Privacy Policy

Your privacy is important to us. It is La Barfumerie's policy to respect your privacy and to comply with all applicable laws and regulations regarding any personal information we may collect about you, including on our website,https://la-barfumerie.com, and the other sites that we own and operate.

Personal information refers to any information about you that can be used to identify you. This includes information about you as an individual (such as your name, address, and date of birth), your devices, your payment details, and even information about your use of a website or online service.

In the event that our site contains links to third-party sites and services, please note that these sites and services have their own privacy policies. After following a link to third-party content, you should read the information published in their privacy policy regarding the collection and use of personal information. This privacy policy does not apply to your activities after leaving our site.

This policy is effective as of November 24, 2023

Last updated: November 24, 2023

Information We Collect

Les informations que nous collectons se divisent en deux catégories : les informations " fournies volontairement " et les informations " collectées automatiquement ".

Les informations " voluntarily provided " refer to all information that you knowingly and actively provide to us when you use or participate in any of our services and promotions.

Les informations " collected automatically " refer to all information sent automatically by your devices when accessing our products and services.

Logging data

When you visit our website, our servers may automatically record standard data provided by your web browser. This may include your device's Internet Protocol (IP) address, the type and version of your browser, the pages you visit, the time and date of your visit, the time spent on each page, as well as other details about your visit.

Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error occurred, as well as other technical information related to the issue. You may or may not be informed of such errors, whether at the time they occur, that they have occurred, or the nature of the error.

Please note that although this information does not allow you to personally identify yourself on its own, it is possible to combine it with other data to personally identify individual persons.

Device data

When you visit our website or interact with our services, we may automatically collect data about your device, such as:

• Device type
• Geolocation data

The data we collect may depend on the individual settings of your device and software. We recommend that you check the policies of your device manufacturer or software provider to find out what information they make available to us.

Personal Information

We may ask you for personal information – for example, when you sign up for our newsletter or contact us – which may include one or more of the following details:

• Name
• Email address
• Date of Birth
• Phone number/mobile
• Home/Postal Address

Legitimate grounds for processing your personal information

We only collect and use your personal information when we have a legitimate reason to do so. In such cases, we only collect the personal information reasonably necessary to provide you with our services.

Collecting and Using Information

We may collect personal information about you when you perform any of the following actions on our website:

• Create an account
• Buy products and/or services
• Subscribe to a subscription
• Sign up to receive updates from us via email or social media
• Use a mobile device or a web browser to access our content
• Contact us by email, on social media, or through similar technologies
• Mention us on social media

We may collect, store, use, and disclose information for the following purposes, and personal information will not be processed further in a manner incompatible with these purposes:

• to provide you with the main features and services of our platform
• to deliver products and/or services to you
• to contact you and communicate with you
• for analysis, market research, and business development, including to operate and improve our website, associated applications, and associated social media platforms
• for advertising and marketing purposes, including to send you promotional information about our products and services as well as information about third parties that we consider may be of interest to you

We may combine the personal information you voluntarily provide and that is automatically collected with general information or research data we receive from other reliable sources. For example, if you provide us with your location, we may combine it with general information about currency and language to offer you an enhanced experience of our site and services.

Security of your personal information

When we collect and process personal information, and while we retain this information, we will protect it in a commercially acceptable manner to prevent any loss, theft, and unauthorized access, disclosure, copying, use, or modification.

Although we do our best to protect the personal information you provide to us, please be aware that no method of electronic transmission or storage is completely secure, and no one can guarantee absolute data security.

You are responsible for selecting any password and its overall security, as well as the security of your own information within the limits of our services. For example, ensure that the passwords associated with access to your personal information and accounts are secure and confidential.

Retention period of your personal information

We retain your personal information only for as long as necessary. This period may depend on how we use your information, in accordance with this privacy policy. For example, if you provided us with personal information when creating an account, we will keep that information for the duration of your account's existence in our system. If your personal information is no longer needed for this purpose, we will delete it or anonymize it by removing all details that could identify you.

However, if necessary, we may retain your personal information to comply with a legal, accounting, or reporting obligation, or for archiving purposes in the public interest, scientific or historical research, or statistical purposes.

Children's Privacy

We do not target any of our products or services directly to children under 13 years old, and we do not knowingly collect personal information from children under 13 years old.

Disclosure of personal information to third parties

We may disclose personal information to:

• a parent company, subsidiary, or affiliate of our company
• third-party service providers to enable them to provide their services, including (but not limited to) IT service providers, data storage, hosting and server providers, advertising networks, analytics, error tracking tools, debt collection agencies, maintenance or troubleshooting providers, marketing or advertising agencies, professional advisors, and payment system operators
• our employees, subcontractors and/or affiliated entities
• our current or potential agents or business partners
• credit agencies, courts, and regulatory authorities, in the event that you do not pay for the goods or services we have provided to you
• courts, regulatory authorities, and law enforcement agents, in accordance with the law, within the framework of any actual or potential legal proceedings, or to establish, exercise, or defend our legal rights
• third parties, including agents or subcontractors who help us provide information, products, services, or direct marketing
• third parties to collect and process data
• an entity that purchases or to which we transfer all or substantially all of our assets and business

The third parties we currently use include:

• Google Analytics
• MailChimp
• Google AdSense
• Bing Ads
• Paypal
• Apple Pay
• Stripe
• Klarna

Your rights and control over your personal information

Your choice:By providing us with personal information, you understand that we will collect, store, use, and disclose your personal information in accordance with this privacy policy. You are not required to provide us with personal information; however, if you do not, it may affect your use of our website or the products and/or services offered on or through it.

Information from third parties:If we receive personal information about you from a third party, we will protect it in accordance with this privacy policy. If you are a third party providing personal information about another person, you represent and warrant that you have that person's consent to provide us with the personal information.

Marketing permission:If you have previously agreed to our use of your personal information for direct marketing purposes, you can change your mind at any time by contacting us at the details below.

Access:You can request details about the personal information we hold about you.

Correction:If you believe that the information we hold about you is inaccurate, outdated, incomplete, irrelevant, or misleading, please contact us using the contact details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or outdated.

Non-discrimination:We will not discriminate against you in exercising your rights over your personal information. Unless your personal information is necessary to provide you with a particular service or offer (for example, processing and fulfilling orders), we will not refuse you goods or services and/or charge you different prices or rates for goods or services, including granting discounts or other benefits, imposing penalties, or providing you with a different level or quality of goods or services.

Data Breach Notifications:We will comply with the laws applicable to us regarding any data breach.

Claims:If you believe that we have violated a relevant data protection law and wish to file a complaint, please contact us using the details below and provide all the details of the alleged violation. We will promptly investigate your complaint and respond to you in writing outlining the results of our investigation and the measures we will take to address your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

Unsubscribe:To unsubscribe from our email database or to opt out of receiving communications (including marketing communications), please contact us using the contact details provided in this privacy policy, or unsubscribe using the unsubscribe options provided in the communication. We may need to request specific information to confirm your identity.

Commercial Transfers

If we or our assets are acquired, or in the unlikely event that we cease operations or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any party that acquires us. You acknowledge that such transfers may occur and that all parties acquiring us may, to the extent permitted by applicable law, continue to use your personal information in accordance with this policy, which they will be required to assume as it forms the basis of any ownership or usage rights we have over this information.

Limits of our policy

Our website may contain links to external sites that are not operated by us. Please note that we have no control over the content and policies of these sites and cannot accept responsibility for their respective privacy practices.

Changes made to this policy

At our discretion, we may modify our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link through which you access this privacy policy.

If the changes are significant, or if required by applicable law, we will contact you (based on your selected preferences for communications from us) and all our registered users with the new details and links to the updated or amended policy.

If the law requires it, we will obtain your permission or give you the option to opt in or opt out, as applicable, of any new use of your personal information.

Additional information for compliance with the General Data Protection Regulation (GDPR) (EU)

Data Controller / Processor

The GDPR distinguishes between organizations that process personal information for their own purposes (known as "data controllers") and organizations that process personal information on behalf of other organizations (known as "data processors"). We, La Barfumerie, located at the address provided in our Contact Us section, are a Data Controller with respect to the personal information you provide to us.

Legal basis for processing your personal information

We will only collect and use your personal information when we have a legal right to do so. In such cases, we will collect and use your personal information in a lawful, fair, and transparent manner. If we seek your consent to process your personal information and you are under 16 years old, we will seek the consent of your parents or legal guardian to process your personal information for that specific purpose.

Our legal bases depend on the services you use and how you use them. This means that we only collect and use your information on the following grounds:

Your consent

When you give us your consent to collect and use your personal information for specific purposes. You may withdraw your consent at any time using the methods we provide; however, this will not affect the use of your information that has already taken place. You may provide a physical address to receive orders. Although you can modify or delete this address at any time, this will not affect orders that have already been shipped. If you have any further questions about how to withdraw your consent, please do not hesitate to contact us using the contact details provided in the Contact Us section of this privacy policy.

Execution of a contract or a transaction

When you have entered into a contract or transaction with us, or to take preparatory measures before entering into a contract or transaction with you. For example, if you purchase a product, service, or subscription from us, we may need to use your personal and payment information to process and deliver your order.

Our legitimate interests

When we consider it necessary for our legitimate interests, such as the provision, operation, improvement, and communication of our services. We consider our legitimate interests to include research and development, understanding our audience, marketing and promotion of our services, measures taken to operate our services effectively, marketing analysis, and measures taken to protect our legal rights and interests.

Compliance with the law

In certain cases, we may have a legal obligation to use or retain your personal information. These cases may include (but are not limited to) court orders, criminal investigations, government requests, and regulatory obligations. If you have any further questions about how we retain personal information to comply with the law, please feel free to contact us using the contact details provided in the Contact Us section of this privacy policy.

International transfers outside the European Economic Area (EEA)

We will ensure that any transfer of personal information from countries within the European Economic Area (EEA) to countries outside the EEA is protected by appropriate safeguards, such as using standard contractual clauses approved by the European Commission, or by employing binding corporate rules or other legally accepted means.

Your rights and control over your personal information

Limitation:You have the right to request that we restrict the processing of your personal information if (i) you are concerned about the accuracy of your personal information, (ii) you believe your personal information has been processed unlawfully, (iii) you need us to retain the personal information solely for the purpose of legal action, or (iv) we are reviewing your objection to processing based on our legitimate interests.

Opposition to processing:You have the right to object to the processing of your personal information based on our legitimate interests or the public interest. If you do so, we must present compelling legitimate grounds for the processing that override your interests, rights, and freedoms in order to continue processing your personal information.

Data Portability:You may have the right to request a copy of the personal information we hold about you. Where possible, we will provide this information in a CSV format or any other easily machine-readable format. You may also have the right to request that we transfer this personal information to a third party.

Deletion:You may have the right to request that we delete the personal information we hold about you at any time, and we will take reasonable steps to remove your personal information from our current records. If you ask us to delete your personal information, we will inform you of the impact of the deletion on your use of our website or our products and services. There may be exceptions to this right for specific legal reasons, which we will inform you of if applicable in response to your request. If you terminate or delete your account, we will delete your personal information within 2 days following the deletion of your account. Please note that search engines and similar third parties may retain copies of your personal information that has been made public at least once, such as certain profile information and public comments, even after you have deleted the information from our services or deactivated your account.

Additional disclosures to comply with the General Data Protection Regulation (GDPR) in the United Kingdom (UK)

Data Controller / Processor

The GDPR distinguishes between organizations that process personal data for their own purposes (called "data controllers") and organizations that process personal data on behalf of other organizations (called "processors"). For the purposes covered by this privacy policy, we are a data controller with respect to the personal data you provide to us and we comply with our obligations as a data controller in accordance with the GDPR.

Content provided by third parties

We may indirectly collect personal information about you from third parties who have your permission to share it. For example, if you purchase a product or service from a company working with us and you give your consent for us to use your contact details to complete the transaction.

We may also collect publicly available information about you, such as that from social networks and messaging platforms you use. The availability of this information depends on both the privacy policies and your privacy settings on these platforms.

Additional Disclosure for the Collection and Use of Personal Information

In addition to the purposes previously mentioned justifying the collection and use of personal information, we may also conduct marketing and market research activities, including analyzing how visitors use our site, opportunities for website improvement, and the user experience.

Personal information no longer needed for our purposes

If your personal information is no longer necessary for our stated purposes, or if you instruct us to do so as part of your rights as a data subject, we will delete it or anonymize it by removing all information identifying you ("anonymization"). However, if necessary, we may retain your personal information to comply with a legal, accounting, or reporting obligation, or for archiving purposes in the public interest, scientific or historical research, or statistical purposes.

Legal bases for processing your personal information

Data protection and privacy laws allow us to collect and use your personal data on a limited number of grounds. In this case, we will collect and use your personal information in a lawful, fair, and transparent manner. We never engage in direct marketing to individuals under the age of 18.

Our legal bases depend on the services you use and how you use them. Here is a non-exhaustive list of the legal bases we use:

Your consent

When you give us your consent to collect and use your personal information for specific purposes. You can withdraw your consent at any time using the means we provide; however, this will not affect the use of your information that has already taken place. When you contact us, we assume your consent based on your positive action of contacting us, so you agree that your name and email address may be used so that we can respond to your request.

When you agree to receive marketing communications from us, we will do so only based on your consent, until you ask us to stop, which you can do at any time.

Although you can request that we delete your contact details at any time, we cannot recall an email that we have already sent. If you have any other questions about how to withdraw your consent, please feel free to contact us using the contact details provided in the Contact Us section of this privacy policy.

Execution of a contract or a transaction

When you have entered into a contract or transaction with us, or in order to take preparatory measures before concluding a contract or transaction with you. For example, if you contact us with an inquiry, we may need personal information such as your name and contact details in order to respond.

Our legitimate interests

When we consider it necessary for our legitimate interests, such as the provision, operation, improvement, and communication of our services. We consider our legitimate interests to include research and development, understanding our audience, marketing and promotion of our services, measures taken to operate our services effectively, marketing analysis, and measures taken to protect our legal rights and interests.

Compliance with the law

In certain cases, we may have a legal obligation to use or retain your personal information. These cases may include (but are not limited to) court orders, criminal investigations, government requests, and regulatory obligations. For example, we are required to keep financial records for a period of 7 years. If you have any further questions about how we retain personal information to comply with the law, please feel free to contact us using the contact details provided in the Contact Us section of this privacy policy.

International Transfers of Personal Information

The personal information we collect is stored and/or processed in the United Kingdom by us. Following an adequacy decision by the European Commission, the United Kingdom has been recognized as providing a level of protection essentially equivalent to that guaranteed by the UK GDPR.

On certain occasions, when we share your data with third parties, they may be based outside the United Kingdom or the European Economic Area (EEA). The countries to which we store, process, or transfer your personal information may not have the same data protection laws as the country in which you originally provided the information.

If we transfer your personal information to third parties in other countries:

• nous effectuerons ces transferts conformément aux exigences du RGPD britannique (article 45) et de la loi sur la protection des données de 2018 ;
• we will adopt appropriate safeguards to protect transferred data, including in transit, such as standard contractual clauses (SCC) or binding corporate rules.

Your rights as a data subject

Right to restrict processing:You have the right to request the restriction of the processing of your personal information if (i) you are concerned about the accuracy of your personal information; (ii) you believe that your personal information has been processed unlawfully; (iii) you need us to retain the personal information solely for the purpose of a legal claim; or (iv) we are reviewing your objection to the processing based on legitimate interests.

Right to object:You have the right to object to the processing of your personal information based on our legitimate interests or the public interest. If you do so, we must provide compelling legitimate grounds for the processing that override your interests, rights, and freedoms in order to continue processing your personal information.

Right to be informed:You have the right to be informed about how your data is collected, processed, shared, and stored.

Right of access:You can request a copy of the personal information we hold about you at any time by submitting a Data Subject Access Request (DSAR). The legal deadline to respond to a DSAR is 30 calendar days from the receipt of your request.

Right to erasure:In certain circumstances, you may request that your personal data be erased from the records held by organizations. However, this is a qualified right; it is not absolute and only applies in certain situations.

In which cases can the right to erasure apply?

• When personal data is no longer necessary for the purpose for which it was originally collected or processed.
• If consent was the legal basis for processing personal data and that consent has been withdrawn. La Barfumerie relies on consent to process personal data in very few circumstances.
• The company relies on legitimate interests as the legal basis for processing personal data, and an individual has exercised their right to object, and it has been determined that the company does not have compelling legitimate grounds to refuse this request.
• Personal data is processed for direct marketing purposes, such as a person's name and email address, and the individual objects to this processing.
• There is legislation that requires personal data to be destroyed.

Right to data portability:Individuals have the right to obtain a portion of their personal data from an organization in an accessible and machine-readable format, such as a CSV file. As part of this, individuals also have the right to request that an organization transfer their personal data to another organization.

However, the right to portability:

• applies only to personal data that a person has directly provided to La Barfumerie in electronic form; and
• The subsequent transfer will only be possible if it is technically feasible.

Right of rectification:If personal data is inaccurate, outdated, or incomplete, individuals have the right to correct, update, or complete this data. Collectively, this is known as the right of rectification. Rectification may involve filling in gaps, that is, completing incomplete personal data—although this will depend on the purposes of the processing. It may involve adding a supplementary statement to the incomplete data to indicate any inaccuracy or claim.

This right applies only to a person's own personal data; a person cannot request the correction of another person's information.

Data Breach Notifications:Upon discovering a data breach, we will investigate the incident and report it to the UK data protection authority and to you, if we deem it appropriate to do so.

Complaints:You have the right, at any time, to file a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). However, we would like the opportunity to address your concerns before you contact the ICO, so please contact us first using the provided contact details. Please provide us with as much information as possible about the alleged violation. We will promptly investigate your complaint and respond to you in writing, informing you of the results of our investigation and the measures we will take to address it.

Inquiry Requests, Reports, and Escalation

To inquire about La Barfumerie's privacy policy or to report violations of user privacy, you can contact our Data Protection Officer using the contact details provided in the Contact Us section of this privacy policy.

Contact us

For any questions or concerns regarding your privacy, you can contact us using the following details:

The Perfumery
https://la-barfumerie.com/contact/