Privacy Policy

BLOOMY ASIA Limited is the publisher of the www.bloomycosmetics.com website and will hereinafter be referred to as "BLOOMY ASIA" for the purposes of this document.

BLOOMY ASIA places great importance on protecting your privacy and personal data, and has always committed to using the personal data of its customers and prospects only to the extent necessary for the proper functioning of the www.bloomycosmetics.com website (hereinafter the “Site”).

Personal data refers to information relating to an identified or identifiable natural person, directly or indirectly (hereinafter “Personal Data”).

Processing of personal data refers to any operation carried out on such data (collection, storage, transmission, deletion, consultation, modification, etc.), whether on paper or electronically. The data controller is the person who determines the purposes and means of each processing activity.

The collection and processing of your data is carried out in compliance with the applicable legal framework on personal data protection, notably the European Regulation 2016/679 of April 27, 2016 (GDPR), and the amended French Data Protection Act of 1978 (hereinafter the "Regulation").

This privacy policy describes how our website www.bloomycosmetics.com collects and uses personal data, and outlines how to access and delete this data when necessary (hereinafter the “Policy”).

BLOOMY ASIA reserves the right to modify this Policy at any time, particularly to reflect changes in its services or to comply with new applicable regulations. The version in force is the one available at the time of your access to the Site.

Users are therefore encouraged to regularly consult this Policy to stay informed of any updates.

Links to Third-Party Websites

Our website may contain links to third-party websites, apps, products, or services (such as Instagram, Facebook, LinkedIn, YouTube).

Please note that this document does not extend to such third parties, over whom we have no control and for whom we cannot be held responsible. We encourage you to review the privacy policies, procedures, and practices of these third parties.

By using our website www.bloomycosmetics.com, you accept the terms and conditions of this Policy. If you do not agree with any of the terms of this Policy, please refrain from using our contact forms to share your data with us.

1 – Why do we collect your personal data?

BLOOMY ASIA acts as the data controller when you provide us with your personal data through the “Contact” form on the site or during your browsing activity.

The data we collect is necessary to fulfill the following purposes:

• To provide the services and information you have requested via the contact form

• To respond to your questions and requests

• To ensure the operation and security of the website, and to improve its performance

• To organize marketing campaigns through the sending of email communications

2 – What data do we collect?

When you use our website, we collect and process the following personal data:

• Personal identification and contact information: gender, last name, first name, phone numbers, mailing address (city and postal code), country, email address

• Tracking, browsing, and connection data: IP address, cookies, logs. For more information about cookies and how to disable them, please refer to our Cookie Management Policy.

3 – What is the legal basis for processing your data?

The legal basis for processing your data is legitimate interest with regard to the processing of your personal data via our contact form, and consent for cookies that are subject to it. These cookies may be placed on your device; for information on how to object to them, their purposes, and their retention periods, please refer to our Cookie Management Policy.

4 – Who do we share your data with?

The Personal Data collected by BLOOMY ASIA is intended to be processed exclusively by BLOOMY ASIA.

The personal data collected through the contact forms and cookies is solely intended for BLOOMY ASIA administrators. We do not transfer personal data to countries that are not members of the European Union or the European Economic Area.

However, BLOOMY ASIA may be required to disclose personal data it processes to third parties when such disclosure is required by law, a regulatory provision, or a court decision, or if it is necessary to ensure the protection and defense of its rights.

5 – How long do we retain your Personal Data?

BLOOMY ASIA will retain your Personal Data only for as long as necessary to carry out the processing activities described. However, BLOOMY ASIA may retain your Personal Data for a longer period in order to comply with its legal and regulatory obligations.

We collect and use your personal data for the primary purposes described in section 1 and below. We retain your personal data only for as long as is necessary to fulfill these various purposes, except in cases where the law permits or requires us to retain it for a longer period.

These maximum retention periods apply unless you request the deletion or cessation of use of your data before they expire, for a reason compatible with any legal obligation that may apply to BLOOMY ASIA.

​

Purpose                                                                                    Data                                                                Retention period          

​

​Providing the services and information                          first name, last name, phone numbers,           3 years from the

you requested via the contact form                                 postal addresses, email address,                     last contact

                                                                                                 your organization

​

Responding to your questions and requests                 first name, last name, phone numbers,           3 years from the

​                                                                                                postal addresses, email address,                     last contact

​                                                                                                   your organization

​

6 – What are your rights and how can you exercise them?

6.1 What are your rights?

Right of access to your data
You may request confirmation as to whether or not your data is being processed and, where it is, access to all the data and information we hold about you.

Right to rectify your data
You may request, as soon as possible, the correction of any inaccurate or erroneous data concerning you. You may also request that your data be completed, if necessary.

Right to erase your data
Except in cases of legal exceptions, you may request that we delete your data as soon as possible, particularly if you believe that the processing of your data is no longer necessary in view of the purposes for which it was collected.

Right to data portability
You have the right to retrieve some of your data in an open, machine-readable format, or to request that it be transferred to another organization. This right applies only to data you have actively and knowingly provided (e.g., information entered in an online form) or data generated during the use of a service or tool as part of concluding or managing your contract, and that is processed automatically, based on your consent or the performance of a contract.

Right to object
You may object to your data being used by an organization for a specific purpose. You must provide reasons related to your particular situation, unless the objection concerns marketing communications, in which case you may object without giving any reason. If your data is processed for direct marketing purposes, you can object at any time (see section 5.2 of this Policy), as you may also object to the use of cookies at any time (see section 10 of this Policy).

Right to restrict the processing of your data
You may ask us to retain your data without using it, in the following cases:

• you dispute the accuracy of the data we are using,

• you object to your data being processed,

• the use is unlawful, but you oppose erasure,

• you need it for the establishment, exercise, or defense of legal claims.

Right to withdraw your consent to the processing of your data
Where the processing of your personal data is based on your consent (for example, receiving our commercial offers by email), you may withdraw your consent at any time (see section 6.2 of this Policy).

Similarly, to withdraw your consent to cookies, you may do so following the methods outlined in our Cookie Policy.

Right to give post-mortem instructions
You may set out instructions regarding the retention, deletion, and disclosure of your data after your death. These instructions define how you want your data rights to be exercised after your passing. You can send us these instructions by email at contact@bloomycosmetics.com (see section 6.2), using the subject line “Post-mortem instructions.” You may modify or revoke these instructions at any time.

Right to lodge a complaint with the CNIL
If you believe your rights are not being respected or that your data is not being protected in accordance with the GDPR, you may file a complaint with a competent supervisory authority at any time (in France, the CNIL), either directly on the CNIL website or by mail at:
CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07

6.2 How to exercise your rights?

To exercise any of your rights, send your request to: contact@bloomycosmetics.com

Each request must specify the purpose of the request (e.g., access right, objection, etc.) and the company concerned. The request must also be accompanied by proof of identity (e.g., client ID, member number, copy of identity card or passport), and must specify the email address to which the response should be sent.

We will respond within a maximum period of one (1) month from the date we receive your request. This period may be extended by two (2) months in the case of complex or numerous requests.

If, after contacting us, you believe that your data protection rights have not been respected, you may file a complaint with the CNIL.

This document was last updated on 05/03/2025.

​

​