Privacy policy

The purpose of this Privacy Policy is to inform users of our website about the personal data we collect and, where applicable, the following information:

  1. The personal data we collect

  2. How the collected data is used

  3. Who has access to the collected data

  4. The rights of website users

  5. The website's cookie policy

This Privacy Policy applies alongside our website's Terms and Conditions of Use.

Applicable Laws

In accordance with the General Data Protection Regulation (GDPR), this Privacy Policy complies with the following principles.

Personal data must be:

  1. processed lawfully, fairly and in a transparent manner in relation to the data subject (lawfulness, fairness and transparency);

  2. collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered incompatible with the initial purposes (purpose limitation);

  3. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimisation);

  4. accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (accuracy);

  5. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as they are processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1), provided that the appropriate technical and organisational measures required by the Regulation are implemented to safeguard the rights and freedoms of the data subject (storage limitation);

  6. processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (integrity and confidentiality).

Processing shall be lawful only if, and to the extent that, at least one of the following conditions applies:

  1. the data subject has given consent to the processing of their personal data for one or more specific purposes;

  2. processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;

  3. processing is necessary for compliance with a legal obligation to which the data controller is subject;

  4. processing is necessary in order to protect the vital interests of the data subject or of another natural person;

  5. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;

  6. processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, particularly where the data subject is a child.

For residents of the State of California, this Privacy Policy aims to comply with the California Consumer Privacy Act (CCPA), insofar as this legislation applies to our business. In the event of any inconsistency between this document and applicable legal provisions, the latter shall prevail.

Consent

By using our website, users acknowledge that they have been informed of the terms set out in this Privacy Policy.

Use of the website does not, in itself, constitute general consent to all processing of personal data.

Where consent is the legal basis for processing, particularly for certain cookies or marketing communications, it is obtained in a specific, freely given, informed and unambiguous manner.

Users may withdraw their consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.

Personal Data We Collect

Data Collected Automatically

When browsing our website, certain technical data may be collected automatically by Shopify and the services used to operate the store.

Such data may include:

  1. IP address

  2. Browser type and device used

  3. Pages visited and interactions with the website

  4. Technical data necessary for website security and operation

  5. Information collected through cookies and similar technologies, depending on the user's preferences

This data may be used to ensure the proper functioning of the website, protect transactions, improve the user experience and, where permitted, measure website traffic and store performance.

Data Collected Through User Actions

We may also collect the following data when you perform certain actions on our website:

  1. First and last name

  2. Email address

  3. Telephone number

  4. Residential or delivery address

This data may be collected when you place an order, complete a form, create a customer account or contact our customer service team.

Information relating to orders, purchased items, deliveries and transactions may also be processed to ensure the proper operation of the store.

Payments are processed by the payment service providers available on our website. Banking information is processed in accordance with the security procedures of these providers.

Please note that we only collect data necessary for the purposes stated in this Privacy Policy. Any additional collection of data will be subject to appropriate notification and, where required by law, the user's consent.

How We Use Personal Data

Personal data collected through our website is used only for the purposes specified in this Privacy Policy or indicated on the relevant pages of our website.

This data may be used to:

  1. Process and prepare orders

  2. Arrange the shipment and delivery of items

  3. Process and monitor payments

  4. Communicate with customers regarding their orders

  5. Handle returns, refunds and after-sales service requests

  6. Comply with our legal, tax and accounting obligations

  7. Ensure the security and proper functioning of our online store

  8. Improve our services and measure website performance, where permitted

  9. Send marketing communications where the required consent has been obtained or where permitted by applicable regulations

Each processing activity is based on an appropriate legal basis, including the performance of a contract, compliance with a legal obligation, legitimate interests or consent, depending on the circumstances.

We will not use your data for purposes incompatible with those previously communicated to you.

Employees

We may disclose user data to members of our organisation who reasonably require access to such data in order to fulfil the purposes set out in this Privacy Policy.

Access to personal data is restricted to authorised persons and to the information necessary for the performance of their duties.

Third Parties

Certain personal data may be shared with service providers involved in the operation of our online store, including:

  1. Shopify, for hosting and managing the online store

  2. Payment service providers, for the secure processing of transactions

  3. Carriers and delivery services, for shipping orders

  4. Technical service providers and applications used to ensure the proper functioning of the website

  5. Analytics or marketing communication services, where their use is permitted

These service providers must only access the data necessary to perform their services, in compliance with their legal and contractual obligations.

Certain processing activities may involve transfers of data outside the European Economic Area. Where applicable, such transfers must be subject to the safeguards required by data protection regulations.

Other Disclosures

We undertake not to sell your personal data.

However, we may be required to disclose certain data in the following circumstances:

  1. where required by law;

  2. where necessary in connection with legal proceedings;

  3. to establish, exercise or protect our legal rights;

  4. to buyers or potential buyers of our business in connection with a possible sale, subject to applicable legal safeguards.

Disclosures necessary for the operation of our online store are described in the "Third Parties" section.

If you follow hyperlinks from our website to another website, please note that we are not responsible for, and have no control over, the privacy policies and practices of those websites.

How Long We Retain Personal Data

We do not retain user data for longer than is necessary to fulfil the purposes for which it was collected.

However, certain data may be retained for longer periods where necessary to comply with legal obligations, particularly those relating to invoicing, accounting or dispute resolution.

Retention periods depend on the nature of the data and the applicable legal requirements.

How We Protect Your Personal Data

We take all reasonable precautions to ensure the security of personal data and protect users against unauthorised access, loss, disclosure or unlawful use.

Our online store relies in particular on the security measures provided by Shopify and the technical and payment service providers we use.

However, no computer system or transmission of data over the internet can guarantee absolute security.

We implement reasonably necessary measures to minimise risks and protect personal information.

Minors

In France, for processing based on consent in connection with information society services, individuals under the age of 15 are subject to the consent requirements established by applicable regulations, particularly those involving holders of parental responsibility.

Our website is not specifically intended for minors.

Where necessary, the consent of a legal representative may be required for the collection and processing of a minor's personal data.

Your Rights as a User

Under the GDPR, users have the following rights as data subjects:

  1. Right of access

  2. Right to rectification

  3. Right to erasure

  4. Right to restriction of processing

  5. Right to data portability

  6. Right to object

  7. Right to withdraw consent where processing is based on consent

These rights may be exercised under the conditions and within the limits provided by applicable regulations.

Users also have the right to lodge a complaint with the French Data Protection Authority (Commission nationale de l'informatique et des libertés, CNIL).

Further information about these rights can be found in Chapter III of the GDPR.

How to Modify, Delete or Challenge Collected Data

If you would like your personal information to be deleted or modified in any way, please contact the person responsible for personal data protection at the following address:

ALONE HABIB

42 rue Pierre Curie, 94140 Alfortville, France

info@alonehabib.com

Cookie Policy

Our website uses cookies and similar technologies necessary for its operation, particularly to enable browsing, remember certain preferences, manage the shopping cart and secure transactions.

Other cookies may be used, depending on the services actually enabled on our online store, to:

  1. Measure website traffic and performance

  2. Improve the browsing experience

  3. Analyse the effectiveness of advertising campaigns

  4. Provide personalised content or advertisements

Cookies strictly necessary for the operation of the website may be used without prior consent where permitted by applicable regulations.

Non-essential cookies requiring consent must only be placed or accessed after the user has given their consent.

Users may accept, reject or modify their cookie preferences using the consent management tools available on the website, where provided.

They may also manage certain cookies through their browser settings.

Disabling certain necessary cookies may affect the operation of some website features.

The cookies and services actually used, as well as their retention periods, depend on the configuration of our online store and its active applications.

Changes to This Privacy Policy

This Privacy Policy may be amended from time to time to maintain compliance with the law and reflect any changes in our data collection and processing practices.

We recommend that users review this Privacy Policy periodically to remain informed of any updates.

Where necessary, we may notify users by email of changes made to this Privacy Policy.

Contact

If you have any questions, please do not hesitate to contact us by email at info@alonehabib.com.