Privacy policy

Last updated: 2 October 2026

At SecondAura, every pair is chosen with care. Your personal data deserves the same attention. This page explains, simply, what information we collect, why we need it and how you stay in control of it.

In short

We only collect the information needed for your order, our exchanges and the proper running of the site.

We do not sell your data. It is only passed on to the service providers needed for your order and, if you agree, to our advertising partners.

Your payments are handled by specialised providers: we never have access to your full card number.

You can view, correct or have your data deleted at any time by writing to contact@secondaura.fr.

Who is responsible for your data

The site secondaura.fr is published by SecondAura, sole proprietorship of Mathias Coste, registered with the Montpellier Trade and Companies Register (RCS). SecondAura is the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR).

For any question about your data, a single address: contact@secondaura.fr.

The data we collect

When	Which data
You place an order	Name, delivery and billing addresses, email address, phone number, order details and chosen payment method.
You create an account	Name, email address, saved addresses and order history.
You sign up for our news	Email address.
You write to us or offer us a pair	Contact details, the content of your message and, for a buy-back offer, the photos and details of the pair.
You browse the site	IP address, type of device and browser, pages viewed, cart contents, cookies.

We do not collect any so-called sensitive data and do not keep any complete bank details.

Why we use it

To process your order: payment, preparation, shipping, tracking, returns and after-sales service. This processing is based on the sales contract.
To reply to you: enquiries, buy-back estimates, follow-up of our exchanges. This processing is based on your request and on our legitimate interest in giving you an answer.
To keep you informed of our new arrivals: only if you have signed up. This processing is based on your consent, which you can withdraw at any time using the link in every email.
To protect the site and payments: fraud prevention and transaction security. This processing is based on our legitimate interest.
To measure our audience and show our ads: only if you have accepted the corresponding cookies.
To meet our legal obligations: accounting, invoicing, guarantees.

Who we share it with

Your data is only passed on to the service providers who need it to do their job:

Shopify, which hosts the shop and manages orders.
Payment providers: Shopify Payments and the payment method you choose (bank card, Apple Pay, Shop Pay, Klarna, among others).
Carriers and our shipping partner, to deliver your parcel and send you its tracking.
TikTok, to measure the effectiveness of our ads, only if you have accepted advertising cookies.
The authorities, when the law requires us to.

Shopify also processes certain data on its own behalf, for example to secure payments, operate Shop Pay and improve its services. Its policy is available at shopify.com.

Where your data is processed

Some of our providers, including Shopify and TikTok, may process data outside the European Union, in particular in Canada and the United States. These transfers are governed by the safeguards provided for by the GDPR: adequacy decisions of the European Commission or standard contractual clauses.

How long we keep it

Data	Retention period
Orders and invoices	10 years, the period required by law for accounting purposes.
Customer account	Until it is deleted at your request, or 3 years after your last activity.
News sign-up	Until you unsubscribe.
Messages and buy-back offers	3 years at most after our last exchange.
Cookies	13 months at most.

Cookies

The site uses cookies that are essential for it to work (cart, login, security), which do not require your consent. Audience measurement and advertising cookies are only placed with your consent, collected by the banner shown on your first visit. You can change your choice at any time.

If you live in the United States, you can opt out of the sharing of your data for advertising purposes from this page.

Your rights

You have the following rights over your data at any time:

to access it and obtain a copy;
to have it corrected if it is inaccurate;
to have it erased;
to ask for its processing to be restricted or to object to it;
to receive it in a reusable format (portability);
to withdraw your consent, for example to receiving our emails;
to decide what happens to your data after your death.

To exercise any of these rights, write to us at contact@secondaura.fr. We reply within one month. Proof of identity may be requested if there is reasonable doubt about your identity.

If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL: www.cnil.fr.

Security

Exchanges with the site are encrypted. Payments are handled by providers certified under the Payment Card Industry Data Security Standard (PCI DSS). Access to your data is limited to the people who need it to process your order or your request.

Minors

The site is not intended for people under 15 and we do not knowingly collect their data. If you think a minor has sent us information, write to us so that we can delete it.