Personal Data Protection Policy
Your privacy is important to us and we take the confidentiality of the personal data you provide to us very seriously.
We would like to explain to you in this privacy policy (hereinafter "Policy"), the nature of the personal data we collect, how we process it, the measures we take to ensure its security and the nature of your rights.
Our Policy may be updated by us at any time and such changes will take effect immediately. We therefore invite you to refer to it regularly in order to be aware of the latest version available.
This Policy applies to all personal data that you directly or indirectly provide to us.
1. Who collects your personal data?
Your personal data collected within the framework of our activity are essentially processed by :
Sarah Lavoine SAS, a simplified joint stock company with a share capital of 50,000 euros, registered in the Paris Trade and Companies Register under the number RCS PARIS 507 947 778, whose registered office is located at 9 rue Saint Roch - 75001 Paris -France, represented by the Maison Sarah Lavoine brand.
2. When do we collect your data?
We collect personal data from you, directly or indirectly through our service providers, in particular when :
- You browse our Site or use our Services on our Site,
- You create an account on our Site,
- You connect to your account on our Site,
- You use your account on our Site,
- You subscribe to our newsletter,
- You place and pay for an order on our Site,
- You contact us through various channels including contact forms, by mail or by phone,
- You contact us via our chat
- You participate in a game or a contest, satisfaction surveys, polls,
- You visit us in our store
- You have given your consent to third parties to send us personal data about you,
We only collect your personal data when it is strictly necessary and legal. We undertake to collect only the minimum amount of personal information necessary for the purposes covered by this Policy.
3. How do we collect your data?
We may collect personal information about you from a variety of sources, including:
- Personal data collected directly, that you voluntarily communicate to us notably when creating your account, through collection forms or when you make a purchase on our Site or in a store. (for example: name, first name, contact information, etc.);
- Personal data collected during the use of our Site, for example by using cookies (see the Cookies Charter);
- Personal data about you from other legitimate sources, including commercially available sources, such as public databases, data aggregators, etc.
4. What personal data do we collect?
In this Policy, "your personal data" means information or items of information that directly or indirectly identify you. This generally includes information such as your name, address, e-mail address and telephone number, but may also include other information such as your IP address, shopping habits, lifestyle information or preferences.
Who is it? | At what time? | What data? |
Maison Sarah Lavoine | While browsing our Site and/or logging into your account | your name, first name, email addresses, connection data, technical data including your IP address, browsing information about your terminal |
When you create your account on our Site | your name, first name, title and email address. | |
When you subscribe to our newsletter | Your email address and your title | |
When you order a product offered on our Site | your name, first name, email address, order content, billing address (type of address: home, work, etc.), delivery address, mobile/fixed telephone number | |
When you pay for products ordered on our Site | your full name, order number, order amount and credit card number and expiration date | |
When you use our chat | your connection/creation/use of chat (number, channel, duration...etc.), the content of your conversation | |
When you contact our Customer Service | your name, first name, email address, postal address, phone number, order number, the content of your request. |
This data is collected fairly; no collection is made without the knowledge of the individuals.
5. For what purposes do we collect your data?
The processing that we carry out corresponds to an explicit, legitimate and determined purpose.
Any processing of your personal data for a purpose other than those set out below will require your consent if it is not justified by a legitimate interest.
For our part, the processing of your personal data allows us to provide you with the services of the Site, to ensure their improvement and the maintenance of a secure environment and in particular to :
- Provided you have given your consent, manage our customer relationship via our CRM, in order to get to know you better, personalize our products and contact you regarding products that may be of interest to you (new product launches, promotional offers, promotional events, VIP gatherings, store opening events, announcements/events, etc.), or that you have previously requested a product from us and the communication is relevant or related to that prior request and made within the timeframes set forth in applicable laws;
- To manage the operation and optimization of our Site and our products;
- To help expedite your future activities and experiences on our Site;
- To evaluate the use of our Site, our products and analyze the effectiveness of our products, communication campaigns and promotions;
- Get to know you better in order to anticipate and respond to your needs;
- To personalize your experience on our Site and other platforms and to evaluate in an anonymous and aggregate way the activity on our Site and other platforms (we take into account, among other things, the time you visited it, whether you have already visited it and which site referred you to it);
- To make our Site easier to use and better tailor our Site and products to your interests and needs;
- Carry out operations relating to our commercial relationship (orders, payment, deliveries, invoices, accounting, satisfaction survey, customer service, etc.);
- Advise you, provide products that you request and answer your questions;
- Provide a customer service accessible by phone, by instant messaging to answer your questions;
- To proceed to the verification, identification and authentication of the personal data that you have transmitted to us;
- Prevent and detect fraud, malware and manage security incidents;
- To manage possible disputes.
We strive to minimize the data collected, to keep it accurate and up-to-date and to facilitate the rights of the persons concerned.
6. How long do we keep your data?
We only keep your personal data in an active database for as long as is strictly necessary to fulfill the purposes for which it was collected.
However, in order to meet our administrative, legal, accounting and fiscal obligations, your data may be archived and kept beyond the above-mentioned periods, in accordance with the legislation in force.
The type of data | The retention period |
>The personal data you have filled in your profile. >Data concerning your navigation, your use of the Site, the use of instant messaging, or exchanges with our customer service |
Duration of three (3) years from your last activity on the Site |
> Data related to an order | Three (3) years from the date of your order |
> Cookies | Duration specified for each cookie (Cookies Charter) |
>Statistics of audience measurement and your raw data of frequentation of our Site | Duration of thirteen (13) months |
> Prospects/customer data | Duration of three (3) years from their collection or the last contact, or the end of the commercial relationship. |
> Banking data | Duration of the transaction. |
7. What is our cookie policy?
For more details, please see our cookie policy.
8. Who are the recipients of your data?
Maison Sarah Lavoine is the sole recipient of your personal data and does not sell it.
However, in order to provide our services, we may communicate your personal data to authorized and determined recipients, namely :
- all employees of the company Maison Sarah Lavoine who are subject to an obligation of confidentiality,
- our advertising, marketing and promotional agencies to help us deliver and analyze the effectiveness of our advertising campaigns and promotions,
- third parties required to deliver a product to you, such as a delivery or postal service delivering a product you have ordered,
- third party service providers, such as web hosting service providers...
- providers of web analytics tools, such as Google,
- our service providers and/or business partners when sharing is necessary to meet the purposes mentioned above,
- administrative or judicial authorities when they ask us to disclose your information to them,
We require these recipients to implement all necessary and appropriate technical and organizational measures to ensure the confidentiality and optimal security of your data against any misuse and to use it only in accordance with our instructions and the laws and regulations in force, in particular by signing a personal data protection agreement.
9. How do we protect your data?
As data controller, we take all reasonable precautions to maintain the security and confidentiality of your personal data by implementing organizational, technical, software and physical measures and require our partners to do the same.
Access to your personal data is restricted to prevent unauthorized access, modification, interference, loss and/or misuse. Although Maison Sarah Lavoine takes all reasonable steps to protect your personal data, no transmission or storage technology is foolproof.
10. How to exercise your rights?
In accordance with the French Data Protection Act of January 6, 1978 as amended, and the General Data Protection Regulation n°2016/679 dated April 27, 2016, you have:
- A right of access to your personal data,
- A right to rectify your personal data,
- A right to object to the processing of your personal data,
- A right to the deletion of your personal data subject to legitimate reasons,
- A right to portability of your personal data as of May 25, 2018,
- Of a right to "digital death", in accordance with the law for a Digital Republic, by communicating to us directives relating to the conservation, deletion and communication of your personal data after your death. These directives can be registered with a "trusted digital third party" certified by the CNIL.
In the absence of a person designated to ensure the execution of these directives, your heirs will be designated.
In the absence of directives given during your lifetime, your heirs will then have the possibility to exercise certain rights, in particular :
- the right of access, if it is necessary "for the settlement of the estate of the deceased",
- the right to object to the closure of your user accounts and to object to the processing of their data.
For more information on your rights: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles.
To exercise these rights, simply send a written request by email to contact@maisonsarahlavoine.com specifying the subject of your request "Personal Data &RGPD".
A reply will be sent to you within one (1) month from the date of receipt of your request.
How can I unsubscribe from our newsletter lists?
You can unsubscribe from our newsletter lists via the unsubscribe link at the bottom of all our newsletters.
11. What is our data policy?
Our Site is intended for people of legal age or minors who have the permission of their legal representative to place an order on the Site.
We do not knowingly collect or process personal data about minors.
12. Social networks/links
The company Maison Sarah Lavoine is not responsible for the collection or illicit processing of personal data carried out by the social networks we use such as Facebook, Instagram and Twitter.
As a service to our visitors, our Site may contain hyperlinks to other websites that are neither operated nor controlled by Maison Sarah Lavoine.
The company Maison Sarah Lavoine shall therefore not be held responsible for the content of such websites, nor for the data protection practices of the third parties that operate them. We draw your attention to the fact that the data protection practices of third parties may differ from those presented in this Policy. We encourage you to review and understand their data protection practices before entrusting them with your personal data.