Personal Data Protection Policy
When you browse our website, you may be asked to share personal information with us. We appreciate your trust and want to be transparent about how your data is used and what rights you have.
Data Controller
The data controller for personal data is Mr. Julien HUOT, whose contact details can be found in the legal notices.
Our Data Protection Officer is Ms. Céline BARBIER.
Purposes of Data Collection and Processing
We collect the data you provide when placing an order or getting in touch with us. Required fields are indicated as such.
Personal data collected on our website is used to process orders and manage our commercial relationship with you (deliveries, invoices, after-sales service).
Recipients of Personal Data and Service Providers
The recipients of the personal data collected on our site are first and foremost ourselves, for processing your orders and managing our relationship with you.
To fulfil your order and run the site, we use the following service providers. Each receives only the data needed for its task:
- PayPlug: secure payment of your order.
- Sendcloud, Mondial Relay, Colissimo (La Poste) and UPS: label preparation, delivery and tracking of your parcel (name, address, email, phone).
- Brevo (formerly Sendinblue): sending our emails, whether order updates or our newsletter if you have subscribed.
- Société des Avis Garantis: collection of customer reviews after an order (see below).
- Axeptio: collecting and storing your cookie choices.
- Google Analytics and Meta: measuring site audience and the effectiveness of our advertising, only if you have accepted the corresponding cookies.
- Google reCAPTCHA: protecting our forms against automated submissions.
- Anthropic: our advice assistant "Théa" relies on an artificial intelligence service. The text of your questions is sent to it to produce the answer; please do not enter personal or sensitive information.
Some of these providers (in particular Google, Meta, Anthropic and UPS) may process data outside the European Union. These transfers are covered by the safeguards provided for by the regulations (adequacy decision or standard contractual clauses). We never sell or rent your data.
Customer Reviews: Société des Avis Garantis
Our customer reviews are collected by an independent third party, Société des Avis Garantis. After your order, we send it the information needed to invite you to leave a review: first name, last name, email address, and the date, reference and contents of the order.
This processing is based on our legitimate interest in collecting genuine reviews from real buyers. You are free not to respond to this invitation, and you can object to it at any time by writing to contact@thes-traditions.com.
Your Rights
You have the right to obtain, free of charge, information about the personal data we hold about you, and to request its correction, restriction of processing, data portability, or deletion, as applicable.
As a data subject, you have the following rights: Under Article 15 of the GDPR, you have the right to access personal data concerning you. Under Article 16 of the GDPR, you have the right to have inaccurate personal data rectified without undue delay, and to have incomplete data completed.
Under Article 17 of the GDPR, you have the right to erasure of personal data where processing is no longer necessary for: the exercise of the right to freedom of expression and information; compliance with a legal obligation; a task carried out in the public interest; or the establishment, exercise, or defence of legal claims. Under Article 18 of the GDPR, you have the right to restriction of processing where: you contest the accuracy of the data; the processing is unlawful but you oppose erasure; we no longer need the data but you require it for the establishment, exercise, or defence of legal claims. Under Article 21 of the GDPR, you have the right to object to the processing of your data. Under Article 20 of the GDPR, you have the right to receive your data in a structured, commonly used, and machine-readable format (right to data portability).
Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. For any questions regarding the collection, processing, or use of your personal data, or for any requests for information, correction, blocking, or deletion of data, as well as to withdraw consent or object to a particular use of your data, please contact the person below (please include your name and contact details).
Cookies
Our website uses cookies: small text files stored on your device. This serves our legitimate interests in presenting our offering in an optimised way, which takes precedence following a balancing of the respective interests of all parties.
The cookies used on our site allow us to offer you the following features: wishlist, shopping cart saving, recognition on return visits, and browsing history.
Most cookies are designed to enable or facilitate your browsing and are necessary for our online store to function. The use of first- or third-party cookies that are not strictly necessary for the site to operate requires your express consent.
When you first visit our site, we collect your express consent to the placement of certain cookies on your device (for example: advertising cookies, audience measurement cookies, social media cookies) via a banner on our homepage.
You can give or withdraw your consent to the use of cookies by adjusting your browser settings accordingly. Each browser handles cookie settings differently; please refer to your browser's help guide for instructions.
Declining cookies may limit certain features of our website.
Commercial Email Marketing and Newsletter Subscription
We send commercial emails on the legal basis of your express consent, collected when you subscribe to the newsletter or tick the "receive the newsletter" box on the order summary page. If you no longer wish to receive commercial emails from us, you may let us know at any time using one of the following methods:
• click the unsubscribe link in any email
• send an email to the following address stating your reason: contact@thes-traditions.com
• in "My Account" or your customer area, go to the Newsletter section and uncheck the relevant box
After you unsubscribe, we will delete your email address, unless you have expressly consented to further use of your data or we reserve the right to a broader use of data permitted by law, as described in this statement.
Storing Payment Details
To make your shopping experience easier, we offer the option to save your payment details so you do not need to re-enter them with each new order. The legal basis for storing your payment details is your consent. Your card details (card number, expiry date, cardholder name) are therefore only saved if you have given your prior consent. We will never store the security code (CVV) on the back of your card. You may withdraw your consent to the storage of your payment details at any time by sending a message to contact@thes-traditions.com. Your payment details will then be deleted from our systems.
All cards saved with us are visible in the "My Account" section and are protected by SSL encryption. Saved cards can be deleted at any time.
Right to Object
Where we process personal data as described above in order to protect our legitimate interests that take precedence following a balancing of the respective interests of all parties, you may object to such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you may only object on grounds arising from your particular situation.
Once you have exercised your right to object, we will no longer process your personal data for those purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing serves the establishment, exercise, or defence of legal claims.
This does not apply where processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.
Loyalty Programme and Referrals
Our loyalty programme is run by Thés & Traditions itself, with no outside provider. To operate it, we process your points balance, the record of points earned and used (linked to your orders), the vouchers you obtain and, if you take part in a mission, the item you send us (link or photo), which our team reviews before crediting the points. This processing is based on the performance of the programme in which you take part as a customer.
Referrals: when you invite a friend by email, their address is used only to send them a single message on your behalf. It is not kept: we store only a non-reversible encrypted fingerprint, so that we do not write to them twice. When a friend creates an account using your link, we record the link between the two accounts, the order concerned and the IP address used, for the sole purpose of preventing abuse. This processing is based on our legitimate interest in keeping the programme secure.
This data is kept for as long as your customer account is active, and deleted at your request. You can ask at any time to stop taking part in the programme, or exercise your rights, by writing to contact@thes-traditions.com.
