Privacy Policy

We are committed to protecting and respecting your privacy in line with EU regulations governing the collecting, storing and personal information that you may provide to us in the course of your dealings with us.

Everyone has important rights with regard to the way in which their personal information is handled. During the course of our business activities we will collect, store and process personal information about our customers, suppliers and other third parties, and we recognise that the correct and lawful treatment of this data will maintain confidence in our organisation. Further it will provide for successful business operations.

This policy sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by us so that you fully understand and are aware of how and why we use your information in line with EU Regulations and can have confidence in us to safeguard your data.

Please read the following carefully to understand our views and practices regarding your personal information and how we will treat it.

For the purpose of  data protection laws, the data controller is SAS Retail Online DV, Registered office 25 Rue de la Madelaine, Paris 75008, France.

 

 

This site collects some Personal Data from its Users. Among the Personal Information collected from this site, either independently or through third parties, there are :

  • Identity Data, such as your name, title and date of birth,
  • Account Identity Data, such as your email address and your password,
  • Contact Data, such as your billing address, delivery address, email address and telephone numbers,
  • Financial Data, such as bank account and payment card details,
  • Transaction Data, including details about payments to and from you, and other details of products you purchase from us,
  • Technical Data, including IP addresses, your log-in data, browser type and version, time-zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website,
  • Profile Data, including purchases or orders made by you, feedback and survey responses,
  • Usage Data, including information about how you use our website, products and services, and
  • Marketing Data, such as your preferences in receiving marketing from us and our third parties, and your communication preferences.

 

There is also information what is categorized as “Special Category Data”. 

This data pertains to Information relating to your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, criminal convictions, sex life or sexual orientation, or certain types of genetic or biometric data.

During the course of dealing with you, we do not expect to collect any ‘special category’ data about you.

Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data are collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this site.
Unless otherwise specified, all the data requested by this site are mandatory.

If the User refuses to communicate them, it may be impossible for this site to provide the Service. In cases where this site indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation.
Users who have doubts about which data are mandatory, are encouraged to contact the owner.


Any use of cookies – or other tracking tools – by this site or third party service providers used by this site, unless otherwise specified, is intended to provide the Service requested by the User, in addition to the additional purposes described in this document and in the Cookie Policy, if available.

The User assumes the responsibility of the Personal Data of third parties obtained, published or shared through this site and guarantees to have the right to communicate or disseminate them, freeing the owner from any liability to third parties.

Personal data information is very important. This is why when processing your information, we must comply with the six enforceable principles of good practice. These provide that your personal information must be:

  • processed lawfully, fairly and in a transparent manner,
  • processed for specified, explicit and legitimate purposes,
  • adequate, relevant and limited to what is necessary,
  • accurate and kept up-to-date,
  • kept for no longer than is necessary, and
  • processed in a manner than ensures appropriate security.

 

 

We obtain personal information by you directly interacting with us, such as:

  • placing orders for products via our website,
  • creating an account on our website,
  • participating in discussion boards or other social media functions on our website,
  • browsing our website while logged into your account at Luxurybrandsco.net,
  • entering a competition, promotion or survey organised by us, or otherwise providing us with feedback,
  • subscribing to our publications, or otherwise requesting marketing material to be sent to you, or
  • corresponding with us by phone, email, letters or otherwise.

We may obtain personal information via automated technology when you interact with our website by using cookies, server logs and other similar technologies.

We may also collect personal information about you from third parties or publicly-available sources, such as:

  • analytics providers (such as Google),
  • credit reference and fraud prevention agencies,
  • providers of technical, payment and delivery services

1. Method of treatment

The Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organization of this site (administrative, commercial, marketing, legal, system administrators) or external subjects (as suppliers of third party technical services, postal couriers, may have access to the Data) hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller. The updated list of Managers can always be requested from the Data Controller.

2. Legal basis of the processing

  •  The User has given consent for one or more specific purposes; Note: in some jurisdictions the Owner may be authorized to process Personal Data without the User’s consent or another of the legal bases specified below, as long as the User does not object (“opt-out”) to this treatment. However, this is not applicable if the processing of Personal Data is regulated by European legislation regarding the protection of Personal Data; the processing is necessary for the execution of a contract with the User and / or the execution of pre-contractual measures;
  •  The processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
  • The processing is necessary for the performance of a task carried out in the public interest or for the exercise of public authority vested in the Holder;
  • The processing is necessary for the pursuit of the legitimate interest of the owner or third parties.

In any case, it is always possible to ask the Owner to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.

3. Place

The Data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For more information, contact the owner.

The User’s Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the processing site, the User can refer to the section concerning the processing of Personal Data.

You have the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization of public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect the Data.

If one of the transfers described above takes place, the User can refer to the respective sections of this document or request information from the Data Controller by contacting him at the opening dates.

We use your personal information for a number of different purposes. For each of these purposes, we are required to confirm the ‘legal basis’ that allows us to use your information, indicated as follows:

Purposes for which we will use the information you give to usLegal basis
To register you as a new customerThis information is required for the performance of the contract between you and us
To process your order and, if accepted, to deliver the products to you (including managing payments, fees, charges and accurate data)This information is required for the performance of the buyer’s contract between you and us
To manage your queries or complaintsThis information is required for the smooth performance of the contract between you and us
To collect and recover monies due to us owed by youThis information is required for our legitimate business interests, namely to ensure we receive payment for products and services that you have ordered from us
To notify you about changes to our terms of sale or this privacy policyThis information is required for our legitimate business interests, namely to ensure you are aware of our current terms and conditions
To administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes, to allow you to participate in interactive features of our service, when you choose to do so, to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you and to make suggestions and recommendations to you and other users of our website about goods or services that may interest you or themThis information is required for our legitimate business interests to ensure you receive the best experience possible when accessing and using our website. We will comply with our cookie policy when processing this information
To enable you to participate in a prize draw, competition or complete a surveyThis information is required for our legitimate business interests, namely to study how customers use our products, to develop them and help grow our business
To create customer profile types that are used to help identify new customers from other sources. These profiles DO NOT contain personal data.This information is required and will be done after you give your consent for us to do.

Your consent can be withdrawn by changing your preferences using the My Account functionality on our website.
To provide you with relevant marketing communications that inform you of special offers, sales and new products.This information is required for our legitimate interest to develop our offers and services in order to improve customer interaction and retain customers.
To prevent customers from trading with our company who have been abusive or who have abused or misused the products and/or services that we will supply.This information is required for our legitimate business interests, namely to prevent the misuse of our products or services
To detect, investigate and prevent crime and where necessary to prevent customers from trading with our company who have been fraudulent and to pass on their details to the relevant legal/regulatory organisation so that they can be prevented from doing more harmThis information is required for our legitimate business interests, namely to help prevent fraudulent or dishonest behaviour, and to comply with any legal obligations placed upon us (e.g. such as by a regulator).
To notify you when you have products in your basket that have not been through the ordering processThis information is required for our legitimate business interests, namely to ensure we provide the quality of service you expect from us
Where goods and/or services are being provided to our company that are necessary to give you the service you expect from us

To have a contractual relation with you to supply goods and/or service.
This information is required so that our legitimate business interests, in order to fulfil our contractual obligations.
To contact you to undertake customer satisfaction surveys, invite you to provide product reviews or for market research.This information is required for our legitimate business interests, namely to develop products, services, applications and designs that attract and retain customers, improving customer interaction with our sites.
To comply with our legal and regulatory obligations for the payment of taxThis information is required for us to comply with all legal obligations to which we are subject to which requires us to hold certain data 

We will only use your personal information strictly for the purpose(s) for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose  and in line with data regulation. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

We will share your personal data with trusted third parties for legitimate business purposes. For example, the delivery of your orders, to handling complaints, for fraud management and prevention, for helping us personalise our offers to you and so on.

We apply our policy strictly in line with  EU regulations to those organisations to keep your data safe and protect your privacy:

  • We provide only the information they  strictly need to perform their specific services.
  • We require all third parties to respect the security of your personal information and to treat it in accordance with the law.
  • We do not allow nor authorise any of  our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for our specified purposes and in accordance with our instructions in line with what you have authorised us to do
  • We work closely with them to ensure that your privacy is respected and protected at all times.
  • If we stop using their services, we instruct and require them to comfirm that any and all of your data held by them will either be deleted or rendered anonymous.

Third parties we work with are:

Courier ServicesDelivery of your orders, including proof of delivery and tracking information. .
Data InsightBehavioural analysis that allows us to personalise your experience and the information we provide to you. We use Google Analytics,.
Email ServicesHow we manage our electronic communication with you. This is done through either Google or 
Fraud Services and
Fraud Management
We may use a combination of Financial Credit Authorities , Citizens Advice Bureaus and the Police Authorities when fulfilling our ‘public interest’ and legal responsibilities to prevent fraud and dishonest behaviour. We may share information about fraudulent or potentially fraudulent activity in our premises or systems. This may include sharing data about individuals with law enforcement bodies.
IT ServicesWe use a number of partners to support our website and other business systems but only share your information with Google
Legal ServicesWhen necessary we will enlist solicitors for resolution of legal matters.
Mailing ServicesAddressing of printed material will be provided by French Mail Providers La Poste
Payment ServicesDuring the payment process you will be directed to options to Swift and PayPal depending on your preference.
Market Research ServicesShould you wish to comment on our products or service you will be able to do so via our chosen review service provider, Trustpilot.
Social MediaSo we can show you products that might interest you while you are browsing the internet, we use the services of Google, Facebook, Twitter and Instagram.
Law enforcementWe may be required to disclose your personal data to the police or other enforcement, regulatory or Government body, in your country of origin or elsewhere, upon a valid request to do so. These requests are assessed on a case-by-case basis and take the privacy of our customers into consideration.
Regulatory bodiesWhen appropriate your personal information may be shared with DIRECTION GÉNÉRALE DES FINANCES PUBLIQUES (PUBLIC FINANCES DIRECTORATE GENERAL), Other regulators and other authorities who require reporting of processing activities in certain circumstances.

We may also disclose your information to third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If such a change happens to our business, then the new third party may use your personal information in the same way as set out in this policy and we will notify you of any change like this in advance.

The Data are processed and stored for the time required by the purposes for which they were collected. Therefore,

Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of the contract is completed.
Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is met. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Data Controller.

When the processing is based on the consent of the User, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or an order of an authority.

At the end of the retention period the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Users may exercise certain rights with reference to the Data processed by the Data Controller.

In particular, the User has the right to:

withdraw consent at any time. The User can withdraw consent to the processing of their Personal Data previously expressed.
oppose the processing of your data. You may object to the processing of your data when it occurs on a legal basis other than consent. Further details on the right of opposition are indicated in the section below.
access your data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.

verify and request rectification. The User can verify the correctness of his Data and request its updating or correction.
obtain treatment limitation. When certain conditions are met, the User may request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose other than their conservation.
obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Owner.

Receive your data or have it transferred to another holder. You have the right to receive your data in a structured format, commonly used and readable by automatic device and, where technically feasible, to obtain the transfer without hindrance to another holder. This provision is applicable when the Data are processed with automated tools and the processing is based on the User’s consent, on a contract of which the User is a party or on contractual measures connected to it.
propose a complaint. The User can lodge a complaint with the competent personal data protection authority or act in court.

When Personal Data is processed in the public interest, in the exercise of public authority to which the Holder is invested or to pursue a legitimate interest of the Owner, Users have the right to oppose the processing for reasons related to their particular situation. Users are reminded that, if their data is processed for direct marketing purposes, they can oppose the processing without providing any reasons. To find out if the Owner deals with data for direct marketing purposes, Users can refer to the respective sections of this document.

To exercise your rights of the User, Users can direct a request to the contact details of the Owner indicated in this document. The requests are sent free of charge and processed by the Owner as soon as possible, in any case within a month.

Defense in court

The User’s Personal Data may be used by the Owner in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this site or related Services by the User. The User declares to be aware that the Data Controller may be obliged to disclose the Data by order of the public authorities.

Specific information

At the request of the User, in addition to the information contained in this privacy policy, this site may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For needs related to operation and maintenance, this site and any third party services used by it may collect system logs, that is, files that record the interactions and that may also contain Personal Data, such as the User IP address.

Further information in relation to the processing of Personal Data may be requested at any time to the Data Controller using the contact details.

Response to “Do Not Track” requests

this site does not support “Do Not Track” requests.

To find out if any third-party services used support them, the User is invited to consult their respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on this site as well as, if technically and legally feasible, by sending a notification to Users through one of the extremes contact information in the owner’s possession. Please therefore consult this page regularly, referring to the date of the last modification indicated at the bottom.

If the modifications concern treatments whose legal basis is consent, the Controller will collect the User’s consent again, if necessary.

Definitions and legal references

Personal Data (or Data)

It constitutes personal data any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a physical person identified or identifiable.

Usage Data

This information is collected automatically through this site (also from third-party applications integrated into this site), including: IP addresses or domain names of the computers used by the User that connects to this site, addresses in URI notation ( Uniform Resource Identifier), the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (good order, error, etc.) the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of the pages consulted, to the parameters related to the operating system and the IT environment of the User.

User

The individual who uses this site that, unless otherwise specified, coincides with the interested party.

The natural person to whom the Personal Data refers.

Data Processor (or Manager)

The natural person, legal person, public administration and any other entity that processes personal data on behalf of the Owner, as set out in this privacy policy.

Data Controller (or Holder)

The natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures related to the operation and use of this site. The Data Controller, unless otherwise specified, is the owner of this site.

The hardware or software tool through which the Personal Data of Users are collected and processed.

Service

  • The Service provided by this site as defined in the relevant terms (if any) on this site / application.
  • European Union (or EU)
  • Unless otherwise specified, any reference to the European Union contained in this document shall be extended to all current member states of the European Union and the European Economic Area.

This privacy statement is drawn up on the basis of multiple legislative systems, including articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy statement only concerns this site.

If you still have questions, comments and/or requests regarding our policy, then you are welcome to contact us and such query should be addressed to our customer services team by writing to the address at the top of this policy, or by emailing us at  [email protected]