Last updated: 28 July 2026

​

Village Crows (commercial name of SARL Photo Rovers) operates this online store and website, together with the related information, content, features, tools, products and services, in order to provide you with a personalised shopping experience (collectively, the “Services”).

​

This Privacy Policy explains how we collect, use, store and disclose your personal data when you access or use the Services, make a purchase or carry out another transaction, or otherwise communicate with us.

If there is any conflict between our Terms of Service and this Privacy Policy concerning the collection, use, storage or disclosure of your personal data, this Privacy Policy will prevail.

​

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood how your personal data is processed. Where your consent is legally required, we will ask you to provide it separately. Your use of the Services does not, by itself, constitute consent to the processing of your personal data.

​

1. Personal data we collect and process

“Personal data” means any information relating to an identified or identifiable individual. It does not include information that has been irreversibly anonymised so that the individual can no longer be identified, directly or indirectly.

​

Depending on how you interact with the Services, we may collect and process the following categories of personal data:

• Contact details, including your name, postal address, billing address, delivery address, telephone number and email address.

• Payment and financial information, including payment card information, bank account details, transaction details, payment method and payment confirmation. Payment information may be collected and processed directly by our payment service providers.

• Account information, including your username, password, security information, preferences and settings.

• Order and transaction information, including the products you view, place in your basket, add to a wish list, purchase, return, exchange or cancel, as well as details of your previous transactions.

• Communications with us, including the information you provide when contacting us or making an enquiry to customer service.

• Device and technical information, including information about your device, browser and network connection, your IP address and other online identifiers.

• Usage information, including information about how and when you access or interact with the Services.

• Information derived from the above data, such as preferences or likely areas of interest, where permitted by applicable law.

 

We ask that you do not send us sensitive personal data unless it is strictly necessary and we have expressly requested it.

​

2. Sources of personal data

We may collect personal data from the following sources:

• Directly from you, including when you create an account, access or use the Services, place an order, contact us or otherwise provide us with your personal data.

• Automatically through the Services, including from your device and through cookies or similar technologies. Where required by law, non-essential cookies and similar technologies will be used only with your prior consent.

• From our service providers, where they provide services on our behalf and collect or process personal data in connection with those services.

• From our business partners or other third parties, where permitted by law and, where required, with your consent.

 

3. Why we process your personal data and our legal bases

Under the General Data Protection Regulation (“GDPR”), we must have a valid legal basis for each use of your personal data. Depending on the circumstances, we rely on the performance of a contract, compliance with a legal obligation, our legitimate interests or your consent.

Providing, personalising and improving the Services

We process your personal data in order to:

• provide the Services and perform our contract with you;

• process payments, orders, deliveries, returns, exchanges and cancellations;

• remember your preferences and the products in which you have shown an interest;

• send you messages relating to your account or orders;

• create, maintain and manage your account;

• enable you to publish reviews;

• provide customer support; and

• maintain and improve the operation, relevance and usability of the Services.

 

These activities are generally necessary to perform our contract with you or to take steps at your request before entering into a contract. Certain service-improvement activities may also be based on our legitimate interest in operating and improving our business, provided that your interests and fundamental rights do not override that interest.

Personalisation and product recommendations

We may use information about your purchases and your interactions with the Services to personalise your shopping experience and recommend relevant products.

 

Depending on the technologies used and the effect of the personalisation, this processing will be based on our legitimate interests or, where required by law, your consent.

Marketing and advertising

We may use your contact details to send you promotional communications by email, SMS or post.

 

Electronic marketing will be sent only where permitted by applicable law. Where consent is required, you may withdraw it at any time. In certain circumstances permitted by French law, we may send information about products or services similar to those you have previously purchased, subject to your right to object at any time.

​

We may also use cookies and similar technologies to measure advertising performance or display personalised advertising. Where required, these technologies will be activated only after you have given your consent through our cookie-management tool.

Security and fraud prevention

We process personal data to authenticate accounts, provide secure payment and shopping experiences, detect and investigate fraudulent, illegal, harmful or malicious activity, protect our users and secure the Services.

​

This processing is based on our legitimate interests in protecting our business, customers and Services and, where applicable, on compliance with our legal obligations.

​

If you create an account, you are responsible for keeping your login credentials confidential. You should not share your username, password or other access credentials with anyone.

Communications and customer service

We process your personal data to answer your enquiries, provide customer service and manage our commercial relationship with you.

This processing may be necessary to perform our contract with you or may be based on our legitimate interest in providing effective customer service.

Legal and regulatory obligations

We may process personal data to:

• comply with applicable laws and regulations;

• meet accounting, tax, consumer-protection and record-keeping obligations;

• respond to legally valid requests from courts, law-enforcement authorities or public bodies;

• establish, exercise or defend legal claims; and

• enforce our terms and policies or investigate suspected breaches.

 

This processing is based on compliance with our legal obligations or our legitimate interest in protecting our rights.

 

4. Who receives your personal data

We disclose personal data only where necessary and in accordance with applicable law. Recipients may include:

• providers that host, maintain or support our website and IT systems;

• payment processors and fraud-prevention providers;

• delivery, logistics and fulfilment providers;

• customer-service providers;

• analytics, advertising and marketing providers, subject to your consent where required;

• professional advisers, including accountants, auditors, insurers and legal advisers;

• companies affiliated with us, where this is necessary for legitimate internal business purposes;

• public authorities, courts, regulators or law-enforcement bodies where disclosure is required or permitted by law; and

• prospective purchasers, investors or advisers in connection with a proposed merger, restructuring, financing, sale of assets or similar business transaction, subject to appropriate confidentiality safeguards.

 

We may also disclose personal data where you instruct us to do so or expressly consent to the disclosure, for example when using a third-party social-media feature or login integration.

​

Service providers processing personal data on our behalf are required to act only on our documented instructions, protect the data and comply with applicable data-protection law.

​

5. Third-party websites and links

The Services may contain links to websites or online platforms operated by third parties. If you follow a link to a website that is not affiliated with or controlled by us, we recommend that you review its privacy policy, security information and terms of use.

We do not control and are not responsible for the privacy, security, accuracy or reliability of third-party websites or platforms.

Information that you publish in public or semi-public areas, including on third-party social-media platforms, may be visible and used by other users or third parties. The inclusion of a link does not in itself imply that we endorse the relevant platform, its content, its owner or its operator.

​

6. Children’s data

The Services are not intended for children under the age of 15. We do not knowingly collect personal data directly from children under 15 on the basis of their consent. In France, where consent is the applicable legal basis for an online service offered directly to a child under 15, consent must be provided jointly by the child and the holder of parental responsibility, in accordance with applicable law.

If you are a parent or legal guardian and believe that a child has provided us with personal data unlawfully, please contact us using the details below so that we can take appropriate action, including deleting the data where required.

 

7. Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

​

Nevertheless, no security system or method of transmission over the Internet is completely secure. You should therefore avoid sending sensitive or confidential information through unsecured channels.

​

If a personal-data breach occurs, we will comply with the notification and communication requirements imposed by applicable data-protection law.

​

8. How long we retain personal data

We retain personal data only for as long as necessary for the purposes for which it was collected, including to:

• manage your account and provide the Services;

• fulfil orders and handle returns, exchanges or complaints;

• comply with accounting, tax and other legal obligations;

• establish, exercise or defend legal claims;

• prevent fraud and protect the Services; and

• manage marketing preferences.

 

The applicable retention period depends on the nature of the data, the relevant purpose and any statutory limitation or mandatory retention period.

 

When personal data is no longer required, it will be deleted or irreversibly anonymised, unless continued retention is required or permitted by law.

 

9. Your rights

Subject to the conditions and exceptions provided by applicable law, you have the following rights regarding your personal data:

• Right of access: you may request confirmation as to whether we process your personal data and obtain a copy of that data, together with information about the processing.

• Right to rectification: you may ask us to correct inaccurate personal data or complete incomplete data.

• Right to erasure: you may ask us to delete your personal data in the circumstances provided by law.

• Right to restriction: you may ask us to restrict the processing of your personal data in certain circumstances.

• Right to data portability: where processing is based on your consent or a contract and is carried out by automated means, you may receive the personal data you provided to us in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller.

• Right to object: you may object, on grounds relating to your particular situation, to processing based on our legitimate interests. We will then stop the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or unless the processing is required for the establishment, exercise or defence of legal claims.

• Absolute right to object to direct marketing: you may object at any time to the use of your personal data for direct-marketing purposes, including related profiling.

• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

• Rights relating to automated decision-making: where applicable, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, except where permitted by law and subject to appropriate safeguards.

• Right to give instructions concerning your data after your death: where provided by French law, you may give general or specific instructions concerning the retention, deletion and disclosure of your personal data after your death.

 

You may exercise these rights through any tools made available in the Services or by contacting us using the details set out below.

We may request information reasonably necessary to verify your identity. We will not request excessive identification documents where your identity can be verified by less intrusive means.

​

You may authorise another person to act on your behalf, subject to appropriate evidence of that authority. We will respond within the periods prescribed by applicable law, normally within one month of receiving a complete request. This period may be extended by up to two additional months where permitted by the GDPR, taking into account the complexity and number of requests. If an extension is required, we will inform you.

​

Exercising your rights is normally free of charge. However, where a request is manifestly unfounded or excessive, particularly because of its repetitive nature, we may charge a reasonable fee or refuse to act, as permitted by law.

​

10. Marketing preferences

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in each email or by contacting us.

If you unsubscribe from marketing communications, we may continue to send you non-promotional messages that are necessary to manage your account, orders, transactions or requests.

​

Withdrawing your consent to advertising cookies through our cookie-management tool will not automatically unsubscribe you from email marketing, and unsubscribing from emails will not automatically change your cookie preferences.

​

11. Complaints

If you have concerns about how we process your personal data, please contact us first using the details below so that we can investigate your complaint.

​

You also have the right to lodge a complaint with the French data-protection authority:

​

Commission nationale de l’informatique et des libertés (CNIL)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
Website: https://www.cnil.fr/

 

If you usually reside or work in another country within the European Economic Area, you may also contact the data-protection supervisory authority in that country.

​

12. International transfers

Some of our service providers or other recipients may be located outside the European Economic Area (“EEA”), or may process personal data from countries outside the EEA.

​

Where personal data is transferred outside the EEA, we ensure that the transfer is based on an appropriate legal mechanism, such as:

• an adequacy decision adopted by the European Commission;

• the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required; or

• another transfer mechanism permitted by applicable data-protection law.

 

You may contact us for further information about the safeguards applicable to a particular transfer and, where legally available, request a copy of the relevant safeguards.

 

13. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, the Services, or applicable operational, legal or regulatory requirements.

​

We will publish the revised Privacy Policy on this website and update the “Last updated” date. Where required by law, we will also provide you with additional notice or request your consent.

​

14. Contact and identity of the controller

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise any of your rights, you may contact us using the following details:

Photo Rovers
1 Rue Saint-Étienne
30700 Uzès
France

Telephone: +33 6 52 93 27 29
Email: info@photorovers.fr

 

For the purposes of applicable data-protection law, Photo Rovers is the controller of your personal data.