PRIVACY POLICY

PRIVACY POLICY

This Privacy Policy describes how Shana Cosmetics ("Shana Cosmetics", the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from https://shanacosmetic.com (the "Site") or otherwise communicate with us (collectively, the "Services").

For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we process in connection with the Services.

Shana Cosmetics is the trade name of Lucas VILLOT, sole proprietor (entrepreneur individuel), whose registered office is located at 12 Impasse du Café, 69420 Trèves, France, registered under SIRET number 891 496 721 00020. For the purposes of applicable data protection laws (including the EU and UK General Data Protection Regulation), Shana Cosmetics / Lucas VILLOT is the "data controller" of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access the Services.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we do so, we will post the revised Privacy Policy on the Site, update the "Last updated" date above and, where required by applicable law, inform you by appropriate means.

HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION

To provide the Services, we collect personal information about you from a variety of sources. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to:
- provide the Services and operate our business;
- communicate with you (including customer support);
- comply with our legal obligations;
- enforce any applicable terms of service; and
- protect or defend the Services, our rights, and the rights of our users or others.

WHAT PERSONAL INFORMATION WE COLLECT

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term "personal information", we mean information that identifies, relates to, describes or can be associated with you.

1. Information We Collect Directly from You

Information that you directly submit to us through the Services may include:

- Basic contact details: your name, billing address, shipping address, phone number, email address.
- Order information: products purchased, payment confirmation, order date, delivery information.
- Account information: username, password and other identifiers used to access your account (if you create one).
- Shopping information: items you view, add to your cart or wishlist.
- Customer support information: the content of messages and communications you send to us (for example, via email or contact forms).

Some features of the Services may require you to provide certain information. If you choose not to provide this information, you may not be able to use or access these features.

2. Information We Collect through Cookies and Similar Technologies

We automatically collect certain information about your interaction with the Services ("Usage Data"). To do so, we use cookies, pixels and similar technologies ("Cookies"). Usage Data may include:

- Device and browser information (type, version, operating system).
- IP address and approximate location.
- Information about how you access and use our Site and your account.
- Information about your interaction with emails and marketing communications (e.g. whether you opened or clicked them).

For specific information about the Cookies that we use related to powering our store with Shopify, see: https://www.shopify.com/legal/cookies.

3. Information We Obtain from Third Parties

We may obtain information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

- Shopify, which powers our online store.
- Payment processors, who collect payment information (e.g., credit or debit card information, billing address) to process your payment and complete your orders.
- Analytics and advertising partners, who help us understand how users interact with the Site and enable us to show relevant advertisements.
- Carriers and logistics providers, who assist with delivery.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information for the following purposes:

- Providing Products and Services: to process your payments, fulfill and deliver your orders, provide invoices, handle returns and exchanges, manage your account, and provide customer support. This processing is generally necessary to perform our contract with you.
- Marketing and Advertising: to send you marketing communications (where permitted by law), show you relevant offers and advertisements, and personalize your experience. This is generally based on our legitimate interests or your consent, depending on applicable law.
- Security and Fraud Prevention: to monitor and protect the Services, detect and investigate fraud, abuse or other malicious activities, and verify your identity where necessary. This is in our legitimate interests and may be necessary to comply with legal obligations.
- Improving Our Services: to analyze how the Services are used, improve our Site, products and services, and develop new features and offerings. This is in our legitimate interests to run and improve our business.
- Legal and Compliance: to comply with applicable laws, regulations and legal processes, and to respond to lawful requests from public authorities.

COOKIES

Like many websites, we use Cookies on our Site. We use Cookies to:

- power and improve the Site and the Services (for example, to remember your actions and preferences);
- run analytics and better understand user interaction with the Services;
- help tailor our Services and advertising on our Site and other websites.

Most browsers accept Cookies by default. You can choose to set your browser to remove or reject Cookies. Please note that removing or blocking Cookies may negatively impact your user experience and some features of the Services may not work properly.

HOW WE DISCLOSE PERSONAL INFORMATION

In certain circumstances, we may disclose your personal information to third parties, including:

- Vendors and Service Providers: such as IT providers, hosting and cloud storage providers, payment processors, fulfillment and shipping providers, customer support providers, analytics and marketing partners, who process personal information on our behalf and follow our instructions.
- Business and Marketing Partners: including Shopify and advertising partners, to provide services and show you relevant offers and advertisements.
- Affiliates: within our business group (if applicable) for internal administrative and business purposes.
- Legal and Compliance: where required to do so by law, regulation or legal process (e.g., to respond to subpoenas or lawful requests), or to protect our rights, property, safety, users or others.
- Business Transactions: in connection with a merger, acquisition, restructuring or sale of all or part of our business.

We do not disclose your personal information in exchange for money. However, we may work with advertising and analytics partners who use online tracking technologies. Depending on the laws that apply where you live, this may be considered a "sale" or "sharing" of personal information for advertising purposes. You may have the right to opt out of such activities (see "Your Rights and Choices" below).

USER-GENERATED CONTENT

If you choose to submit product reviews or other content to any public area of the Services, that content will be public and accessible to others. We are not responsible for the privacy or security of any information that you choose to make public.

THIRD-PARTY WEBSITES AND LINKS

Our Site may provide links to websites or other online platforms operated by third parties. If you follow such links, your use of those sites will be governed by their own terms and privacy policies. We are not responsible for the privacy or security practices of such third-party sites.

CHILDREN'S DATA

The Services are not intended for use by children. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us using the details below so that we can delete it.

SECURITY AND RETENTION OF YOUR INFORMATION

We use reasonable technical and organizational measures to protect your personal information. However, no security measures are perfect and we cannot guarantee "perfect security".

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law (for example, for tax, accounting or legal purposes).

INTERNATIONAL TRANSFERS

As we are based in France and use service providers located in various countries (including the United States), your personal information may be transferred to and processed in countries other than the one in which you reside.

Where we transfer personal information from the European Economic Area (EEA) or the United Kingdom to a country that does not provide an adequate level of data protection, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses or equivalent mechanisms under UK law.

YOUR RIGHTS AND CHOICES

Depending on where you live, you may have some or all of the following rights regarding your personal information:

- Right of Access: to request confirmation of whether we process your personal information and to obtain a copy.
- Right to Rectification: to request correction of inaccurate or incomplete personal information.
- Right to Erasure: to request deletion of your personal information in certain circumstances.
- Right to Restrict Processing: to request that we restrict the processing of your personal information in certain cases.
- Right to Data Portability: to receive a copy of your personal information in a structured, commonly used and machine-readable format, and to have it transmitted to another controller, where technically feasible.
- Right to Object: to object, on grounds relating to your particular situation, to our processing of your personal information based on our legitimate interests, and to object at any time to the processing of your personal information for direct marketing.
- Right to Withdraw Consent: where we rely on your consent to process your personal information, you may withdraw this consent at any time, without affecting the lawfulness of processing prior to withdrawal.
- Rights under US State Laws (if applicable): depending on where you live in the United States, you may have additional rights (for example, to opt out of certain types of “sale” or “sharing” of personal information or targeted advertising).

You can exercise your rights by contacting us using the contact details in the "Contact Us" section below. We may need to verify your identity before responding to your request. We will respond within the time limits required by applicable law.

You can manage your communication preferences by using the unsubscribe link included in our marketing emails. Even if you opt out of marketing, we may still send you non-promotional communications, such as order confirmations and service messages.

COMPLAINTS

If you have any questions or concerns about how we process your personal information, please contact us first using the contact details below and we will do our best to resolve your issue.

If you are located in the European Union, the United Kingdom or another region with data protection laws, you may also have the right to lodge a complaint with your local data protection authority. In France, this is the Commission Nationale de l’Informatique et des Libertés (CNIL).

SHOPIFY SERVICES AND ADVERTISING

We use Shopify to power our online store and, where applicable, we may use Shopify’s advertising services (such as Shopify Audiences) to help personalize the advertising you see on third-party websites. To learn more about how Shopify processes personal information, please see: https://www.shopify.com/legal/privacy.

To restrict Shopify merchants that use these ad services from using your personal information for such services, you can visit: https://privacy.shopify.com/en.

CONTACT US

If you have any questions about this Privacy Policy, or if you would like to exercise your rights, you can contact us at:

Shana Cosmetics / Lucas VILLOT  
12 Impasse du Café  
69420 Trèves  
France  

Email: support@shanacosmetics.com