Who are we?

Our website address is: https://sarahjeannot.com.

The website is published by:

Sarah Jeannot
17 rue Henri de Savornin
84160 Lourmarin
France
SIRET: 808834089 00027 – APE: 4778C
contact@sarahjeannot.com
Tel.: +33 9 56 07 41 71

Sarah Jeannot is responsible for the processing of personal data collected on the website.

Personal data collected

When using the website and placing orders, Sarah Jeannot may collect the following personal data:

• identification data: surname, first name;
• contact details: postal address, email address, telephone number;
• order data: products ordered, amount, order date, delivery address, purchase history;
• payment data required to process the transaction, without Sarah Jeannot storing full bank card details;
• connection and browsing data: IP address, browser, device used and pages viewed, when this data is necessary for the operation, security or audience measurement of the website;
• data voluntarily submitted by the user through a contact form or by email.

Purposes of processing

The personal data collected is used for the following purposes:

• processing orders placed on the website;
• managing payment, invoicing and delivery of products;
• managing customer relations, after-sales service and complaints;
• responding to requests sent through the contact form or by email;
• managing customer accounts, when this feature is used;
• complying with legal, accounting and tax obligations;
• ensuring website security and preventing fraud;
• producing traffic statistics and improving the operation of the website;
• sending commercial information or newsletters only when the applicable legal conditions are met.

Legal basis for processing

Depending on the case, the processing of personal data is based on:

• performance of the contract, in particular for processing orders, payments, deliveries and requests relating to an order;
• compliance with legal obligations, in particular accounting, tax or consumer rights obligations;
• Sarah Jeannot’s legitimate interest, in particular for website security, customer relationship management and service improvement;
• the user’s consent, in particular for certain cookies, newsletters or commercial communications when such consent is required.

Recipients of the data

Personal data is intended for Sarah Jeannot and for service providers involved strictly for the needs of the website and the business:

• website hosting provider;
• technical service providers responsible for maintenance, security or proper operation of the website;
• payment service providers;
• carriers and delivery services;
• accounting, administrative or legal service providers where necessary;
• administrative or judicial authorities when required by law.

Sarah Jeannot does not sell her customers’ personal data to third parties.

Transfer of data outside the European Union

Where possible, personal data is processed within the European Union or in countries offering an adequate level of protection.

If certain technical service providers involve a transfer of data outside the European Union, Sarah Jeannot ensures that such transfer is governed by appropriate safeguards in accordance with the applicable regulations.

Data retention period

Personal data is retained only for the time necessary for the purposes for which it was collected.

• Data relating to orders, invoices and accounting obligations may be retained for the applicable legal period, in particular 10 years for accounting documents.
• Data relating to the customer account is retained as long as the account remains active, unless deletion is requested or a contrary legal obligation applies.
• Data used for commercial prospecting may be retained during the commercial relationship and then, in principle, for a maximum period of three years from the last contact initiated by the customer or prospect.
• Data from contact forms is retained for the time necessary to process the request.
• Cookies are retained for a limited period, in accordance with the applicable recommendations.

Commercial communications

Sarah Jeannot may send commercial information to customers or users only under the conditions provided for by the applicable regulations.

For commercial communications by email or SMS sent to individuals, the person’s prior consent is collected where required.

The user may withdraw their consent or object to receiving commercial communications at any time, free of charge, by using the unsubscribe link included in the messages received or by writing to: contact@sarahjeannot.com.

Cookies

The website may use cookies or trackers necessary for its proper operation, in particular for browsing, basket management, security, customer account login or order validation.

The website may also use audience measurement cookies in order to understand how the website is used and to improve its content and services.

Cookies that are not strictly necessary for the operation of the website are only placed with the user’s consent when such consent is required.

The user may accept, refuse or configure cookies according to the options provided on the website and in their browser settings.

Data security

Sarah Jeannot implements reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

However, no computer system can guarantee absolute security. Users are encouraged to protect their login details and to choose a sufficiently secure password when creating a customer account.

User rights

In accordance with the applicable regulations on personal data protection, users have the following rights in particular:

• right of access to their personal data;
• right to rectification;
• right to erasure;
• right to object;
• right to restriction of processing;
• right to data portability, where applicable;
• right to withdraw consent at any time when processing is based on consent.

These rights may be exercised by contacting Sarah Jeannot:

• by email at contact@sarahjeannot.com;
• by post to Sarah Jeannot, 17 rue Henri de Savornin, 84160 Lourmarin, France.

For security reasons, proof of identity may be requested in the event of reasonable doubt about the identity of the person exercising their rights.

Complaint to the CNIL

If the user considers that their rights are not being respected, they may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés, the CNIL, via the website https://www.cnil.fr.

Changes to this Privacy Policy

Sarah Jeannot reserves the right to modify this Privacy Policy in order to take account of changes to the website, the services offered or the applicable regulations.

The applicable version is the version published on the website at the time of consultation.