Privacy Policy

This Privacy Policy describes how SUPRAW (Sphere Performance brand), as data controller, collects, uses and protects your personal data when you visit or make a purchase on sphereperformance.run, in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and the French Data Protection Act.

1. Data controller

SUPRAW, a limited liability company (SARL) with share capital of €1,500
Registered office: 6 Place Saintes-Scarbes, 31000 Toulouse, France
SIREN: 900 408 006
Contact: sphereperformance.contact@gmail.com

2. Data collected

We collect the following data:

  • Identification data: last name, first name, email address, postal address, phone number.
  • Order data: items ordered, amounts, purchase history.
  • Payment data: processed directly by our secure payment provider (Shopify Payments). SUPRAW does not store any banking data.
  • Browsing data: IP address, browser type, pages visited, visit duration, via cookies and similar technologies.
  • Communication data: messages sent via the contact form or by email.

3. Purposes and legal bases for processing

  • Performance of the contract (Art. 6.1.b GDPR): order processing, delivery management, after-sales service, returns and refunds management.
  • Legal obligation (Art. 6.1.c GDPR): invoicing, retention of accounting data, tax compliance.
  • Legitimate interest (Art. 6.1.f GDPR): fraud prevention, improvement of our site and services, anonymized browsing statistics.
  • Consent (Art. 6.1.a GDPR): sending marketing communications and newsletters (you can withdraw your consent at any time).

4. Retention period

  • Order and invoicing data: 10 years (legal accounting obligation).
  • Customer account data: duration of the commercial relationship + 3 years after the last purchase.
  • Marketing prospecting data: 3 years from the last contact.
  • Browsing cookies: 13 months maximum.

5. Data recipients

Your data may be shared with the following third parties, strictly for the performance of our services:

  • Shopify International Limited (host and e-commerce platform) — Dublin, Ireland. Data hosted in the EU. Shopify Privacy Policy.
  • Carriers (Chronopost, DHL): last name, first name, delivery address, phone number.
  • Payment provider (Shopify Payments / Stripe): transaction data only.
  • Marketing tools: only with your prior consent.

No data is sold to third parties.

6. Transfers outside the European Union

Some data may be transferred to countries outside the EU, in particular to Canada (head office of Shopify Inc.). These transfers are governed by appropriate safeguards (European Commission standard contractual clauses or adequacy decision).

7. Cookies and trackers

Our site uses cookies necessary for the site to function (cart, session), analytics cookies (anonymized visit statistics) and, with your consent, marketing cookies. You can manage your preferences via the cookie banner displayed on your first visit, or at any time from your browser settings.

8. Your rights

In accordance with the GDPR, you have the following rights over your personal data:

  • Right of access: obtain a copy of the data concerning you.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): request the deletion of your data, subject to legal retention obligations.
  • Right to restriction of processing: temporarily suspend the use of your data.
  • Right to portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interest or for marketing purposes.
  • Right to withdraw consent: at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at: sphereperformance.contact@gmail.com, enclosing a copy of your ID if necessary. We respond within 30 days.

You also have the right to lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr.

9. Data security

SUPRAW implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or disclosure: HTTPS connection, restricted access to data, secure hosting with Shopify.

10. Changes to this policy

We reserve the right to amend this policy at any time. The version in force is the one published on this page, with the date of last update shown below.

Last updated: June 2026.