Privacy Policy

Privacy Policy – Rose Hill Paris

LAST UPDATED: JUNE 15, 2025

This privacy policy is intended to inform users of the website rosehillparis.com (hereinafter "the Website") about how their personal data is collected, processed, and protected, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. DATA CONTROLLER

The controller of the personal data collected on the Website is: Delrieu Timol Corinne, sole trader Address: 26 rue Spontini, 75116 Paris, France Email: rosehillparis@gmail.com

2. PERSONAL DATA COLLECTED

We collect the data you provide to us directly, notably when creating an account, placing an order, or signing up for our newsletter. The following data may be collected:

  • Identity information: First and last name
  • Contact details: Email address, postal address, phone number
  • Transaction information: Order history, payment information (processed securely by our service providers Stripe and PayPal)
  • Connection and browsing data: IP address, browser type, pages viewed (via cookies)

3. PURPOSES OF PROCESSING

Your personal data is collected for specific, explicit, and legitimate purposes:

  • Order management: Processing, payment, shipping, and tracking of your purchases.
  • Customer relationship: Answering your questions via customer service, managing returns and warranties.
  • Communication and marketing: Sending transactional emails (order confirmation, etc.) and, with your explicit consent, sending our newsletters and commercial offers.
  • Website improvement: Analyzing traffic and browsing to optimize the user experience (via tools such as Google Analytics).

4. LEGAL BASIS FOR PROCESSING

The processing of your data is based on the following legal bases:

  • Performance of a contract: For the management of your orders and the commercial relationship.
  • Your consent: For sending newsletters and placing certain cookies.
  • Compliance with a legal obligation: Notably for the retention of invoices and accounting data.
  • Our legitimate interest: For the statistical analysis of traffic on our Website in order to improve our services.

5. DATA RETENTION PERIOD

We retain your data for a limited period necessary for the purposes for which they are processed:

  • Customer data (orders, contact): For the entire duration of the commercial relationship, then archived in accordance with legal limitation periods.
  • Marketing data (prospects): 3 years after the last contact from you (e.g., clicking on a newsletter).
  • Billing data: 10 years from the end of the financial year, in accordance with our legal obligations.

6. DATA RECIPIENTS

Your data is neither sold nor rented. It is only shared with trusted service providers essential for the performance of our services:

  • Website host for data storage.
  • Payment service providers (Stripe, PayPal) for securing transactions.
  • Carriers (e.g., La Poste, Mondial Relay) for the delivery of your orders.

These partners are required to comply with the GDPR and only use your data for the mission entrusted to them.

7. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION

Some of our service providers (notably payment platforms and audience analysis platforms) may be located outside the European Union. In the event of a transfer of your data to a third country, we ensure that it is governed by appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to guarantee a level of data protection equivalent to that required by the GDPR.

8. DATA SECURITY

We take the security of your data very seriously. We implement all necessary technical and organizational measures to protect your personal data against destruction, loss, alteration, disclosure, or unauthorized access. These include:

  • Encryption of the connection to our Website via the SSL (HTTPS) protocol.
  • Use of secure payment service providers compliant with the PCI-DSS standard.
  • Restricted and controlled access to personal data.

9. YOUR RIGHTS OVER YOUR DATA

In accordance with the GDPR, you have the following rights over your data:

  • Right of access
  • Right of rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability

To exercise these rights, simply send us a request by email to rosehillparis@gmail.com, providing proof of identity if necessary.

10. COOKIE MANAGEMENT

The Site uses cookies to improve your browsing experience and analyze its audience. On your first visit, an information banner allows you to accept, refuse, or configure the placement of these cookies.

  • Strictly necessary cookies: Essential for the operation of the Site (e.g., shopping cart management). They do not require your consent.
  • Analytics and performance cookies: Allow us to measure audience and improve our services (e.g., Google Analytics). They are only placed with your agreement.

You can change your preferences at any time via the cookie management link accessible at the bottom of the Site.

11. COMPLAINT

If you believe, after contacting us, that your rights are not being respected, you can file a complaint with the competent supervisory authority in France, the National Commission for Information Technology and Liberties (CNIL), on its website www.cnil.fr.