Last update: 27 November 2020
The internet site www.uk.puressentiel.com (hereafter the "Site") is an e-commerce site dedicated in particular to the online sale of the products of the company PURESSENTIEL UK Ltd (hereafter "PURESSENTIEL").
In the context of access, consultation, navigation and use of the Site and the services it offers, you are required to provide PURESSENTIEL with personal data concerning you.
This data is protected by law. For this reason, PURESSENTIEL, in its capacity as data controller, has implemented appropriate security measures to protect your personal data.
We thank you for reading the present charter, explaining how your personal data is used by PURESSENTIEL.
The present charter complements the General Conditions of Use as well as the General Conditions of Sale of the Site (and if necessary, any document or information mention referring to this charter).
If necessary, you can ask all your questions directly to PURESSENTIEL by sending an email to firstname.lastname@example.org.
1. WHICH PERSONAL DATA MAY BE PROCESSED BY PURESSENTIEL?
All data that you enter on the Site is limited to that which is strictly necessary for the provision of the products and services offered on the Site, namely :
|surname, first name, , email address, postal address, telephone number, proof of identity, order number...
|Banking and financial data
|Bank details, method of payment, billing address...
|Order number, products ordered, promotional code used, amount of the order, discounts granted, date and time of order, address and method of delivery
|Products ordered data
|Returned ordered products, reasons for return, amount refunded, exchanges with the after-sales service...
of the commercial relationship
|Order history, frequency of orders, requests for information/complaints, exchanges with the competent services...
|Data relating to the organisation of
competitions or other promotional operations
|Date of participation, answers given to the contests, nature of the prizes offered...
|Data relating to your
contributions on the Site
If you place an order for a third party, we remind you that you are obliged to inform this person of the communication and processing of his or her personal data by PURESSENTIEL and to communicate this charter to him or her.
In addition, certain data is collected by the Site, namely :
|Location data by geographical area (district, town...)
|This data is only collected and processed, with your prior consent, in order to show you the points of sale located in your vicinity.
|Login and navigation data
|Connection date and time, IP address, browser type, browser language, event logs...
|This data necessarily relates to the proper technical functioning of the Site and the services it offers, as well as to the extent to which the Site is used.
Some of this data is compulsory, others optional in order to order the products sold on the Site and benefit from the other services offered on the Site. The compulsory or optional nature of the personal data to be provided is indicated at the time of collection. If you refuse to provide the mandatory data requested, PURESSENTIEL will not be able to provide you with the services requested, nor to follow up on your requests (such as creating your account on the Site, placing an order or subscribing to the newsletter).
2. WHY DOES PURESSENTIEL USE YOUR PERSONAL DATA?
PURESSENTIEL processes your personal data only for the following reasons:
|Creation and management of your account on the Site
T&Cs and GTCs
|Execution of GTCs
|After-sales service management
|Execution of GTCs
|Improving the products sold on the Site and your customer experience
|PURESSENTIEL's legitimate interest to improve its products and, if necessary, to moderate the opinions published on the Site.
|Organisation of contests
|Performance of the contract (rules of the competition)
|Organisation of other promotional operations
|Depending on the nature of the promotional operation concerned :
- Performance of the contract concerned (...); or
- PURESSENTIEL's legitimate interest in building customer loyalty (gifts, events, etc.).
|Commercial prospecting for clients
|PURESSENTIEL's legitimate interest in developing its activity
|Commercial prospecting for prospects
|Personalisation of your experience
|Improving the Site and the services it offers, as well as your user experience on the Site
|PURESSENTIEL's legitimate interest in improving the Site and its services, as well as your user experience on the Site.
|Compliance with legal and regulatory obligations
|Legal and regulatory obligations imposed on PURESSENTIEL
3. WHO CAN ACCESS YOUR PERSONAL DATA?
In the context of access, consultation, browsing and use of the Site and the services it offers, your personal data may be communicated to the following recipients:
|PURESSENTIAL and its authorised personnel
|Responsible for processing
|Fourniture des services du Site (ex : traitement des commandes, gestion du service après-vente, envoi de newsletters…) et gestion du Site
|Subsidiaries of PURESSENTIEL and its authorised personnel
|Co-responsible for processing
|Fourniture des services du Site (ex : traitement des commandes, gestion du service après-vente, envoi de newsletters…) et gestion du Site.
|PURESSENTIEL sub-contractors (host, IT maintenance service provider, etc.)
|A des fins exclusivement techniques ou logistiques.
|Administrative or judicial authorities
|Uniquement dans l’hypothèse d’une demande expresse et motivée de leur part en cas d’infraction avérée à des dispositions légales ou réglementaires .
|Uniquement dans le cadre de la gestion d’éventuels différents et d’autres sujets juridiques le cas échéant.
|Other third parties
|As a result of or in connection with the restructuring, reconstitution, acquisition, debt financing, merger, sale of PURESSENTIEL's assets or a similar transaction as well as in the event of insolvency, bankruptcy or receivership in which personal data is transferred to one or more third parties as PURESSENTIEL's assets.
4. ARE YOUR PERSONAL DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?
If necessary, your personal data may be transferred to a country outside the European Union, it being specified that in the event that the recipient country does not ensure a level of information protection equivalent to that of the European Union, PURESSENTIEL undertakes to do so, in the absence of a decision of adequacy and after having carried out an assessment of the level of protection of your rights on the territory of the third State where the recipient of your personal data is established, to take all necessary measures to ensure the protection of your personal data on the basis of appropriate guarantees (such as standard contractual clauses), the communication of which may be obtained directly from PURESSENTIEL by sending an e-mail to email@example.com.
5. HOW DOES PURESSENTIEL PROTECT YOUR PERSONAL DATA?
PURESSENTIEL has put in place technical and organisational measures in order to protect your personal data, in particular against possible breaches that may result, in an accidental or illicit manner, in the destruction, loss, alteration, unauthorised access or disclosure of your personal data. These measures ensure an appropriate level of data security and take into account the state of knowledge, the costs of implementation in relation to the risks and the nature of the data to be protected.
PURESSENTIEL also guarantees that the members of its staff and any person who processes personal data concerning you respect the internal rules and procedures relating to the processing of personal data and in particular the technical and organisational security measures put in place to protect your personal data.
6. HOW LONG IS YOUR PERSONAL DATA KEPT?
In general, your personal data will only be kept for as long as is necessary to achieve the purposes for which it was collected or to comply with legal or regulatory requirements.
With some exceptions, PURESSENTIEL keeps your personal data:
- until the deletion of your account or in case of inactivity of your account for three (3) years ;
- in the absence of an account, for the duration of our business relationship.
Beyond these periods, your data is retained for three (3) years from the end of the business relationship for data processed for promotional purposes, five (5) years from the end of the business relationship for data retained for evidentiary purposes and ten (10) years from the end of the financial year for data retained for accounting purposes.
7. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?
In accordance with the applicable regulations on the protection of personal data, you have the following rights over your personal data:
- you can request access to the personal data that PURESSENTIEL has on you and to obtain a copy of it, including in electronic format ;
- you can request the correction, updating and deletion of your personal data, as well as the limitation of their processing;
- you may object to the use of your personal data;
- you may withdraw your consent when it has been collected, without this withdrawal affecting the lawfulness of the processing previously carried out;
- you can communicate to PURESSENTIEL your "last wishes" concerning your personal data in the event of your death (for example, their deletion or transmission to any person of your choice).
In certain cases, you must explain to PURESSENTIEL why you are exercising one of these rights and, if necessary, justify your identity.
For any question and to exercise your rights, you can contact PURESSENTIEL directly by sending an email to firstname.lastname@example.org.
If necessary, you can contact the CNIL via its website or by post: 3, place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07. This right may be exercised at any time free of charge, apart from the cost of the mail if necessary, and the possible costs of assistance or representation if you choose to be assisted in this procedure by a third party.
8. UPDATING OF THE PRESENT CHARTER
The present charter may be modified, particularly in the event of changes to the services offered on the Site. Consequently, we recommend that you consult this charter each time you access the Site.