Privacy policy

Compliant with the General Data Protection Regulation (EU) 2016/679 and French Data Protection Law
Last updated: 14/05/2025

1. Data Controller

This Privacy Policy applies to the processing of personal data carried out by:

SacreNova LTD
Registered in the United Kingdom
Company Registration Number: 16448129
Registered Office: ELSTREE AERODROME UNIT 5, HOGG LANE, ELSTREE, HERTFORDSHIRE, W6 3AW
Email: info@elisebeaute.com

The Company operates this e-commerce website and offers its goods and services to customers located in France. This Privacy Policy sets out how we collect, use, disclose, and protect your personal data.

2. Purpose and Legal Basis for Processing

We process personal data only when a legal basis under Article 6(1) of the GDPR applies. The purposes and legal grounds are as follows:

Purpose of Processing Legal Basis
To process and fulfil orders Contractual necessity
To manage your customer account and preferences Contractual necessity / Legitimate interest
To send transactional emails (e.g., order confirmations, dispatch notifications) Legitimate interest
To send promotional emails or newsletters Consent
To analyse and improve the website (analytics, UX) Legitimate interest
To prevent fraud and ensure security Legitimate interest
To comply with legal obligations (e.g., tax and accounting) Legal obligation

We do not conduct automated decision-making that produces legal effects concerning you.

3. Categories of Personal Data Collected

We collect the following categories of personal data:

  • Identity and Contact Data: Full name, postal address, email address, telephone number

  • Transaction and Payment Data: Order details, billing and shipping addresses, payment information (processed via secure payment gateways, not stored directly)

  • Technical and Usage Data: IP address, device type, browser type, operating system, website interactions, referring/exit pages, timestamps

  • Preference Data: Shopping history, saved items, preferred language

  • Location Data: General location based on your IP address

  • User-Generated Content: Reviews or testimonials you submit voluntarily

4. How Personal Data is Collected

We collect data through the following methods:

  • When you place an order or register an account

  • When you contact us directly (e.g., customer service)

  • Through cookies and similar technologies (see section 6)

  • From third-party service providers (e.g., Shopify, Meta/Facebook, payment processors)

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law:

Data Type Retention Period
Account and transaction data 5 years from last activity
Billing and tax data 10 years (in line with French tax law)
Analytics data 13 months (maximum under CNIL guidelines)
Marketing preferences Until consent is withdrawn or after 3 years of inactivity

6. Cookies and Tracking Technologies

Our website uses cookies to:

  • Ensure functionality (e.g., shopping cart, login)

  • Remember your preferences

  • Analyse usage patterns (e.g., Google Analytics, Shopify Analytics)

  • Deliver personalised advertising (e.g., Facebook Pixel, Google Ads)

You may refuse cookies via our cookie consent banner or your browser settings.

For more information:

7. Data Sharing and Disclosure

We only disclose your data where strictly necessary and under appropriate legal safeguards:

  • Service Providers: Shopify (hosting), payment gateways (PCI-DSS compliant), logistics partners, customer service providers

  • Marketing Platforms: Google, Meta/Facebook (only with your consent)

  • Legal Advisors and Auditors: Where necessary to comply with legal or regulatory obligations

  • Public Authorities: If required by applicable laws or judicial orders

  • Corporate Events: In the context of a merger, acquisition, or asset sale

All third-party processors are subject to data processing agreements under Article 28 GDPR.

8. International Data Transfers

As a UK-based company targeting the EU, your data may be transferred to the United Kingdom, United States, or other non-EEA countries where our processors operate (e.g., Shopify Inc., Meta, Google).

We ensure adequate safeguards under GDPR, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission

  • Transfer impact assessments

  • Binding contractual obligations with processors

9. Your Rights

As a data subject located in France, you have the following rights under GDPR:

  • Right of access – to your personal data (Art. 15)

  • Right to rectification – if data is inaccurate (Art. 16)

  • Right to erasure – also known as the "right to be forgotten" (Art. 17)

  • Right to restrict processing – under certain conditions (Art. 18)

  • Right to data portability – receive your data in a structured format (Art. 20)

  • Right to object – particularly to direct marketing (Art. 21)

  • Right to withdraw consent – at any time, where processing is based on consent

  • Right to lodge a complaint – with the CNIL, the French data protection authority (www.cnil.fr)

To exercise your rights, please contact: info@elisebeaute.com

10. Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including but not limited to:

  • HTTPS encryption

  • Access controls and role-based permissions

  • Secure processing agreements with all vendors

  • Staff training on data confidentiality

However, no system is 100% secure. Users are responsible for maintaining the confidentiality of their account credentials.

11. Children’s Privacy

Our website is not intended for individuals under 16 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a child, we will delete it without delay.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect legal or operational changes. The latest version will always be available on our website. In the event of material changes, we will notify you via email or website banner and, where required, obtain your renewed consent.

13. Contact

For any questions, concerns, or data subject requests, please contact:

SacreNova LTD
ELSTREE AERODROME UNIT 5, HOGG LANE, ELSTREE, HERTFORDSHIRE, W6 3AW
Email: info@elisebeaute.com