Privacy Policy
1. Preamble
This Privacy Policy describes how Sourire Concept, LTD collects, uses, stores and protects your personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable standards in the United Kingdom, Europe and the United States.
2. Identity of the data controller
The data controller is:
Sourire Concept, LTD
71-75 Shelton Street, Covent Garden, WC2H 9JQ, London, United Kingdom
Registration number: 16506209
Email: contact@sourireconcept.fr
Phone: +33 7 51 12 18 67
3. Data collected
We collect the following information, only when necessary:
-
Identity: surname, first name
-
Contact details: postal address, email, telephone
-
Professional information: company, status
-
Purchase-related information: order history, preferences
-
Technical data: IP address, browser type, cookies
We do not collect or store your bank details. Payments are secure and processed exclusively by Stripe and PayPal.
4. Purposes of the processing
Your data is used for the following purposes:
-
Order Processing and Shipping
-
Customer Service Management
-
Sending commercial information, offers and newsletters (with your consent)
-
Improvement of the site and services (statistics, retargeting, personalization)
-
Regulatory compliance (billing, security, legal hold)
5. Legal basis for processing
We process your data on the following basis:
-
Consent: for newsletters, cookies and marketing prospecting
-
Contract Fulfillment: Orders, Payments, Delivery
-
Legitimate interest: improvement of our services, fight against fraud
-
Legal obligation: invoicing, accounting
6. Retention period
Personal data is stored:
-
Customer data: 3 years after the last contact or order
-
Billing data: 10 years (legal obligation)
-
Marketing data: until consent is withdrawn
7. Recipients of the data
The data may be transmitted to third parties for the purposes defined:
-
Payment providers: Stripe, PayPal
-
Hosting and e-commerce tools (CMS, email, analytics, CRM)
-
Logistics service providers (e.g. carriers)
-
Marketing tools (e.g. Mailchimp, Meta, Google Ads)
No commercial sharing or resale of your data is carried out.
8. Your rights
In accordance with the GDPR, you have the following rights:
-
Right of access to your data
-
Right to rectification or erasure
-
Right to restriction or objection of processing
-
Right to data portability
-
Right to withdraw your consent at any time
-
Right to lodge a complaint with a supervisory authority (CNIL: www.cnil.fr)
9. Exercising your rights
You can exercise your rights at any time:
-
Via our form: www.sourireconcept.fr/en/contact
-
Or by email: contact@sourireconcept.fr
10. Security
We apply advanced security measures:
-
SSL protocol
-
Firewall & Network Monitoring
-
Restricted access to data
-
Regular backups
-
PCI-DSS compliant platforms for payments
11. Cookies
Cookies may be placed to improve the user experience. You can manage your preferences via the cookie banner at the bottom of the site.
A detailed policy is available here: /en/politique-de-confidentialité
12. Amendments
We reserve the right to change this policy at any time. In the event of a substantial change, you will be notified by email or notification on the site.