Privacy policy

Data controller

Data collected on bijoux-obsidienne.fr is processed by Camille, whose details are set out in the legal notice. As I am based in France and sell to customers in the United Kingdom, this processing falls under both the EU GDPR and the UK GDPR. For any question about your data: contact@bijoux-obsidienne.fr.

What data I collect

• Identity and contact data: first name, surname, email address, postal address, phone number.
• Order data: items ordered, amount, purchase history.
• Payment data: handled directly by my secure payment provider. I have no access to your full card details and I do not store them.
• Browsing data: through cookies (see below).
• Newsletter: your email address, if you sign up.

Why I use it, and on what legal basis

• Processing and delivering your orders, performance of a contract.
• Managing customer service and after-sales support, performance of a contract and legitimate interests.
• Meeting my legal and accounting obligations, legal obligation.
• Sending you the newsletter, your consent.
• Measuring traffic and improving the site, your consent (cookies).
• Preventing fraud and keeping the site secure, legitimate interests.

Who has access to your data

Your data is for me and, only as far as necessary, for my service providers: hosting provider, payment provider, carrier and email tool. These providers act on my instructions. I never sell or rent your data.

International transfers

Your data is in principle hosted and processed within the European Union. Where one of my tools involves a transfer outside the UK or the EEA, that transfer is covered by appropriate safeguards, the UK International Data Transfer Agreement (IDTA) or Addendum, or the European Commission's standard contractual clauses.

How long I keep it

Your rights

Under the UK GDPR and the Data Protection Act 2018 (and, where it applies, the EU GDPR), you have the following rights over your data:

• the right of access, rectification and erasure;
• the right to restrict and to object to processing;
• the right to data portability;
• the right to withdraw your consent at any time;
• the right not to be subject to a decision based solely on automated processing.

To exercise these rights, write to me at contact@bijoux-obsidienne.fr. If you believe your rights are not being respected, you can lodge a complaint with the UK Information Commissioner's Office: ico.org.uk. As I am established in France, you may also contact the French supervisory authority, the CNIL: cnil.fr

Security

I take reasonable measures to protect your data: a secure connection (HTTPS), secure hosting, and access limited to the people who genuinely need it.

Cookies

This site uses cookies: strictly necessary cookies that keep it working (always on) and, where relevant, analytics cookies or cookies linked to third-party services, which are only set with your consent through the banner provided. You can change your choices at any time and set your browser to refuse cookies.

Newsletter

You only receive my newsletter if you have agreed to it. Every email contains an unsubscribe link and you can opt out at any time; your details are then removed from my mailing list.

Children

This site and my shop are not intended for children under 13 without the consent of a parent or guardian. I do not knowingly collect data about children without that consent.

Changes to this policy

This policy may change from time to time to stay in line with the law. The date it was last updated appears at the top of this page.

Contact

A question about your data? Write to me at contact@bijoux-obsidienne.fr or through my contact page. You can also read my legal notice and my terms and conditions of sale.