Privacy Policy for Sole and Santé

Who We Are

Sole and Santé is a luxury shoe brand operating the website www.soleandsante.com. We are committed to protecting your privacy and ensuring the security of your personal information.

Brand Name: Sole and Santé.
Email: soleandsante@gmail.com
Phone: +66886423515

What Personal Data We Collect and Why We Collect It

Customer Account Information

When you create an account on our website, we collect:

Name
Email address
Password (stored in encrypted format)
Account preferences
Purchase history
Shipping addresses
Billing information

This information is collected to provide you with our services, process your orders, communicate with you about your purchases, and improve your shopping experience. The legal basis for this collection is the performance of our contract with you.

Order Processing Data

When you place an order, we collect:

Payment information (credit card details are processed securely by our payment processor and not stored on our servers)
Billing address
Shipping address
Purchase details
Phone number for delivery purposes

This information is necessary to fulfill your orders, process payments, and arrange shipping. The legal basis for this collection is the performance of our contract with you.

Marketing Communication Data

If you subscribe to our newsletter or promotional communications:

Email address
Name
Shopping preferences (if provided)

This information is collected based on your consent to receive marketing communications. You can withdraw this consent at any time.

Comments

If you leave comments on our website:

Name
Email address
Website (if provided)
The comment content itself

Comments and their metadata are retained indefinitely to recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact Forms

When you submit information through our contact forms:

Name
Email address
Message content
Any other information you choose to provide

We retain this information for 12 months for customer service purposes and to respond to your inquiries. We do not use the information submitted through contact forms for marketing purposes without your explicit consent.

Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us provide and improve our services.

We use the following types of cookies:

Essential cookies: These are necessary for the website to function properly and cannot be turned off in our systems.

Performance cookies: These help us understand how visitors interact with our website by collecting and reporting information anonymously.

Functionality cookies: These allow our website to remember choices you make and provide enhanced, personalized features.

Targeting cookies: These cookies may be set through our site by our advertising partners to build a profile of your interests and show you relevant advertisements on other sites.

By default, when you visit our site, the following cookies are set:

WordPress login cookies (if you log in)
WordPress comment cookies (if you leave a comment)
Shopping cart and session cookies
User preference cookies

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

Analytics

We use Google Analytics to help us understand how our customers use the site. Google Analytics uses cookies to track your interaction with our website.

You can opt out of Google Analytics tracking by using the Google Analytics Opt-Out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout

For more information about Google Analytics’ privacy practices, please visit: https://policies.google.com/privacy

Who We Share Your Data With

Payment Processors

We share payment data with our payment processing partners [list payment processors, e.g., Stripe, PayPal]. These companies have their own privacy policies that govern how they use your information.

Shipping Partners

We share shipping information with our logistics and delivery partners [list shipping partners, e.g., DHL, FedEx] to facilitate the delivery of your orders.

Marketing Services

If you have opted in to marketing communications, we may share your email address and name with email marketing service providers [e.g., Mailchimp, Klaviyo] who help us send newsletters and promotional content.

IT Service Providers

We share data with IT service providers who help us operate, secure, and maintain our website and related systems.

All third-party service providers are required to respect the security of your personal data and to treat it in accordance with applicable laws. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

How Long We Retain Your Data

We retain different types of personal data for different periods:

Account information: For as long as you maintain an active account with us, plus 3 years after account closure
Order information: 10 years (to comply with tax and accounting requirements)
Contact form submissions: 1 year
Marketing data: Until you unsubscribe or withdraw consent
Comment data: Indefinitely, unless you request deletion
Analytics data: 26 months

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

What Rights You Have Over Your Data

Depending on your location, you may have certain rights regarding your personal data:

Right to access: You can request copies of your personal data.
Right to rectification: You can request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to erasure: You can request that we erase your personal data (subject to certain conditions).
Right to restrict processing: You can request that we restrict the processing of your personal data.
Right to data portability: You can request that we transfer your data to another organization or directly to you.
Right to object: You can object to our processing of your personal data.
Rights related to automated decision making and profiling: You have rights related to how we use your data for automated decisions.

If you make such a request, we may need to verify your identity before responding. We will try to respond to all legitimate requests within one month. If your request is particularly complex, we may need additional time, in which case we will notify you.

To exercise any of these rights, please contact us at soleandsante@gmail.com

Where Your Data Is Sent

Sole and Santé operates globally, which means your information may be transferred to, stored, or processed in countries outside your country of residence, including outside the European Economic Area (EEA).

When we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place:

We use standard contractual clauses approved by the European Commission
We transfer data only to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission
Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield certification or similar arrangements

How We Protect Your Data

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. These include:

Encryption of sensitive data
Secure HTTPS protocol across our entire website
Regular security assessments
Employee training on data protection
Access controls and authentication systems
Regular backup procedures
Payment card industry (PCI) compliance for all payment processing

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

What Data Breach Procedures We Have in Place

In the event of a data breach, we will:

Identify the breach and its severity
Contain the breach and assess risks
Notify affected individuals if required (within 72 hours when legally required)
Notify relevant authorities if necessary
Investigate the cause and implement preventative measures
Document the breach and our response

What Third Parties We Receive Data From

We may receive information about you from:

Social media platforms if you interact with our brand on social media or use social login
Advertising partners for marketing purposes
Analytics providers
Payment service providers
Shipping and logistics partners

What Automated Decision Making and/or Profiling We Do with User Data

We may use your personal data for automated decision-making processes, including:

Personalized product recommendations based on your browsing and purchase history
Customized marketing communications based on your preferences and behaviors
Fraud detection and prevention for payment processing

You have the right to request human intervention in any automated decision-making process that significantly affects you. To exercise this right, please contact us using the details provided.

Contact Information

If you have any questions about this Privacy Policy, your personal data, or data protection on our website, please contact:

Email: soleandsante@gmail.com
Phone: +66886423515

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Last Updated: April 27, 2025