Privacy policy for the Shopopop website, app and platform
Privacy policy for the Shopopop website, application and platform.
In accordance with the provisions of Articles 6-III and 19 of Law No. 2004-575 of 21 June 2004 on Confidence in the Digital Economy (L.C.E.N.), users and visitors to the website www.shopopop.com are hereby informed of this privacy policy.
The website www.shopopop.com is published by AGILINNOV’, a simplified joint-stock company (SAS) with a share capital of 188,859.00 euros, whose registered office is situated at 1 ter Mail Pablo Picasso, 44000 Nantes, registered with the Trade and Companies Register (RCS) under number 813 952 082, intra-Community VAT number FR83813952082, email: [email protected].
Legal representative: Johan Ricaut
This Policy applies to the website www.shopopop.com (hereinafter ‘the Website’), the mobile app (Android and iOS) and the pro.shopopop.com platform, including its professional interface for partner retailers (hereinafter collectively ‘the Services’). It applies to all our users: individual Users and Members (Recipients and Deliverers) as well as business partners (merchants).
Data Controller
The Data Controller for the processing carried out by Shopopop is AGILINNOV'.
Contact details:
Name: AGILINNOV'
Address: 1 ter Mail Pablo Picasso, 44000, Nantes
Email address: [email protected]
SIREN: 813952082
Contact details of the Data Protection Officer (DPO)
If you have any questions about the protection of personal data, you can contact our Data Protection Officer (DPO):
Mon Expert RGPD, 82 Bd Haussmann, 75008, PARIS
Definitions
"USER": Refers to any Internet user who browses the Website and/or the Application, including all Members.
"MEMBER": Refers to any natural person of legal age who is registered on the Application, including all Deliverers and Recipients.
"DELIVERER": a Member who undertakes to handle the transport of the Recipient’s Order.
"RECIPIENT”: Refers to a Member who requests delivery of an order via the Shopopop service.
"PARTNER": the business using the pro.shopopop.com platform
Data collection and the Data Protection Act
AGILINNOV' respects the privacy rights of its Users and recognises the importance of protecting their personal data. It is committed to complying with the new regulations arising from the European General Data Protection Regulation.
The Website does not require Users to provide any personal data simply to browse the Website.
AGILINNOV' collects the personal data provided by Members, including:
- IDENTIFYING INFORMATION Last name, first name(s), postal address, telephone number, email address, username, password, etc.
- BANKING INFORMATION Bank details, SEPA mandates, etc.
- USAGE INFORMATION Services requested, visit date and time, names of files consulted, Internet browser and operating system used, IP address of the device, volume of data transferred, mobile platform, technical identifier(s), error reports and performance data, geographical information for location-based services, where applicable, etc.
Purposes
The collection of the aforementioned data serves the following purposes, each of which is based on a legal basis:
Legal bases
The data is collected on the basis of your consent, Shopopop's legitimate interests, and compliance with our legal obligations.
The Website may use "cookies" to process statistics and traffic information, facilitate browsing and improve its services for Users' convenience: security cookies, session cookies, tracking cookies, etc.
Users are free to accept or reject the Website's cookies by modifying the settings of their Internet browser.
The User may disable cookies or set their browser to alert them when cookies are about to be stored. However, if cookies are disabled, the User may not be able to use all of the Website's features.
Mandatory or optional nature of data collection and consequences of failure to provide data
The provision of specific personal data is mandatory in order to use certain services. When data is mandatory, the field is marked with an asterisk.
The data required to conclude a contract with you or provide a service you have requested (e.g. email address for contact purposes) is mandatory. If this data is not provided, we will not be able to conclude the contract or provide the service requested.
Optional data is data that you may choose to provide in order to improve your user experience (e.g. cookies). Failure to provide this data will not affect the conclusion of a contract or the provision of a service, but may limit the personalisation of our offer.
Recipients of personal data
The data thus collected and processed in a fair and lawful manner for specific, explicit and legitimate purposes, without being further processed in a manner incompatible with these purposes, is strictly intended for AGILINNOV'.
The recipients of personal data are the authorised staff of the departments responsible for handling customer relations and prospecting, the marketing and sales departments, the administrative departments, the logistics and IT departments and their line managers, as well as any subcontractors and partners, in compliance with French regulations.
The last name, first name, address and telephone number of the Recipient Member can be accessed by the Deliverer Member to allow the latter to contact the Recipient Member in order to carry out the delivery.
In return, the last name, first name and telephone number of the Deliverer Member can be accessed by the Recipient Member to allow the latter to contact the Deliverer Member with regard to the delivery.
AGILINNOV' also reserves the right to disclose personal data as it deems necessary for the following purposes:
- to comply with any applicable law, regulation, legal procedure or other legal obligation
- to detect, investigate and prevent security issues, fraud or technical problems
- to protect AGILINNOV's rights, property or security
- to carry out a general transaction, such as a transfer of assets or an acquisition by way of a merger with another company
Personal data processed by AGILINNOV' in its capacity as data controller may only be processed by a subcontractor or contractual partner of AGILINNOV' on its instructions.
In this respect, AGILINNOV' must ensure that any subcontractors and partners provide the necessary guarantees for the protection of User data.
Data transfers
Personal data may be stored and processed in any country where AGILINNOV', its suppliers, partners or subcontractors manage servers.
In the event that data could be transferred outside the European Economic Area, AGILINNOV' shall take all the necessary measures to ensure that the data benefits from appropriate guarantees (including the Privacy Shield or Standard Contractual Clauses approved by the European Commission).
In accordance with the law, AGILINNOV' is authorised to transfer data to the competent authorities in the event of criminal proceedings.
Retention period
Customer data is retained by AGILINNOV' for the necessary period to manage the commercial relationship. However, data required for proof of a right or contract may be archived for a longer period, in accordance with the provisions of the French Commercial Code and Consumer Code, i.e. 10 years.
Customer data is retained by AGILINNOV for commercial prospecting purposes for 3 years from the end of the commercial relationship.
With regard to trackers: cookies and their lifespan do not exceed 13 months. Proof of your consent is retained for as long as necessary to substantiate it.
Data security
AGILINNOV' implements organisational, technical, software and physical digital security measures to protect personal data against alteration, destruction and unauthorised access. However, it should be noted that the Internet is not a completely secure environment, and the Website cannot guarantee the security of the transmission or storage of information on the Internet.
Cookie management policy
Cookies are used when you browse our Website.
A cookie is a piece of information stored on your computer via a browser. Cookies enable the sender to send information back to the original website while the cookie is being stored or is valid.
Only the sender of a cookie can read or modify the information it contains.
We use cookies to analyse the number of visits to and use of the Website, to adapt the Website's features, and to carry out statistical analyses, in particular to measure the Website's audience.
Tracking pixels in our emails
Our emails contain ‘tracking pixels’: small, invisible images which, when loaded, allow us to know if and when you open our messages and to obtain information about the device you are using. These operations fall under Article 82 of the French Data Protection Act.
The rules governing these pixels apply regardless of the type of email: a pixel that requires your consent remains subject to that consent even when included in an email that, in itself, does not require consent.
In our transactional emails (for private individuals and businesses)
These emails (confirmations, delivery tracking, account notifications, etc.) contain pixels used to:
- measure and optimise our communications: to find out if and when you open our emails and on what type of device, in order to personalise the content, adjust the frequency of sending and the channel (email, SMS, notification);
- measure individual open rates for deliverability purposes, where such measurement goes beyond what is strictly necessary for the sole purpose of managing our mailing lists.
In our marketing and prospecting emails (to individuals and businesses)
In addition to the purposes set out above, these emails contain web beacons used to:
- tailor the content we offer you on our own channels (email, push notifications, the Shopopop app) according to your interests and your interactions with our emails. This information is not passed on to third parties and is not used for targeted advertising on third-party websites or apps.
Legal basis, objection and withdrawal
All of these purposes are based on your consent (Article 82 of the French Data Protection Act).
You may withdraw your consent, or object to tracking via a tracking pixel, at any time, via the link provided at the bottom of each of our emails or by managing your settings in your communication preferences centre. Your choice applies to the email address in question and to all devices on which you access it. Refusing or withdrawing your consent has no impact on the receipt of our emails or on access to our services.
Data concerned: email address, pixel ID, information and timestamp relating to opening the email, information about the device.
Users' rights with regard to their data
Users are invited to update any data concerning them that is inaccurate, incomplete or obsolete.
Your data rights
In accordance with the regulations, you have the following rights regarding your personal data: the right of access, the right to rectification, the right to erasure (the right to be forgotten), the right to restrict processing, the right to object, the right to data portability, and the right to withdraw your consent at any time where processing is based on consent.
With regard to direct marketing communications, you may withdraw your consent at any time to stop receiving them; this right is reiterated in each of our messages.
How to exercise your rights
To exercise your rights, Shopopop asks that you complete this form :
Complaints to the CNIL (French Data Protection Authority)
If you feel, after contacting us, that your rights with regard to your data are not being respected, you may make a complaint to the CNIL.
Data that AGILINNOV' requires for the purpose for which it was collected, that is necessary to comply with a legal obligation and/or to establish, exercise or defend rights in court may not be deleted.
Last updated: 9 July 2026