegitimate interestLegal and accounting complianceLegal obligation

4. Squarespace Platform & Third-Party Services

Our Site is hosted by Squarespace, Inc., which provides us with the online e-commerce platform and related services.

Personal data may be processed by Squarespace and trusted third-party providers, including:

  • Payment processors (e.g. Stripe, PayPal, Apple Pay)

  • Shipping and fulfilment services

  • Analytics tools (e.g. Squarespace Analytics, Google Analytics)

  • Email marketing tools (e.g. Squarespace Email Campaigns, if used)

These providers only receive the data necessary to perform their services and are required to comply with GDPR.

5. Cookies

We use cookies and similar technologies to:

  • Enable core website functionality

  • Remember user preferences

  • Analyse traffic and usage

  • Support marketing features (where applicable)

A cookie consent banner is displayed in accordance with GDPR requirements. You may manage or withdraw your consent at any time via the cookie banner or your browser settings.

For more details, please see our Cookie Policy.

6. International Data Transfers

Squarespace and some third-party service providers may process data outside the European Economic Area (EEA), including in the United States.

When this occurs, appropriate safeguards are applied, such as:

  • European Commission adequacy decisions

  • Standard Contractual Clauses (SCCs)

  • Other lawful mechanisms under GDPR

7. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfil orders and contracts

  • Comply with legal and accounting obligations

  • Resolve disputes and enforce agreements

Retention periods vary depending on the type of data and legal requirements.

8. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

In France, the supervisory authority is CNIL (Commission Nationale de l’Informatique et des Libertés).

Requests can be made by contacting us at michele@rockchic.eu

9. Data Security

We rely on Squarespace’s built-in security measures and implement additional organisational safeguards to protect personal data from unauthorised access, loss, or misuse.

However, no online transmission can be guaranteed to be 100% secure.

10. Children’s Privacy

Our Site is not intended for individuals under the age of 16, and we do not knowingly collect personal data from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact

If you have questions about this Privacy Policy or your personal data, please contact:

Michele Papen
Email: michele@rockchic.eu