Privacy policy

Your privacy is important to us. It is La Barfumerie’s policy to respect your privacy and comply with all applicable laws and regulations regarding any personal information we may collect about you, including on our website, https://la-barfumerie.com, and other sites we own and operate.

Personal information means any information about you that can be used to identify you. This includes information about you as a person (such as your name, address, and date of birth), your devices, your payment details, and even information about how you use a website or online service.

If our site contains links to third-party sites and services, please note that those sites and services have their own privacy policies. After following a link to third-party content, you should read the information posted about their privacy policy regarding the collection and use of personal information. This privacy policy does not apply to your activities after you leave our site.

This policy is effective as of 24 November 2023

Last updated: 24 November 2023

Information We Collect

The information we collect falls into two categories: “voluntarily provided” information and “automatically collected” information.

“Voluntarily provided” information refers to any information you knowingly and actively provide to us when using or participating in any of our services and promotions.

“Automatically collected” information refers to any information automatically sent by your devices when accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. This may include your device’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit.

In addition, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error occurred, and other technical information related to the problem. You may or may not be notified of such errors, even at the time they occur, that they occurred, or the nature of the error.

Please note that while this information alone may not identify you personally, it may be possible to combine it with other data to identify individual persons personally.

Device Data

When you visit our website or interact with our services, we may automatically collect data about your device, such as:

• Device type
• Geolocation data

The data we collect may depend on the individual settings of your device and software. We recommend checking your device manufacturer’s or software provider’s policies to find out what information they make available to us.

Personal Information

We may ask for personal information from you — for example, when you subscribe to our newsletter or when you contact us — which may include one or more of the following:

• Name
• Email address
• Date of birth
• Phone/mobile number
• Home/postal address

Legitimate Grounds for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason to do so. In such cases, we only collect the personal information reasonably necessary to provide our services to you.

Collection and Use of Information

We may collect personal information about you when you do any of the following on our website:

• Create an account
• Purchase products and/or services
• Subscribe to a membership
• Sign up to receive updates from us via email or social media
• Use a mobile device or web browser to access our content
• Contact us by email, on social media, or through similar technologies
• Mention us on social media

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner incompatible with those purposes:

• to provide you with our platform’s core features and services
• to deliver products and/or services to you
• to contact and communicate with you
• for analytics, market research, and business development, including to operate and improve our website, related applications, and associated social media platforms
• for advertising and marketing purposes, including sending you promotional information about our products and services as well as information about third parties that we think may interest you

We may combine voluntarily provided and automatically collected personal information with general information or research data we receive from other trusted sources. For example, if you provide us with your location, we may combine it with general information about currency and language to offer you an improved experience of our site and services.

Security of Your Personal Information

When we collect and process personal information, and while we retain that information, we will protect it by commercially acceptable means to prevent loss, theft, and unauthorized access, disclosure, copying, use, or modification.

Although we do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is completely secure and no one can guarantee absolute data security.

You are responsible for choosing any password and for its overall security, as well as for the security of your own information within the limits of our services. For example, make sure that passwords associated with access to your personal information and your accounts are secure and confidential.

Retention of Your Personal Information

We retain your personal information only for as long as necessary. This period may depend on how we use your information, in accordance with this privacy policy. For example, if you have provided us with personal information when creating an account, we will retain that information for as long as your account exists on our system. If your personal information is no longer needed for that purpose, we will delete it or anonymize it by removing all details that identify you.

However, if necessary, we may retain your personal information to comply with a legal, accounting, or reporting obligation, or for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes.

Children’s Privacy

We do not target any of our products or services directly to children under 13, and we do not knowingly collect personal information about children under 13.

Disclosure of Personal Information to Third Parties

We may disclose personal information to:

• a parent company, subsidiary, or affiliate of our company
• third-party service providers to enable them to provide their services, including (without limitation) IT service providers, data storage, hosting and server providers, advertising networks, analytics providers, error tracking tools, debt collection agencies, maintenance or problem-resolution providers, marketing or advertising providers, and payment system operators, professional advisers, and payment system operators
• our employees, contractors and/or related entities
• our current or potential agents or business partners
• credit agencies, courts, and regulatory authorities, in the event that you fail to pay for goods or services we have provided to you
• courts, regulatory authorities, and law enforcement officers, as required by law, in connection with any actual or potential legal proceedings, or to establish, exercise, or defend our legal rights
• third parties, including agents or subcontractors who assist us in providing information, products, services, or direct marketing
• third parties to collect and process data
• an entity that purchases or to which we transfer all or substantially all of our assets and business

The third parties we currently use include:

• Google Analytics
• MailChimp
• Google AdSense
• Bing Ads
• Paypal
• Apple Pay
• Stripe
• Klarna

Your Rights and Control Over Your Personal Information

Your choice: By providing personal information to us, you understand that we will collect, hold, use, and disclose your personal information in accordance with this privacy policy. You are not obliged to provide us with personal information; however, if you do not, this may affect your use of our website or of the products and/or services offered on or through it.

Information from third parties: If we receive personal information about you from a third party, we will protect it in accordance with this privacy policy. If you are a third party providing personal information about another person, you represent and warrant that you have that person’s consent to provide us with the personal information.

Marketing permission: If you previously agreed to our use of your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below.

Access: You may request details of the personal information we hold about you.

Correction: If you believe any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.

Non-discrimination: We will not discriminate against you for exercising your rights over your personal information. Unless your personal information is necessary to provide you with a particular service or offer (for example, processing and fulfilling orders), we will not deny you goods or services and/or charge you different prices or rates for goods or services, including by granting discounts or other benefits, imposing penalties, or providing you with a different level or quality of goods or services.

Notification of Data Breaches: We will comply with the laws applicable to us regarding any data breach.

Complaints: If you believe we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and reply in writing, setting out the results of our investigation and the action we will take to address your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

Opt-out: To unsubscribe from our email database or to opt out of receiving communications (including marketing communications), please contact us using the details provided in this privacy policy, or unsubscribe using the opt-out facilities provided in the communication. We may need to request specific information to confirm your identity.

Business Transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any party that acquires us. You acknowledge that such transfers may occur, and that any parties acquiring us may, to the extent permitted by applicable law, continue to use your personal information in accordance with this policy, which they will be required to assume as it forms the basis of any ownership or use rights we have in such information.

Limits of Our Policy

Our website may contain links to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites and cannot accept responsibility for their respective privacy practices.

Changes to This Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you access this privacy policy.

If the changes are significant, or if required by applicable law, we will contact you (based on your selected preferences for communications from us) and all our registered users with the new details and links to the updated or amended policy.

If required by law, we will obtain your permission or give you the opportunity to opt in or opt out, as applicable, of any new use of your personal information.

Additional Information for Compliance with the General Data Protection Regulation (GDPR) (EU)

Data Controller / Data Processor

The GDPR distinguishes between organizations that process personal information for their own purposes (known as “data controllers”) and organizations that process personal information on behalf of other organizations (known as “data processors”). We, La Barfumerie, located at the address provided in our Contact Us section, are a Data Controller with respect to the personal information you provide to us.

Legal Bases for Processing Your Personal Information

We will only collect and use your personal information when we have a legal right to do so. In such cases, we will collect and use your personal information lawfully, fairly, and transparently. If we ask for your consent to process your personal information and you are under 16, we will seek consent from your parent or legal guardian to process your personal information for that specific purpose.

Our legal bases depend on the services you use and how you use them. This means that we only collect and use your information on the following bases:

Your consent

When you give us your consent to collect and use your personal information for specific purposes. You may withdraw your consent at any time using the means we provide; however, this will not affect any use of your information that has already taken place. You may provide a physical address in order to receive orders. Although you may change or delete this address at any time, this will not affect orders already sent. If you have any further questions about how to withdraw your consent, please contact us using the details provided in the Contact Us section of this privacy policy.

Performance of a contract or transaction

When you have entered into a contract or transaction with us, or to take preparatory steps before entering into a contract or transaction with you. For example, if you purchase a product, service, or subscription from us, we may need to use your personal and payment information to process and deliver your order.

Our legitimate interests

When we believe it is necessary for our legitimate interests, such as providing, operating, improving, and communicating our services. We consider our legitimate interests to include research and development, understanding our audience, marketing and promoting our services, measures taken to operate our services efficiently, marketing analysis, and measures taken to protect our legal rights and interests.

Compliance with the law

In some cases, we may have a legal obligation to use or retain your personal information. These cases may include (without limitation) court orders, criminal investigations, government requests, and regulatory obligations. If you have any further questions about how we retain personal information to comply with the law, please contact us using the details provided in the Contact Us section of this privacy policy.

International transfers outside the European Economic Area (EEA)

We will ensure that any transfer of personal information from countries in the European Economic Area (EEA) to countries outside the EEA is protected by appropriate safeguards, for example by using standard contractual clauses approved by the European Commission, or by using binding corporate rules or other legally accepted means.

Your Rights and Control Over Your Personal Information

Restriction: You have the right to request that we limit the processing of your personal information if (i) you are concerned about the accuracy of your personal information, (ii) you believe your personal information has been processed unlawfully, (iii) you need us to retain the personal information only for the purposes of a legal claim, or (iv) we are considering your objection to processing based on our legitimate interests.

Objection to processing: You have the right to object to the processing of your personal information based on our legitimate interests or the public interest. If this is done, we must provide compelling legitimate grounds for processing that override your interests, rights, and freedoms in order to continue processing your personal information.

Data portability: You may have the right to request a copy of the personal information we hold about you. To the extent possible, we will provide this information to you in CSV or another easily machine-readable format. You may also have the right to request that we transfer this personal information to a third party.

Erasure: You may have the right to request that we delete the personal information we hold about you at any time, and we will take reasonable steps to delete your personal information from our current records. If you ask us to delete your personal information, we will inform you of the impact of deletion on your use of our site or of our products and services. There may be exceptions to this right for specific legal reasons, which we will explain to you where applicable in response to your request. If you terminate or delete your account, we will delete your personal information within 2 days of your account being deleted. Please note that search engines and similar third parties may retain copies of your personal information that have been made public at least once, such as certain profile information and public comments, even after you have deleted the information from our services or deactivated your account.

Additional Disclosures for Compliance with the General Data Protection Regulation (GDPR) in the United Kingdom (UK)

Data Controller / Data Processor

The GDPR distinguishes between organizations that process personal information for their own purposes (called “data controllers”) and organizations that process personal information on behalf of other organizations (called “data processors”). For the purposes covered by this privacy policy, we are a data controller with respect to the personal information you provide to us and we comply with our obligations as a data controller under the GDPR.

Third-Party Content Provided

We may indirectly collect personal information about you from third parties who have your permission to share it. For example, if you purchase a product or service from a company working with us and you authorize us to use your contact details to complete the transaction.

We may also collect publicly available information about you, such as information from the social media and messaging platforms you use. The availability of this information depends both on the privacy policies and on your privacy settings on those platforms.

Additional Disclosure for Collection and Use of Personal Information

In addition to the purposes previously stated that justify the collection and use of personal information, we may also carry out marketing and market research activities, including analysis of how visitors use our site, opportunities to improve the website, and user experience.

Personal Information No Longer Necessary for Our Purposes

If your personal information is no longer necessary for our stated purposes, or if you instruct us to do so as part of your rights as a data subject, we will delete it or anonymize it by removing all information identifying you (“anonymization”). However, if necessary, we may retain your personal information to comply with a legal, accounting, or reporting obligation, or for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes.

Legal Bases for Processing Your Personal Information

Data protection and privacy laws allow us to collect and use your personal data on a limited number of grounds. In such cases, we will collect and use your personal information lawfully, fairly, and transparently. We never engage in direct marketing to individuals under 18.

Our legal bases depend on the services you use and how you use them. Below is a non-exhaustive list of the legal bases we use:

Your consent

When you give us your consent to collect and use your personal information for specific purposes. You may withdraw your consent at any time using the means we provide; however, this will not affect any use of your information that has already taken place. When you contact us, we assume your consent based on your positive act of contacting us, so you consent to your name and email address being used so that we can respond to your request.

When you agree to receive marketing communications from us, we will do so only on the basis of your consent, until you ask us to stop, which you may do at any time.

Although you may request that we delete your contact details at any time, we cannot recall an email that we have already sent. If you have any further questions about how to withdraw your consent, please contact us using the details provided in the Contact Us section of this privacy policy.

Performance of a contract or transaction

When you have entered into a contract or transaction with us, or in order to take preparatory steps before entering into a contract or transaction with you. For example, if you contact us with an inquiry, we may need personal information such as your name and contact details in order to respond.

Our legitimate interests

When we believe it is necessary for our legitimate interests, such as providing, operating, improving, and communicating our services. We consider our legitimate interests to include research and development, understanding our audience, marketing and promoting our services, measures taken to operate our services efficiently, marketing analysis, and measures taken to protect our legal rights and interests.

Compliance with the law

In some cases, we may have a legal obligation to use or retain your personal information. These cases may include (without limitation) court orders, criminal investigations, government requests, and regulatory obligations. For example, we are required to retain financial records for a period of 7 years. If you have any further questions about how we retain personal information in order to comply with the law, please contact us using the details provided in the Contact Us section of this privacy policy.

International transfers of personal information

The personal information we collect is stored and/or processed in the United Kingdom by us. Following an adequacy decision by the European Commission, the United Kingdom has been granted a level of protection essentially equivalent to that guaranteed by the UK GDPR.

On some occasions, when we share your data with third parties, they may be located outside the United Kingdom or the European Economic Area (EEA). The countries to which we store, process, or transfer your personal information may not have the same data protection laws as the country in which you originally provided the information.

If we transfer your personal information to third parties in other countries:

• we will carry out those transfers in accordance with the requirements of UK GDPR (Article 45) and the Data Protection Act 2018;
• we will adopt appropriate safeguards to protect the transferred data, including in transit, such as standard contractual clauses (SCCs) or binding corporate rules.

Your Rights as a Data Subject

Right to restrict processing: You have the right to request that we limit the processing of your personal information if (i) you are concerned about the accuracy of your personal information; (ii) you believe your personal information has been processed unlawfully; (iii) you need us to retain the personal information only in connection with a legal claim; or (iv) we are currently considering your objection to processing based on legitimate interests.

Right to object: You have the right to object to the processing of your personal information based on our legitimate interests or the public interest. If this is done, we must provide compelling legitimate grounds for processing that override your interests, rights, and freedoms in order to continue processing your personal information.

Right to be informed: You have the right to be informed about how your data is collected, processed, shared, and stored.

Right of access: You may request a copy of the personal information we hold about you at any time by submitting a Data Subject Access Request (DSAR). The legal deadline for responding to a DSAR request is 30 calendar days from receipt of your request.

Right to erasure: In certain circumstances, you may request that your personal data be erased from records held by organizations. However, this is a qualified right; it is not absolute and applies only in certain circumstances.

When can the right to erasure apply?

• When personal data is no longer necessary for the purpose for which it was originally collected or processed.
• If consent was the legal basis for processing the personal data and that consent has been withdrawn. La Barfumerie relies on consent to process personal data in very few circumstances.
• The company relies on legitimate interests as the legal basis for processing personal data and an individual has exercised their right to object, and it has been determined that the company does not have compelling legitimate grounds to refuse that request.
• The personal data is processed for direct marketing purposes, for example a person’s name and email address, and the individual objects to that processing.
• There is legislation requiring the personal data to be destroyed.

Right to data portability: Individuals have the right to obtain some of their personal data from an organization in an accessible and machine-readable format, for example as a CSV file. In addition, individuals have the right to request that an organization transfer their personal data to another organization.

However, the right to data portability:

• only applies to personal data that a person has directly provided to La Barfumerie in electronic form; and
• the subsequent transfer will only be possible if technically feasible.

Right to rectification: If personal data is inaccurate, out of date, or incomplete, individuals have the right to correct, update, or complete that data. Collectively, this is known as the right to rectification. Rectification may involve filling in gaps, that is, completing incomplete personal data — although this will depend on the purposes of the processing. It may involve adding a supplementary statement to incomplete data in order to indicate any inaccuracy or claim.

This right applies only to an individual’s own personal data; a person cannot request the rectification of another person’s information.

Notification of data breaches: Upon discovering a data breach, we will investigate the incident and report it to the UK data protection authority and to you, if we consider it appropriate to do so.

Complaints: You have the right, at any time, to lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection supervisory authority (www.ico.org.uk). However, we would like the opportunity to address your concerns before you approach the ICO, so please contact us first using the details provided. Please give us as much information as possible about the alleged breach. We will promptly investigate your complaint and reply in writing, setting out the results of our investigation and the action we will take to remedy it.

Enquiries, Reports, and Escalation

To inquire about La Barfumerie’s privacy policy or to report violations of user privacy, you may contact our Data Protection Officer using the details provided in the Contact Us section of this privacy policy.

Contact Us

If you have any questions or concerns about your privacy, you may contact us using the following details:

La Barfumerie
https://la-barfumerie.com/contact/