Privacy Policy

PREAMBLE

Welcome to the [LA]ctive website, https://lactivecosmetiques.com , owned by the company LActive, SAS with capital of €1,000, registered with the Paris Trade and Companies Register under number 849 409 313 , whose head office is located at 58, rue de Monceau, 75008 Paris.

We value our relationships with our Customers and the transparency and honesty of our operations. This is why we present our Privacy Policy to inform you about the data we collect, how we use it, to whom we may disclose it, and how you can access, modify or delete it from our system. All your personal data ("Personal Information") is treated confidentially. LActive is committed to ensuring a level of protection in accordance with the General Data Protection Regulation No. 2016/679 (GDPR), as well as all French laws and regulations that supplement or implement it.

ARTICLE 1: PERSONAL DATA COLLECTED

LActive collects the following Personal Data directly from Users:

• Data relating to your identity: title, surname, first names, postal address, telephone numbers, email address, identifier, user name and password, date of birth or age;
• Data relating to Product Orders made through the Site, such as the Product(s) purchased, the transaction number;
• Payment data (such as credit card number or bank details) are collected by LActive as well as by payment service providers (Paypal, Lydia, Stripe, Apple Pay, Shopify payments) used on the Site.
• Technical data : IP address or browsing information relating to the terminal used;
• Data relating to job applicants.

Personal information collected to process the user's order, comply with LActive's legal or regulatory obligations, or necessary to conclude the General Conditions of Sale must be provided compulsorily. Without this information, LActive will not be able to provide the products to users.

ARTICLE 2: PURPOSES – LEGAL BASIS – STORAGE DURATION

Purposes

We collect your personal information for the following purposes:

• Administration of the site and improvement of the quality of the service - Legitimate interest ;
• Management of your orders (delivery of Products, invoicing, payment, package tracking, after-sales service, carrying out satisfaction surveys, etc.) - Execution of a contract ;
• Publication of opinions on the Site - Legitimate interest ;
• Accounting and tax obligations - Legal obligation ;
• Management of pre-litigation and litigation - Legitimate interest ;
• Commercial prospecting aimed at Users (sending newsletters), for the purposes of promoting and marketing the Products - Legitimate interest ;
• Management of adverse effects linked to the use of our products (Cosmetovigilance), carrying out studies concerning the safety of use of our products - Legal obligation .

Legal basis

• Execution of the contract concluded between the Client and LActive (General Conditions of Sale)
• Obtaining User Consent
• LActive’s legitimate interest in publishing consumer reviews of its Products
• Execution of pre-contractual measures taken at the request of the User
• LActive’s legitimate interest in responding to User requests
• LActive’s legitimate interest in providing appropriate information on its Products
• Compliance with a legal obligation of LActive concerning the retention of Personal Data
• LActive's legitimate interest in establishing proof of a right or contract

Shelf life 

We undertake to retain your personal data only for the period necessary for the purposes set out in this privacy policy or as required by applicable law:

• The data is archived in accordance with the legal limitation period;
• They are kept for as long as necessary to manage the User's request;
• The duration of publication on the Site is determined by specific needs;
• The data is deleted immediately or stored for as long as necessary to process the request, for example in the case of a complaint;
• Tax and accounting documents are kept in accordance with current legal requirements.
• The data collected during a purchase on the Site is kept for the duration of the legal prescription.
• Finally, personal data remains recorded until the User's consent is withdrawn, or at the latest 3 years after the last active contact initiated by the User.

ARTICLE 3: CONSENT

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for any other reason, such as marketing, we will consult with you explicitly to obtain your consent.

If you have given your consent but change your mind and wish us to stop contacting you, collecting or disclosing your information, please notify us by email at hello@lactivecosmetiques.com or by mail at the following address: LActive, 58 rue de Monceau, 75008, Paris, France

ARTICLE 4: RECIPIENTS OF USERS’ PERSONAL DATA

LActive does not transmit Users’ Personal Data to third parties, except in the following main cases:

• The persons within LActive responsible for the commercial relationship with Users, and required to maintain the confidentiality of Personal Data;
• Personal data processors, who must guarantee the confidentiality of Personal data, in particular:

• The service provider responsible for hosting the Site, including Users’ Personal Data;
• The service provider responsible for emailing;
• The service providers responsible for the routing and delivery of the Products;

• Communication of Users' Personal Data to the competent authorities under applicable law and/or a court decision.

ARTICLE 5: DISCLOSURE

LActive may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

ARTICLE 6: DURATION OF STORAGE OF PERSONAL DATA

LActive retains Users' Personal Data only for the period strictly necessary for the purposes set out in Article 2. Subsequently, Users' Personal Data is sorted and archived, for those that have not been deleted, with restricted access for an additional period in order to allow LActive to fulfill its legal and/or regulatory obligations regarding archiving and conservation. At the end of this period, Users' Personal Data is permanently deleted from LActive's databases.

ARTICLE 7: SECURITY

LActive undertakes to implement all necessary technical and organizational measures to guarantee the security and confidentiality of Users' Personal Data in accordance with the GDPR.

ARTICLE 8: USER RIGHTS

The User has the rights of access, rectification, opposition, limitation, erasure and portability of his Personal Data in accordance with the GDPR.

In addition, the User may define instructions regarding the retention, deletion and communication of his Personal Data after his death, in accordance with French legislation.

The User may also withdraw his consent at any time when the processing of his Personal Data requires such consent.

To exercise these rights, the User can contact LActive:

Users also have a right to lodge a complaint, which they can exercise with the national supervisory authority, namely the CNIL.

To obtain more information about their rights, Users can click on the following link: https://www.cnil.fr/fr/comprendre-vos-droits

ARTICLE 9: MODIFICATION OF THE PRIVACY POLICY

LActive reserves the right to modify or update this Privacy Policy. The revised version will be published on the Site with the date of the last update.

ARTICLE 10: SHOPIFY

Our store is hosted on Shopify Inc., which provides us with the online e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify's data storage, databases, and the general Shopify application. It's stored on a secure server behind a firewall.

Payment

If you complete your purchase through a direct payment gateway, then Shopify stores your credit card information. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your order. After that is complete, your transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a collaboration of brands like Visa, MasterCard, American Express and Discover.

PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

COOKIES

Here is a list of cookies that we use. We have listed them here so that you can decide whether you want to allow them or not.

_ab: Usage related to access to the administrator interface, which persists for 2 years.

cart: Stores information related to the shopping cart and persists for 2 weeks.

cart_currency: Setting after a payment to keep the same currency as the last payment in new carts which persists for 2 weeks.

_cmp_a : Usage related to managing customer privacy settings, which persists for 1 day.

secure_customer_sig : Stores information that allows the automatic identification of a user after registration as a customer, in order to avoid having to reconnect each time, which persists for 1 year.

keep_alive: Stores information related to the location of buyers which persists for 2 weeks.

Localization: Stores payment related information and persists for 2 weeks.

secure_customer_sig: Stores information related to the identification of a user after registering in a store as a customer, so as not to force them to log in again.

shopify_essential: Basic functions required for the website to function.

skip_shop_pay: Associated with Shopify's Shop Pay feature which allows the Customer to save their payment and shipping information for faster checkout on future purchases.

_tracking_consent: Related to the storage of user preferences set by a merchant according to the privacy rules of the visitor's region which persists for 1 year.

ARTICLE 7: AGE OF CONSENT

By accessing this site, you confirm that you are of legal age in your state or province of residence and that you have given your consent to allow any minor under your responsibility to use this website.

ARTICLE 8: CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time. We therefore recommend that you review it regularly. Changes and clarifications will take effect immediately upon their publication on our website. If we make substantial changes to this policy, we will notify you here that they have been updated. This will ensure that you are informed of what information we collect, how we use it, and under what circumstances, if any, we may disclose it.

QUESTIONS AND CONTACT DETAILS

In accordance with the Data Protection Act, you may, at any time, exercise your right to access, rectify or delete any personal information we hold about you, file a complaint, or obtain more information, please contact our privacy officer by email at the following address: hello@lactivecosmetiques.com or by mail at the following address: LActive, 58 rue de Monceau, 75008, Paris, France.