Politique de confidentialité
PEMBREE Privacy Policy
Effective date and last updated: 22 July 2026
This Privacy Policy explains how personal data is handled when you use pembree.com, create an account, make a purchase, contact PEMBREE or subscribe to our communications. It should be read together with the Cookie Settings displayed on the website.
1. Controller and contact details
PEMBREE is operated by LOOK Cycle International SAS (LOOK Cycle International, we, us or our), a French simplified joint-stock company with share capital of EUR 2,515,440, registered with the Nevers Trade and Companies Register under number 419 513 262, whose registered office is at 27 rue du Docteur Leveille, 58000 Nevers, France. LOOK Cycle International is the controller of the personal data covered by this Policy.
For privacy questions or to exercise your rights, email hello@pembree.com, call +33 7 63 58 87 44, or write to the address above. If a data protection officer or an EEA or UK representative is appointed for this processing, the relevant contact details will be published in this Policy.
2. Personal data we collect
Depending on how you use PEMBREE, we may collect the following categories of personal data:
- Identity and contact data, including your name, email address, telephone number, billing address and delivery address.
- Account, order and service data, including account credentials, order history, basket activity, product preferences, returns, warranties, pre-order activity and correspondence with us.
- Payment and fraud-prevention data, including payment method, payment status, transaction reference and fraud signals. Payment providers process card and wallet details; we do not intentionally store full card numbers or card security codes.
- Technical and usage data, including IP address, browser and device information, online identifiers, pages viewed, interactions, referral information, country or locale selection and cookie choices.
- Marketing data, including newsletter preferences, consent and objection records, and interaction with marketing communications where the relevant tracking is enabled.
- Dealer-locator data, including the location or search information you enter if you choose to use that function.
We receive data directly from you, automatically through the website and, where relevant, from payment, delivery, fraud-prevention, customer-support and technology providers that assist us in operating PEMBREE.
3. Why we use personal data and the legal bases
| Purpose | Data used | Legal basis |
|---|---|---|
| Process payment; fulfil and deliver orders; manage returns, warranties, accounts, pre-orders and customer service | Contact, order, delivery, account and payment-status data | Performance of a contract with you or steps taken at your request before entering into a contract |
| Keep accounting, tax and transaction records and comply with other legal obligations | Order, invoice and payment-status data | Legal obligation |
| Protect the website and customers, prevent fraud, resolve disputes, maintain service reliability and defend legal claims | Technical, account, order and support data | Legitimate interests in running a secure and reliable business and protecting our legal rights |
| Send email marketing and manage newsletter preferences | Contact data and marketing preferences | Consent, or where permitted by law, legitimate interests or a customer soft opt-in for similar products and services |
| Measure website use, conduct interaction analytics, personalise website content or show targeted marketing | Technical, usage and online-identifier data | Consent for non-essential cookies and similar technologies |
| Develop, administer, secure and improve the website, and configure analytics and digital-advertising services | Account, customer, order, technical, analytics and marketing-preference data, only as necessary | Legitimate interests in maintaining and improving the website; consent where optional cookies or marketing technologies are used |
| Provide a requested language, country or market feature, checkout or dealer-locator feature | Locale, technical data and data entered into the requested feature | Performance of a requested service or legitimate interests; consent where non-essential technology is used |
| Respond to privacy requests and maintain compliance records | Identity, contact and request data | Legal obligation and legitimate interests in demonstrating compliance |
You do not have to provide personal data to browse most of the website. However, we need information marked as required at checkout or when creating an account to process an order, provide the relevant service or meet our legal obligations. If it is not provided, we may be unable to do so.
4. Marketing and automated decisions
We send direct marketing only where we have a valid legal basis. Where consent is required, it is optional and you can withdraw it at any time. Every marketing email includes an unsubscribe link, and you may object to direct marketing at any time by contacting us. We may continue to send essential transactional messages about your account or order.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. A payment or credit provider selected at checkout may carry out its own fraud, credit or eligibility checks under its own privacy notice.
5. Cookies, similar technologies and current service providers
We use essential cookies and similar technologies to operate the store, including checkout, security, basket and consent functions. We request your consent before optional analytics, personalisation or marketing technologies are loaded or used. You can accept, reject or change non-essential choices through the cookie banner and Cookie Settings. Rejecting optional technologies does not prevent you from buying from us.
Cookie Settings identify the current provider, purpose, category and technology duration. The following table lists the services currently used or made available through PEMBREE. We review this list whenever the website or its integrations change.
| Provider or service | Processing and data involved | Category and condition for use |
|---|---|---|
| Shopify and relevant Shopify group companies | Store hosting, checkout, customer accounts, security, consent records, Shop Pay and commerce services; account, order, device and technical data | Essential where necessary for the store. Other Shopify features are used only under the applicable consent choice. |
| Microsoft Clarity | Website-use analytics and, if enabled, interaction or session analysis; device, online identifiers and usage data | Analytics. Used only after opt-in consent. |
| Klaviyo | Newsletter delivery, marketing preferences, onsite forms and, if enabled, onsite analytics or personalisation; contact, order and usage data | Marketing and/or analytics. Used only after the relevant opt-in consent, except necessary service emails. |
| Orbe | Country or market and geolocation functionality; IP-derived country or locale and technical data | Functional where necessary for the requested feature. Consent is obtained if non-essential technology is used. |
| Progus Commerce dealer locator and any embedded map provider | Dealer search and map display; information entered in the locator, device and technical data | Loaded when you choose to use the locator, and only after functional consent where the embed uses non-essential technology. |
| Zendesk | Customer-support tickets and help-centre communications; contact, order and message data | Used when you contact support or access the help centre. |
| Essential Pre-order and Presale service | Pre-order availability and order-related data | Necessary to provide a pre-order that you request. |
We retain a record of consent and refusal choices for no longer than six months unless a shorter period is appropriate. Individual cookie lifetimes and the retention of data derived from them are shown in Cookie Settings and reviewed regularly.
6. Who we share personal data with
We share personal data only when necessary, with the following categories of recipient:
- Authorised personnel within PEMBREE and the LOOK Cycle group, where access is necessary for the purposes described in this Policy.
- Store, checkout and account providers, including Shopify and relevant Shopify group companies.
- Payment providers, including Shopify Payments or Shop Pay, PayPal, Klarna where it is offered at checkout, and relevant wallet or card-payment providers. These providers may act as independent controllers for their payment services.
- Delivery, fulfilment and returns providers, including carriers and logistics providers used for your order.
- Website development, website administration, analytics implementation and digital-advertising support: Lifedrive (lifedrive.co.uk), United Kingdom. Lifedrive may access account, customer, order, technical, analytics and marketing-preference data solely to provide these services to PEMBREE on our documented instructions. Lifedrive is required to keep that data confidential and secure, and not use it for its own purposes.
- Customer-support, technical, translation, country or market, dealer-location and pre-order service providers, as described in Section 5.
- Analytics and marketing providers, only where you have enabled the relevant optional category in Cookie Settings.
- Professional advisers, regulators, law-enforcement bodies and parties to a corporate transaction, where required or permitted by law or necessary to protect our rights.
We require processors to act only on our documented instructions and to protect personal data appropriately. Some providers process data under their own privacy notices where they determine their own purposes and means, for example payment providers and certain Shopify services.
7. International data transfers
Our providers may process personal data in France, the European Economic Area (EEA), the United Kingdom, the United States and other countries in which they or their sub-processors operate. Where EEA or UK personal data are transferred to a country that is not recognised as providing an adequate level of protection, we use an appropriate safeguard, such as the European Commission's Standard Contractual Clauses and, for UK data, the UK Addendum or International Data Transfer Agreement, together with supplementary measures where required. You may request information about the relevant safeguard by emailing hello@pembree.com.
8. How long we retain personal data
We keep personal data only for as long as needed for the purpose for which it was collected, then delete, anonymise or place it in restricted archive where required. Our standard retention periods are:
| Information | Active-use period | Restricted archive or exception |
|---|---|---|
| Customer account | Until closure or three years of inactivity | Longer only where linked to an order, legal claim or legal duty |
| Order, delivery, return and warranty records | Customer relationship and applicable limitation periods | Invoices, accounting records and qualifying electronic contracts: 10 years where required by French law |
| Marketing prospects and customer marketing data | Until unsubscribe or objection, or three years after last contact or end of relationship | Minimal suppression-list data may be retained to honour the objection |
| Support correspondence | Three years after closure of the request | Longer where needed for an ongoing claim |
| Security logs | Six to twelve months | Longer only for a security incident or legal claim |
| Consent or refusal record | Up to six months | A short record may be retained where necessary to demonstrate compliance |
9. Your privacy rights
Subject to the conditions and limits of applicable law, you may ask us to access, correct, erase, restrict or receive a portable copy of your personal data. You may object to processing based on legitimate interests and, at any time, object to direct marketing. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To make a request, email hello@pembree.com. We may need information to verify your identity and will respond within the period required by applicable law. If you are in France, you may complain to the CNIL. If you are in the UK, you may complain to the ICO. If you are in another EEA country, you may complain to your local data-protection authority.
10. U.S. state privacy notice
This section supplements the rest of this Policy for residents of U.S. states with an applicable comprehensive privacy law. It applies only to the extent that the relevant law applies to PEMBREE's processing of your personal information. Terms such as personal information, sale, share, targeted advertising and sensitive personal information have the meanings given to them in the applicable law.
Notice at collection
We may collect identifiers and contact information; commercial information such as orders, basket and product preferences; payment-status and fraud-prevention information; internet and network activity such as device, browser, online-identifier and website-use data; approximate location or market information; and marketing preferences or inferences. We collect these categories from you, your use of the website, and the service providers described in Sections 5 and 6. We use them for the purposes described in Section 3, including fulfilling orders, operating and securing the website, customer service, analytics, marketing where permitted, and legal compliance. The retention periods are set out in Section 8.
We disclose personal information to the categories of recipient listed in Section 6. If optional marketing or advertising technologies are enabled, disclosure of online identifiers, device information and website-use data to the relevant advertising or analytics partner may be considered a sale, sharing or targeted advertising under certain U.S. state laws. We do not knowingly sell or share the personal information of individuals under 16 years of age.
We do not use or disclose sensitive personal information for purposes that require a right to limit under applicable U.S. state law, other than as necessary to provide the services and for other permitted purposes.
Your U.S. privacy choices and rights
Depending on your state of residence and applicable law, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; to opt out of sale, sharing or targeted advertising; to limit certain uses of sensitive personal information; and to receive equal service and price when you exercise your rights.
To exercise access, correction, deletion, portability or limitation rights, email hello@pembree.com or call +33 7 63 58 87 44. To opt out of sale, sharing or targeted advertising, use the Your Privacy Choices or Data Sharing Opt-Out link on the website, adjust Cookie Settings, or contact us using the details above. We honour applicable opt-out preference signals, including Global Privacy Control, where required by law. An authorised agent may make a request for you where permitted by law, subject to verification of authority and identity.
If we deny a request and the law gives you a right of appeal, you may appeal by emailing hello@pembree.com with the subject line 'Privacy Rights Appeal'. We will explain our decision and provide information about any further complaint route available under applicable law.
California residents
California residents may have the rights listed above under the California Consumer Privacy Act, as amended. This section, together with Sections 2, 3, 5, 6 and 8, is intended to provide the categories of personal information, sources, purposes, disclosures, sale or sharing information and retention details relevant to those rights. California residents may also contact us using the details above with a request relating to disclosure of personal information for third-party direct-marketing purposes.
11. Security, children and changes to this Policy
We use appropriate organisational and technical measures to protect personal data. No system is completely secure, so please take care when using the internet and protect your account credentials. PEMBREE is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so that we can take appropriate action.
We may update this Policy to reflect changes to our services, data processing or legal obligations. We will publish the revised version here and update the effective date. Where required, we will provide additional notice or seek new consent.