Privacy Policy

Last update: 27 November 2020

The internet site www.uk.puressentiel.com (hereafter the "Site") is an e-commerce site dedicated in particular to the online sale of the products of the company PURESSENTIEL UK Ltd (hereafter "PURESSENTIEL").

In the context of access, consultation, navigation and use of the Site and the services it offers, you are required to provide PURESSENTIEL with personal data concerning you.

This data is protected by law. For this reason, PURESSENTIEL, in its capacity as data controller, has implemented appropriate security measures to protect your personal data.

We thank you for reading the present charter, explaining how your personal data is used by PURESSENTIEL.

The present charter complements the General Conditions of Use as well as the General Conditions of Sale of the Site (and if necessary, any document or information mention referring to this charter).

If necessary, you can ask all your questions directly to PURESSENTIEL by sending an email to rgpd@puressentiel.com.

1. WHICH PERSONAL DATA MAY BE PROCESSED BY PURESSENTIEL?

All data that you enter on the Site is limited to that which is strictly necessary for the provision of the products and services offered on the Site, namely :

Data category	Data example
Identification data	surname, first name, , email address, postal address, telephone number, proof of identity, order number...
Banking and financial data	Bank details, method of payment, billing address...
Order data	Order number, products ordered, promotional code used, amount of the order, discounts granted, date and time of order, address and method of delivery
Products ordered data	Returned ordered products, reasons for return, amount refunded, exchanges with the after-sales service...
Monitoring data of the commercial relationship	Order history, frequency of orders, requests for information/complaints, exchanges with the competent services...
Data relating to the organisation of competitions or other promotional operations	Date of participation, answers given to the contests, nature of the prizes offered...
Data relating to your contributions on the Site	Reviews, ratings

If you place an order for a third party, we remind you that you are obliged to inform this person of the communication and processing of his or her personal data by PURESSENTIEL and to communicate this charter to him or her.

In addition, certain data is collected by the Site, namely :

Data category	Data examples	Purpose
Location data	Location data by geographical area (district, town...)	This data is only collected and processed, with your prior consent, in order to show you the points of sale located in your vicinity.
Login and navigation data	Connection date and time, IP address, browser type, browser language, event logs...	This data necessarily relates to the proper technical functioning of the Site and the services it offers, as well as to the extent to which the Site is used.

Some of this data is compulsory, others optional in order to order the products sold on the Site and benefit from the other services offered on the Site. The compulsory or optional nature of the personal data to be provided is indicated at the time of collection. If you refuse to provide the mandatory data requested, PURESSENTIEL will not be able to provide you with the services requested, nor to follow up on your requests (such as creating your account on the Site, placing an order or subscribing to the newsletter).

2. WHY DOES PURESSENTIEL USE YOUR PERSONAL DATA?

PURESSENTIEL processes your personal data only for the following reasons:

Purposes	Examples	Fondements juridiques
Creation and management of your account on the Site	to create your account ; to allow you to authenticate yourself on the Site; to enable you to track your current order and to access the summary of orders placed; to enable you to update your account.	Execution of T&Cs and GTCs
Order management	pour traiter votre commande et vous livrer ; pour gérer les factures et paiements pour assurer le suivi de la relation commerciale.	Execution of GTCs
After-sales service management	pour répondre à vos demandes d’information ; pour traiter vos réclamations ; pour vous rembourser.	Execution of GTCs
Improving the products sold on the Site and your customer experience	pour prendre en compte, publier et, uniquement si cela s’avérerait nécessaire, modérer vos avis sur les produits ; pour réaliser des études clients (statistiques de vente…).	PURESSENTIEL's legitimate interest to improve its products and, if necessary, to moderate the opinions published on the Site.
Organisation of contests	pour vous permettre de participer aux jeux-concours organisés par PURESSENTIEL.	Performance of the contract (rules of the competition)
Organisation of other promotional operations	to enable you to take part in promotional operations organised by PURESSENTIEL (gifts, events...)	Depending on the nature of the promotional operation concerned : - Performance of the contract concerned (...); or - PURESSENTIEL's legitimate interest in building customer loyalty (gifts, events, etc.).
Commercial prospecting for clients	to send you newsletters ; to send you follow-up emails on your shopping cart; to offer you offers adapted to your previous purchases.	PURESSENTIEL's legitimate interest in developing its activity
Commercial prospecting for prospects	to send you newsletters ; to send you follow-up emails on your shopping cart;	Your consent
Personalisation of your experience	to personalise your browsing on the Site (language, type of product added to your basket, etc.) ; to personalise the newsletter according to the orders placed.	Your consent
Improving the Site and the services it offers, as well as your user experience on the Site	to evaluate and improve the Site and the services it offers; to facilitate your navigation on the Site; to ensure the security and proper functioning of the Site	PURESSENTIEL's legitimate interest in improving the Site and its services, as well as your user experience on the Site.
Compliance with legal and regulatory obligations	to comply with legal and regulatory obligations, in particular in the context of bookkeeping to respond to your requests to exercise your rights	Legal and regulatory obligations imposed on PURESSENTIEL

3. WHO CAN ACCESS YOUR PERSONAL DATA?

In the context of access, consultation, browsing and use of the Site and the services it offers, your personal data may be communicated to the following recipients:

Recipients	Qualifications	Purposes
PURESSENTIAL and its authorised personnel	Responsible for processing	Fourniture des services du Site (ex : traitement des commandes, gestion du service après-vente, envoi de newsletters…) et gestion du Site
Subsidiaries of PURESSENTIEL and its authorised personnel	Co-responsible for processing	Fourniture des services du Site (ex : traitement des commandes, gestion du service après-vente, envoi de newsletters…) et gestion du Site.
PURESSENTIEL sub-contractors (host, IT maintenance service provider, etc.)	Subcontractors	A des fins exclusivement techniques ou logistiques.
Administrative or judicial authorities	Independent processors	Uniquement dans l’hypothèse d’une demande expresse et motivée de leur part en cas d’infraction avérée à des dispositions légales ou réglementaires .
External advisors	Independent processors	Uniquement dans le cadre de la gestion d’éventuels différents et d’autres sujets juridiques le cas échéant.
Other third parties	Independent processors	As a result of or in connection with the restructuring, reconstitution, acquisition, debt financing, merger, sale of PURESSENTIEL's assets or a similar transaction as well as in the event of insolvency, bankruptcy or receivership in which personal data is transferred to one or more third parties as PURESSENTIEL's assets.

4. ARE YOUR PERSONAL DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?

If necessary, your personal data may be transferred to a country outside the European Union, it being specified that in the event that the recipient country does not ensure a level of information protection equivalent to that of the European Union, PURESSENTIEL undertakes to do so, in the absence of a decision of adequacy and after having carried out an assessment of the level of protection of your rights on the territory of the third State where the recipient of your personal data is established, to take all necessary measures to ensure the protection of your personal data on the basis of appropriate guarantees (such as standard contractual clauses), the communication of which may be obtained directly from PURESSENTIEL by sending an e-mail to rgpd@puressentiel.com.

5. HOW DOES PURESSENTIEL PROTECT YOUR PERSONAL DATA?

PURESSENTIEL has put in place technical and organisational measures in order to protect your personal data, in particular against possible breaches that may result, in an accidental or illicit manner, in the destruction, loss, alteration, unauthorised access or disclosure of your personal data. These measures ensure an appropriate level of data security and take into account the state of knowledge, the costs of implementation in relation to the risks and the nature of the data to be protected.
PURESSENTIEL also guarantees that the members of its staff and any person who processes personal data concerning you respect the internal rules and procedures relating to the processing of personal data and in particular the technical and organisational security measures put in place to protect your personal data.

6. HOW LONG IS YOUR PERSONAL DATA KEPT?

In general, your personal data will only be kept for as long as is necessary to achieve the purposes for which it was collected or to comply with legal or regulatory requirements.

With some exceptions, PURESSENTIEL keeps your personal data:
- until the deletion of your account or in case of inactivity of your account for three (3) years ;
- in the absence of an account, for the duration of our business relationship.

Beyond these periods, your data is retained for three (3) years from the end of the business relationship for data processed for promotional purposes, five (5) years from the end of the business relationship for data retained for evidentiary purposes and ten (10) years from the end of the financial year for data retained for accounting purposes.

7. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

In accordance with the applicable regulations on the protection of personal data, you have the following rights over your personal data:

- you can request access to the personal data that PURESSENTIEL has on you and to obtain a copy of it, including in electronic format ;

- you can request the correction, updating and deletion of your personal data, as well as the limitation of their processing;

- you may object to the use of your personal data;

- you may withdraw your consent when it has been collected, without this withdrawal affecting the lawfulness of the processing previously carried out;

- you can communicate to PURESSENTIEL your "last wishes" concerning your personal data in the event of your death (for example, their deletion or transmission to any person of your choice).

In certain cases, you must explain to PURESSENTIEL why you are exercising one of these rights and, if necessary, justify your identity.

For any question and to exercise your rights, you can contact PURESSENTIEL directly by sending an email to rgpd@puressentiel.com.
If necessary, you can contact the CNIL via its website or by post: 3, place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07. This right may be exercised at any time free of charge, apart from the cost of the mail if necessary, and the possible costs of assistance or representation if you choose to be assisted in this procedure by a third party.

8. UPDATING OF THE PRESENT CHARTER

The present charter may be modified, particularly in the event of changes to the services offered on the Site. Consequently, we recommend that you consult this charter each time you access the Site.