1. Introduction
This Privacy Policy explains how IEL Cosmetique collects, uses, stores and protects personal data when you visit or use www.ielcosmetique.fr. IEL Cosmetique is committed to complying with the General Data Protection Regulation (GDPR) and applicable French law. This policy applies to both individual and professional customers.
2. Data controller
The controller is Alisson Reinard – Sole trader (Entrepreneur individuel), trading as IEL Cosmetique, 20 rue des Halles, 16110 La Rochefoucauld-en-Angoumois, France. Email: contact@ielcosmetique.fr. Website: www.ielcosmetique.fr. You can contact us at this address about personal data.
3. Personal data collected
Depending on how you use the website, we may collect:
- Identity and contact details: first and last name, email address, telephone number, billing and delivery addresses.
- Customer account details: login identifiers, authentication information, order history, individual or professional customer status, and professional information provided to verify a business account.
- Order and payment details: products, order references and amounts, invoicing details, payment method and transaction status, delivery, returns, refunds and store credit.
- Communications: customer service messages, enquiries and complaints.
- Technical and browsing data: IP address, browser and device information, pages visited, interactions, cookie identifiers and similar trackers, according to your consent choices.
Information marked as mandatory is required to provide the relevant service; without it, an account or order may not be processed. IEL Cosmetique does not store full card numbers or card security codes; these are handled by payment providers.
4. Purposes and legal bases
We process personal data for the following purposes:
- Customer accounts, orders, payments, deliveries, returns and refunds — performance of a contract or steps requested before entering into a contract.
- Invoicing, accounting and compliance with legal obligations — legal obligation.
- Customer support and handling enquiries — performance of a contract or legitimate interests in responding to enquiries.
- Website security and fraud prevention — legitimate interests in protecting our website and business.
- Audience measurement using analytics tools — consent where required.
- Advertising performance measurement, including product views and checkout interactions — consent where required.
- Marketing communications, where offered — consent when required or legitimate interests in the cases permitted by law, with a right to object.
You do not have to accept non-essential analytics or advertising cookies to place an order. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.
5. Retention periods
We keep personal data only as long as necessary for the purposes for which it was collected, subject to applicable legal requirements:
- Customer accounts: for the duration of account use and the customer relationship; inactive accounts may be deleted or archived after reviewing applicable retention requirements.
- Orders and invoices: accounting documents subject to statutory retention requirements are kept for 10 years.
- After-sales service: for the period needed to handle requests, warranties and applicable legal claims.
- Enquiries: for the time needed to respond, and longer where justified by potential disputes.
- Marketing: generally for the customer relationship and up to 3 years after its end or the last relevant contact, as applicable.
- Connection and security data: for a period proportionate to security needs and legal requirements.
- Cookies and trackers: according to their respective lifetimes, described in the Cookie Policy or consent management tool.
At the end of the applicable period, data is deleted, anonymised or lawfully archived where justified.
6. Recipients and service providers
Access is limited to IEL Cosmetique and providers who need the data to perform their services:
- PrestaShop: ecommerce platform for accounts, catalogue and orders.
- IONOS: website hosting and technical services.
- Stripe and PayPal: secure payment processing.
- Mondial Relay and other carriers used for orders: delivery and parcel tracking.
- Google Analytics 4: website audience measurement, subject to required consent.
- Google Tag Manager: management and activation of website tags; the rules applicable to each activated service depend on its purpose and consent requirements.
- TikTok Pixel: measurement of interactions and advertising performance, subject to required consent.
- Administrative and accounting providers, where needed, and competent authorities when legally required.
IEL Cosmetique does not sell customers' personal data to third parties.
7. Transfers outside the European Economic Area
Some service providers, including analytics, payment and advertising providers such as Google, TikTok, Stripe or PayPal, may process data outside the European Economic Area. Where international transfers occur, they must rely on a lawful GDPR mechanism, such as an adequacy decision, standard contractual clauses with supplementary safeguards where necessary, or another recognised mechanism. Contact us for further information about applicable transfers and safeguards.
8. Cookies and similar technologies
The website uses strictly necessary cookies for functions such as the shopping cart, customer sessions, account access, security and recording consent preferences. These may be used without prior consent where legally exempt. Google Analytics 4 may be used to measure website traffic and TikTok Pixel to measure advertising-related interactions, subject to required consent. On your first visit, the cookie banner lets you accept, reject or manage non-essential cookies. You can change or withdraw your choices at any time using the cookie settings icon at the bottom left of the website. Rejecting non-essential cookies does not prevent use of the main shopping features. Further information, including cookie categories and durations, is provided in our separate Cookie Policy.
For more information about the cookies we use, their purposes and how to manage your consent, please read our Cookie Policy.
9. Your rights
Subject to applicable legal conditions, you have the right to access, correct, erase or restrict processing of your data, to object to certain processing, to data portability where applicable, and to withdraw consent at any time. French law also provides for instructions concerning personal data after death. To exercise your rights, email contact@ielcosmetique.fr. We may request strictly necessary information to verify your identity where reasonable doubt exists. We normally respond within one month, subject to legally permitted extensions. You may lodge a complaint with the French data protection authority, the CNIL: www.cnil.fr.
10. Data security
IEL Cosmetique implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and unlawful disclosure. These may include secure connections, protected administration access, access restrictions, specialist payment providers, security maintenance and incident management. No computer system can guarantee absolute security. Where applicable, personal data breaches are notified in accordance with legal requirements.
11. Changes to this policy
IEL Cosmetique may amend this policy to reflect legal, technical or organisational changes. Significant changes will be communicated where required by law. The version published on the website at the time of consultation applies.
IEL Cosmetique – Alisson Reinard
20 rue des Halles
16110 La Rochefoucauld-en-Angoumois
France
contact@ielcosmetique.fr
www.ielcosmetique.fr