Version 3.0 — 29 July 2026 (replaces the version dated 25 October 2023)
This English version is provided for convenience. In the event of any discrepancy, the French version shall prevail.
SHOP MY INFLUENCE is a French simplified joint-stock company (société par actions simplifiée) registered with the Nanterre Trade and Companies Register under number 898 694 781, whose registered office is located at 90 rue du Général Roguet, Bâtiment C2 — BAL 77, 92110 Clichy, France.
Personal data means any information relating to an identified or identifiable natural person, whether directly or by cross-referencing with other information. In the course of its business, SHOP MY INFLUENCE collects and processes such data. This policy sets out the conditions of that processing, which is also documented in records included in our register of processing activities.
This policy applies to three situations, each described in a dedicated section:
– individuals browsing SHOP MY INFLUENCE's website or applications (section 2);
– individuals using SHOP MY INFLUENCE's services (section 3);
– internet users visiting the websites of partner brands whose browsing is measured by our tracking tool (section 4).
Depending on the situation, SHOP MY INFLUENCE acts either as a data controller or as a data processor on behalf of its client brands: each section specifies this role, as it determines who you should contact to exercise your rights.
When you fill in a form (demo request, information request, documentation download, newsletter sign-up), we process, as data controller, the data you voluntarily provide: identity (first name, last name), business contact details (email, phone, address), company, position and website.
This data is used to respond to your requests and for internal administrative purposes. It is used for direct marketing only with your express prior consent (dedicated checkbox) or where permitted by applicable regulations (Article L.34-5 of the French Postal and Electronic Communications Code). You may withdraw this consent at any time via the unsubscribe link or by contacting us.
Our website uses cookies and trackers managed through a consent management module, displayed on your first visit and accessible at any time to change your choices. Refusing is as easy as accepting, and your choice is stored so that you are not asked again unnecessarily.
– Strictly necessary trackers: essential to the operation of the website (navigation, access to your personal area, storage of your consent choices). They are exempt from consent.
– Preference trackers: storage of your settings (language, display), subject to your consent.
– Audience measurement trackers: website traffic statistics, placed only with your consent. Trackers have a lifespan of no more than 13 months and the associated data is kept for a maximum of 25 months.
No third-party advertising tracker is placed on our website. You may also configure your browser, but the consent module remains the primary means of managing your choices.
SHOP MY INFLUENCE offers two distinct services, which are subject to two different data protection regimes.
This service connects advertisers wishing to promote a product or brand with partners (influencers or affiliates) who carry out that promotion in return for remuneration. When you create an advertiser or partner account, SHOP MY INFLUENCE processes, as data controller: identity (first name, last name, gender, date of birth), username and social media accounts, contact details (postal address, email, phone), business information (company, website, SIRET number, intra-Community VAT number) and payment details (IBAN or PayPal email).
This data is used exclusively to provide the service (account management, matchmaking, calculation and payment of remuneration, invoicing), for internal administrative purposes, to comply with our legal obligations, and for marketing in accordance with applicable regulations. It is never sold or rented.
When you take part in an ambassador or influence programme operated by a brand using our white-label platform, that brand is the data controller for your data; SHOP MY INFLUENCE acts exclusively as a data processor within the meaning of Article 28 GDPR, under the brand's documented instructions.
Full information about this processing (data collected, purposes, retention periods, recipients) is provided in the privacy policy of the relevant programme, published by the brand. Requests to exercise your rights in relation to these programmes may be addressed directly to the brand; if we receive them, we forward them to the brand upon receipt and act on its instructions.
As part of both services, SHOP MY INFLUENCE provides a tracking tool used to attribute sales to the influencers or ambassadors who generated the visits, to calculate the corresponding remuneration and to produce reporting. It works as follows:
– When you click on an influencer's or ambassador's link: a script reads the pseudonymised click identifier (smiclickId) contained in the link and stores it, after you have given consent, in your browser's localStorage, for a period of 30 days (automatically purged thereafter).
– When you place an order: a conversion tag sends SHOP MY INFLUENCE pseudonymised order data (order identifier, amount and currency, product details, promotional code, new-customer indicator) together with the smiclickId value, in order to attribute the sale, calculate remuneration and detect anomalies or fraud. The related technical logs include the IP address and timestamp.
Your consent is collected and managed by the partner brand's website, through its own cookie banner: both reading and writing of the tracker are blocked until you have consented (Article 82 of the French Data Protection Act), and no consent exemption is claimed. If you withdraw your consent, the tracker is purged from your browser.
This data is pseudonymised: SHOP MY INFLUENCE cannot identify you directly with the information it holds; only the brand can link the order identifier to your identity. No directly identifying data (name, email, address, the brand's customer identifier) and no banking data is collected by the tool. This data is not used for any advertising targeting or profiling, is never transferred or sold to third parties, and is not subject to any automated individual decision-making within the meaning of Article 22 GDPR. It is hosted and processed exclusively within the European Union.
Retention periods: the tracker is kept for 30 days in your browser; the transmitted data and technical logs are kept by SHOP MY INFLUENCE for a maximum of six months after collection, then deleted or anonymised; only aggregated statistics, which do not allow any identification, are kept beyond that period.
Allocation of roles: where tracking is operated as part of the white-label platform, the brand is the data controller and SHOP MY INFLUENCE the data processor (you exercise your rights with the brand; we forward any request received). Where tracking is operated as part of the affiliate network, SHOP MY INFLUENCE, the advertiser and the partner act as joint controllers; the main terms of their arrangement are as follows: SHOP MY INFLUENCE operates the tracking tool and remuneration calculation and handles rights requests relating to tracking; the advertiser collects consent and informs internet users on its website; the partner remains responsible for its own publication channels. Common contact point: dpo@shopmyinfluence.fr.
Purpose | Legal basis | Retention period |
|---|---|---|
Responding to requests (forms, demos, documentation) | Pre-contractual measures / legitimate interest | 3 years after the last contact |
Newsletter and direct marketing | Consent (Art. L.34-5 of the French Postal and Electronic Communications Code) | Until withdrawal, no more than 3 years after the last contact |
Audience measurement trackers on our website | Consent | Trackers: 13 months max.; data: 25 months max. |
Management of advertiser and partner accounts (affiliate network) | Performance of the contract | Duration of the contractual relationship, then deletion or anonymisation |
Payment of remuneration and invoicing | Performance of the contract; legal obligation | Accounting records: 10 years (restricted-access archiving) |
Attribution tracking on partner brands’ websites | Consent to the placing/reading of the tracker (Art. 82 French Data Protection Act); performance of the contract for remuneration calculation | Tracker: 30 days; data and logs: 6 months max., then deletion or anonymisation |
Exercise of rights | Legal obligation | Copy of ID: 1 year (objection); request log kept as evidence |
System security (logging) | Legitimate interest | 6 months |
Your data is accessible only to SHOP MY INFLUENCE's authorised teams, on a need-to-know basis, and to our technical processors, who process it on our behalf under contracts compliant with Article 28 GDPR: hosting within the European Union (DigitalOcean — Amsterdam, Netherlands; Google Cloud / Firebase — Belgium), transactional email (OVHcloud — France) and payment providers where applicable. These providers have access to your data solely to perform these tasks on our behalf and may not disclose it or use it for any other purpose.
Your data is never sold or rented, and is not transferred to any third party for commercial purposes. It may be disclosed to the competent authorities where required by law.
SHOP MY INFLUENCE hosts and processes data within the European Union and does not voluntarily organise any transfer of personal data outside the European Economic Area in the standard course of its services.
However, certain optional features or third-party providers (for example identity providers for third-party account sign-in, where enabled, or the support services of certain software vendors) may involve access to data from a third country. In such cases, this processing is governed by the appropriate safeguards of Chapter V of the GDPR: an adequacy decision, the European Commission's Standard Contractual Clauses, or certification under the EU-US Data Privacy Framework. Details of these safeguards are available from our data protection contact.
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure: encryption in transit (TLS 1.2/1.3), encryption at rest, named accounts and least privilege, multi-factor authentication on sensitive access, logging, encrypted backups with restoration tests. These measures are detailed in our personal data security policy, available to our clients and partners on request.
In accordance with applicable regulations, you have the following rights:
– right of access: to know what data we hold about you and to obtain a copy;
– right to rectification: to have any inaccurate data corrected;
– right to erasure: to have your data deleted where we have no legitimate reason to continue processing it;
– right to data portability: to receive your data, or have it transmitted to another provider, in a structured, machine-readable format;
– right to object: to object at any time to processing for direct marketing purposes or, on grounds relating to your particular situation, to other processing based on legitimate interest;
– right to restriction: to request the suspension of processing in certain circumstances;
– right to withdraw your consent at any time, without affecting the lawfulness of prior processing;
– right to give instructions regarding the retention, erasure and disclosure of your data after your death (Article 85 of the French Data Protection Act). In the absence of instructions, we undertake to destroy your data, unless retention is necessary for evidentiary or legal purposes.
No decision producing legal effects concerning you is taken solely on the basis of automated processing.
For programmes operated on a white-label basis on behalf of a brand (sections 3.2 and 4), the brand is the data controller: your requests may be addressed to it directly; if we receive them, we forward them to the brand upon receipt.
You may exercise your rights by post (SHOP MY INFLUENCE, 90 rue du Général Roguet, Bâtiment C2 — BAL 77, 92110 Clichy, France) or by email at support@shopmyinfluence.fr, or with our data protection contact: dpo@shopmyinfluence.fr. A copy of an identity document may be requested where there is reasonable doubt as to your identity; where provided in connection with an objection request, it is kept for one (1) year. We respond within one month, which may be extended by two months for complex requests, in accordance with Article 12.3 GDPR.
To learn more about your rights, you may consult the website of the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés): https://www.cnil.fr. If you consider that your rights have not been respected, you may lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or with the competent data protection authority.
This policy may be amended to reflect regulatory or technical developments or changes to our services. The version in force, identified by its number and date, is published on this page. History: version 3.0 of 29 July 2026 (overhaul: clarification of controller/processor roles, updated description of the tracking tool, quantified retention periods, transfer safeguards); previous version dated 25 October 2023.
For any question regarding this policy: support@shopmyinfluence.fr — Data protection contact: dpo@shopmyinfluence.fr — SHOP MY INFLUENCE, 90 rue du Général Roguet, Bâtiment C2 — BAL 77, 92110 Clichy, France.