Privacy policy

Privacy policy
Last updated : May 5, 2026

At Innport, we place particular importance on protectitng your personal data and respecting your privacy. As part of operating the SHAPE WLB Europe website, we are committed to collecting and processing your data in transparent, secure manner and in compliance with applicable regulations, in particular the General Data Protection Regulation (GDPR).

This privacy policy aims to inform users of the website SHAPE WLB Europe about how their personal data is collected, used, and protected by the company Innport, in connection with the operation of the Site and the marketing of SHAPE brand products in Europe.

1. Identity of the Data Controller

The data controller for personal data collected via the Site is Innport, SAS, société par actions simplifiée, with share capital of 100 000,00€, registered with the Trade and Companies Register under number 537 494 767 00032, whose registered office is located at 11B rue de Berlin, Parc Aquatechnique, 34200 Sète, France, and holding intra-community VAT number FR60537494767.

Innport can be contacted at the following email address: contact@innport.eu

As part of its activities distributing SHAPE brand products in Europe, Innport acts as the data controller for data collected via the Site. Certain data may be transmitted to SHAPE, a company established in Canada, which may act as a recipient or, depending on the processing concerned, as a joint controller.

2. Data Protection Officer

Innport has appointed a Data Protection Officer (DPO), responsible for ensuring compliance with applicable personal data protection regulations. The Data Protection Officer is Mr. Stéphane Parrat. He can be contacted for any questions to the processing of personal data or exercise of users' rights at the following email adress : stephane@innport.eu

3. Personal Data Collected

a) Data provided directly by the user
This data is collected notably when creating an account, placing an order, or contacting us. It includes identification information such as first and last name, contact details such as email address, postal address, and telephone number, as well as any information necessary for order processing and customer relationship management.

b) Payment data
Payments made on the Site are processed by secure payment providers. As such, Innport does not store any banking data.

c) Automatically collected data
When browsing the Site, certain data is collected automatically, such as IP address, device type, browser type, and browsing information, including pages visited and time spent on the Site.

d) Preference and marketing data
When the user has given consent, data relating to their preferences and interactions with commercial communications may be collected in order to provide tailored offers.companies such. as Shopify. In such cases, we ensure that these transfers are governed by appropriate safeguards in accordance with the GDPR.

4. Purpose and Legal Bases of Processing

Personal data is collected and processed to ensure the proper functioning of the Site and the provision of the services offered.

It is used to manage orders, process payments, deliver products, and handle customer relationship management. These processing activities are necessary for the performance of the contract entered into with the user.

Some data is also processed in order to comply with Innport’s legal obligations, particularly in relation to invoicing and accounting.

Innport may also process certain data to prevent fraud, ensure the security of the Site, and improve its performance. These processing activities are based on the company’s legitimate interest.

Where the user has given consent, their data may be used for marketing purposes, including the sending of promotional offers or information relating to the products offered.

5. Data recipients

The personal data collected is intended for Innport’s internal departments and may be shared with service providers involved in the operation of the Site, including hosting providers, secure payment solution providers, logistics providers, and carriers responsible for delivering orders.

It may also be shared with service providers specializing in audience analytics and online advertising, as well as with SHAPE as part of the commercial partnership and product management.

Innport undertakes not to sell users’ personal data.

6. International Transfers

As part of the collaboration with SHAPE, certain personal data may be transferred outside the European Union, in particular to Canada.

These transfers are carried out in accordance with applicable regulations and are subject to appropriate safeguards, including the existence of an adequacy decision by the European Commission for certain Canadian organisations and, where applicable, the implementation of standard contractual clauses ensuring an adequate level of protection for personal data.

7. Retention Period

Personal data is retained for no longer than is necessary for the purposes for which it was collected.

Customer account data is retained for a period of three years from the user’s last activity. Data related to orders and invoicing is retained for a period of ten years, in accordance with legal obligations. Data used for marketing purposes is retained for a period of three years from the last contact. Cookies are stored for a maximum period of thirteen months.

8. Cookies

The Site uses cookies to ensure its proper functioning, measure its audience, and provide users with tailored content and advertising.

During their first visit, users are informed of the use of cookies via a dedicated banner allowing them to accept, refuse, or configure their use. Users may change their cookie preferences at any time via [link to be completed].

9. Your Rights

In accordance with applicable regulations, users have rights over their personal data.

They may access their data, request its rectification or deletion, object to its processing, or request restriction of processing. Users also have the right to data portability and may withdraw their consent at any time where processing is based on consent.

Users may also set out instructions regarding the fate of their data after their death.

These rights may be exercised by contacting Innport at the following address: contact@innport.eu

In the event of any difficulty, users may lodge a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés – CNIL).

10. Data Security

Innport implements appropriate technical and organisational measures to ensure the security, integrity, and confidentiality of personal data. These measures include, in particular, encryption of data exchanges, restricted access limited to authorised personnel only, the use of secure hosting solutions, as well as monitoring of system and access activity.

11. Data Relating to Minors

The Site is not intended for individuals under the age of sixteen, and Innport does not knowingly collect personal data relating to them.

12. Changes to the Policy

This privacy policy may be modified at any time to reflect legal, regulatory, or technical developments. The applicable version is the one published on the Site.

13. Contact

For any questions relating to this privacy policy or the processing of personal data, users may contact Innport by email at the following address: contact@innport.eu

They may also contact Innport by telephone at the following number: +33 (0) 980 749 802, or by post at the following address: 11B rue de Berlin, Parc Aquatechnique, 34200 Sète, France.