Privacy Statement


When you make a purchase from Poncho-Boutique, as part of our buying and selling process, we collect personal information that you provide to us, such as your name, address, e-mail address and telephone number.

When you browse Poncho-Boutique, we also automatically receive the Internet Protocol (IP) address of your computer, which allows us to obtain more details about the browser and operating system you are using.

As part of email marketing, with your permission, we may send you emails about Poncho-Boutique about new products and other updates or about your unfinished orders.


How do we obtain your consent?

When you provide us with your personal information to complete a transaction, verify your credit card, place an order, schedule a delivery or return a purchase, we will assume that you consent to our collection of your information.

If we ask you to provide us with your personal information for any other reason, such as marketing purposes, we will ask you directly for your express consent, or we will give you the opportunity to decline.

How can you withdraw your consent?

If after you have given us your consent, you change your mind and no longer consent to us contacting you, collecting your information, you may notify us by contacting us at or by registered mail at 340 rue fra angelico, 34000, Montpellier, France


We may disclose your personal information only if we are required to do so by law or if you violate our Terms and Conditions.


Poncho-Boutique is hosted on Shopify Inc. They provide us with the online commerce platform that allows us to sell you Poncho-Boutique services and products.

Your data is stored in the Shopify storage system and databases. In the general Shopify application, your data is stored on a secure server protected by a firewall.

For payment, if you make your purchase through a direct payment gateway, Shopify will store your credit card information. This information is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction information is retained for as long as necessary to complete your order. Once your order is finalized, your purchase transaction information is deleted. Therefore, we do not have direct access to the information you used to complete your order. This information passes through Shopify and the payment processors.

Indeed, all direct payment gateways are PCI-DSS compliant. This Payment Card Industry Data Security Standard (PCI-DSS) is established by the five major card networks (Visa, MasterCard, American Express, Discover Card and JCB). These standards ensure the secure processing of credit card data during your purchases on Poncho-Boutique and by its service providers.

For more information, please see the Shopify Terms of Service here.


In general, the services provided by third party providers that we use will only collect, use and disclose your information to the extent necessary to perform the services they provide to us such as payment processing.

However, some of these providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we are required to provide to them for your purchase transactions on Poncho-Boutique.

With respect to these third party providers, we recommend that you read their privacy policies carefully so that you can understand how they will treat your personal information. You can find Visa's here, American Express' here, MasterCard's here, JCB's here and Stripe's here.

Keep in mind that some of these third party providers may be located or have facilities located in a different jurisdiction than you or us. Therefore, if you decide to proceed with a transaction that requires the services of a third party provider, your information may be governed by the laws of the jurisdiction in which that provider is located or the jurisdiction in which its facilities are located, for example.

For example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, the information belonging to you that was used to complete the transaction could be disclosed under U.S. law, such as the Patriot Act.

Once you leave the Poncho-Boutique site or are redirected to a third party website or application for your payment, you are no longer governed by this Privacy Policy or the Poncho-Boutique Terms and Conditions of Sale and Use.


You may have to leave Poncho-Boutique by clicking on certain links on our site. We do not assume any responsibility for the privacy practices of these other sites and recommend that you carefully read their privacy policies.


To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not lost, misappropriated, accessed, disclosed, altered or destroyed inappropriately.

In the event that you provide us with your credit card information, it will be encrypted through the use of SSL security protocol and stored with AES-256 encryption. This means that no human being will have access to the full card number. While no method of transmission over the Internet or electronic storage is 100% secure, we follow all the requirements of the PCI-DSS and implement additional standards generally accepted by industry.


Below is a list of the cookies we use. We have listed them below so that you can choose whether or not you want to allow them.

session_id, is a unique session identifier that allows Shopify to store information about your session (referrer, landing page, etc.).

_shopify_visit, saves for 30 minutes the cookies since the last visit. After that, no data is saved. This cookie file is used by the Poncho-Boutique provider's internal statistics tracking system to record the number of visits.

_shopify_uniq, this file expires at midnight the next day based on the visitor's location. This cookie calculates the number of visits to a store per unique customer.

cart, this unique identifier persists for 2 weeks and stores your shopping cart information.

_secure_session_id, is a unique session identifier.

storefront_digest, is also a unique identifier. It is undefined if the shop has a password. It is used to know if the current visitor has access or not.


By using Poncho-Boutique, you represent that you are at least the age of majority in your country, state or province of residence, and that you have given us your consent to allow any minor dependent of yours to use Poncho-Boutique.


We reserve the right to change this privacy policy at any time, so please review it regularly. Changes and clarifications will take effect immediately upon posting on the website. If we make any changes to the content of this policy, we will notify you here that it has been updated, so that you will know what information we collect, how we use it, and under what circumstances, if any, we disclose it.

If Poncho-Boutique is acquired by or merged with another company, your information may be transferred to the new owners so that we can continue to sell you products.


By entering your phone number at checkout and initiating a purchase and subscribing via our marketing sign-up list, you agree that we may send you SMS notifications (for your order including abandoned cart reminders) or SMS marketing offers.

The number of marketing text messages will not exceed 30 per month. You may unsubscribe from any further text messages by replying with the word STOP. Sending text messages or using automations requires that you provide phone numbers or names of recipients. This data will be stored and used to communicate the analysis and results of the campaign, including the delivery status of the messages, the sending status and, in some cases, whether the purchase resulted in a sale to Poncho-Boutique.

If you choose to use our link shortener in text messages, we will collect this information to determine whether or not the link was clicked and use it to display the results in analytics. Any other third party services you may choose to use outside the scope of, our text message operator, the system we use to send the SMS messages (third party link shortener, GA tracking, etc) you will be referred to their specific third party policies that you must agree to.

When sending text messages, we will pass the data to our text message operator to effect the sending of the messages. Information is only shared with our operator when initiating a marketing and messaging campaign. If recipients no longer wish to receive messages, they must reply to the message with STOP or contact so that we can successfully unsubscribe you.


If you would like to: access, correct, amend or delete any personal information we have about you, file a complaint, or if you simply want more information, contact our Privacy Standards Officer at or by mail.

[Re: Privacy Policy Officer]

340 rue fra angelico, 34000, Montpellier, France