Privacy Policy

​

BLOOMY PARIS SAS is the publisher of the www.bloomycosmetics.com website and will hereinafter be referred to as "BLOOMY PARIS" for the purposes of this document.

BLOOMY PARIS places great importance on protecting your privacy and personal data, and has always committed to using the personal data of its customers and prospects only to the extent necessary for the proper functioning of the www.bloomycosmetics.com website (hereinafter the “Site”).

Personal data refers to information relating to an identified or identifiable natural person, directly or indirectly (hereinafter “Personal Data”).

Processing of personal data refers to any operation carried out on such data (collection, storage, transmission, deletion, consultation, modification, etc.), whether on paper or electronically. The data controller is the person who determines the purposes and means of each processing activity.

The collection and processing of your data is carried out in compliance with the applicable legal framework on personal data protection, notably the European Regulation 2016/679 of April 27, 2016 (GDPR), and the amended French Data Protection Act of 1978 (hereinafter the "Regulation").

This privacy policy describes how our website www.bloomycosmetics.com collects and uses personal data, and outlines how to access and delete this data when necessary (hereinafter the “Policy”).

BLOOMY PARIS reserves the right to modify this Policy at any time, particularly to reflect changes in its services or to comply with new applicable regulations. The version in force is the one available at the time of your access to the Site.

Users are therefore encouraged to regularly consult this Policy to stay informed of any updates.

Links to Third-Party Websites

Our website may contain links to third-party websites, apps, products, or services (such as Instagram, Facebook, LinkedIn, YouTube).

Please note that this document does not extend to such third parties, over whom we have no control and for whom we cannot be held responsible. We encourage you to review the privacy policies, procedures, and practices of these third parties.

By using our website www.bloomycosmetics.com, you accept the terms and conditions of this Policy. If you do not agree with any of the terms of this Policy, please refrain from using our contact forms to share your data with us.

​

1. Data Controller

The company BLOOMY PARIS, a simplified joint-stock company (SAS) with a share capital of €40,000, whose registered office is located at 60 rue François 1er, 75008 Paris, registered with the Paris Trade and Companies Register under number 943 022 103, is responsible for the processing of personal data collected via the website www.bloomycosmetics.com.

If you have any questions about this Policy or how your data is processed, you can contact BLOOMY PARIS at the following email address: hello@bloomycosmetics.com.

  2. What Personal Data Do We Collect?

We may collect and process the following types of personal data:

• Identification data: First and last name, email address, postal address, phone number.

• Connection data: IP address, browser type, operating system, pages visited, and browsing behavior.

• Purchase-related data: Order details, billing and delivery addresses, and transaction information.

• Any other information you choose to provide via our contact forms or by email.

We only collect data that is strictly necessary for the purposes outlined in this Policy.

​

 3. Why Do We Collect Your Personal Data?

We process your data for the following purposes:

• To process and manage your orders and deliveries.

• To manage our customer relationship (including after-sales service).

• To respond to your contact requests or questions.

• To send newsletters and marketing offers, if you have given your consent.

• To manage your participation in promotions or events organized by BLOOMY PARIS.

• To improve our website, our products, and our services.

• To comply with our legal obligations (notably accounting and tax obligations).

The legal basis for this processing may vary depending on the purpose:

• The performance of a contract (e.g., order management).

• Your consent (e.g., subscription to newsletters).

• Our legitimate interest (e.g., improving our services or preventing fraud).

• A legal obligation (e.g., accounting records).

​

 4. How Long Do We Keep Your Data?

We retain your personal data only for as long as necessary for the purposes for which it was collected, in compliance with applicable laws.

• Customer account data: kept as long as your account is active, and then archived for the duration of the legal limitation period.

• Order and billing data: kept for 10 years in accordance with accounting and legal obligations.

• Prospect data (newsletter subscribers, etc.): kept for 3 years from the last contact or interaction, unless you withdraw your consent before.

• Cookies and trackers: kept for a maximum of 13 months.

After these periods, your data is deleted or anonymized.

​

 5. Who Do We Share Your Data With?

BLOOMY PARIS will retain your Personal Data only for as long as necessary for the purposes for which it was collected and processed. However, BLOOMY PARIS may retain your Personal Data for a longer period to comply with its legal and regulatory obligations.

We collect and use your personal data primarily for the purposes described in Section 1 and below. We retain your personal data only for the time necessary to fulfill those various purposes, unless the law permits or requires us to retain it for a longer period.

These maximum retention periods apply unless you request the deletion or cessation of use of your data before their expiration, for a reason compatible with any legal obligation that may apply to BLOOMY PARIS.

​

Purpose                                                                                  Data                                                                       Retention Period          

​

Providing the services and information                           first name, last name, phone numbers,           3 Years from the last

you requested via the contact form                                 postal address, email address,                          contact                      

                                                                                                 your organisation 

​

Responding to your questions and requests                  first name, last name, phone numbers,           3 Years from the last

                                                                                                 postal address, email address,                          contact                      

                                                                                                 your organisation 

​​

​

6. What Are Your Rights and How Can You Exercise Them?

​

 6.1 Your Rights

Under the applicable data protection laws (including the GDPR), you have the following rights:

​

• Right of access: You can request confirmation of whether we are processing your data and obtain a copy of it, along with details on how we use it.

• Right of rectification: You can ask us to correct inaccurate or incomplete personal data.

• Right to erasure ("right to be forgotten"): You may ask us to delete your data, especially if it’s no longer needed for the purposes for which it was collected, or if you withdraw your consent.

• Right to data portability: You may request a copy of your data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller, where technically feasible.

• Right to object: You may object to the use of your personal data for certain purposes, including direct marketing, at any time.

• Right to restrict processing: You may request that we limit how we use your data, for example, while we verify its accuracy or consider an objection you have raised.

• Right to withdraw consent: Where data processing is based on your consent (e.g., for newsletters or cookies), you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

• Right to set post-mortem instructions: You may define instructions regarding the retention, deletion, and communication of your personal data after your death.

• Right to lodge a complaint with a supervisory authority: If you believe your data protection rights are not respected, you may file a complaint with the relevant data protection authority. In France, this is the CNIL (www.cnil.fr).

​

6.2 How to Exercise Your Rights

To exercise your rights, please contact us at:

📧Email: contact@bloomycosmetics.com
📬Address: BLOOMY PARIS – Attn: Customer Service Compliance, 60 rue François 1er, 75008 Paris, France

Please include:

• The subject of your request (e.g., “right of access” or “right to erasure”),

• A valid proof of identity (e.g., customer number, copy of ID),

• The email address to which we should send our response.

We will respond within one (1) month of receiving your request. This may be extended by up to two (2) months for complex or multiple requests

​

If you are unsatisfied with our response, you can file a complaint with the CNIL.