PRIVACY POLICY

The privacy policy is current as of 06/06/2023

The purpose of the privacy policy is to detail the processing of data of users who use JOD's services. It allows you to describe how JOD uses and protects your personal data.

The user who uses the site accepts this privacy policy.

What kind of data do we collect?

When you make a purchase or create a customer account on our site, as part of our buying and selling process, we collect the personal information that you provide to us and which is necessary to prepare and deliver your package to you, such as your name, address and email address, postal address and telephone number.

This order data is transmitted to our logistics providers who prepare and transport the package to your home. They have absolutely no right to use your data for anything other than to process your order and must delete this data from their computer system after processing.

When you browse our site, we automatically receive your computer's Internet Protocol address (IP address), which allows us to obtain more details about the browser and operating system you are using. Additionally, data may be stored in or retrieved from your browser, usually in the form of cookies. They collect information about you, your preferences or your device and browser. They are generally established as a response to actions you have performed which constitute a request for services (e.g. order).

Emails:

If you have decided to follow JOD by email (via the form on our site or by checking the corresponding box in the purchasing process), we use your email address to send you JOD news (new products, advice and tips , interviews and portraits of ambassadors, etc.) or to provide you with information relating to your purchasing or browsing history on our site. Please note that if you no longer want to receive these emails, you can unsubscribe at any time by clicking on the “Unsubscribe” unsubscribe link located at the bottom of the emails or by contacting us at contact@jodcosmetics.com . The effect is immediate.

Audience measurement:

We use audience analysis tools (such as Google Analytics) allowing us to better understand the activity on our site, how you react, and to improve the performance of our site so that it corresponds as closely as possible to your uses. As such, we provide these tools with data on your browsing history on our site and information on the products ordered. All data manipulated for statistical purposes outside Europe is completely anonymized.

Do we use cookies?

Our company uses cookies which record certain information, stored in the memory of their hard drive.

The cookies installed by JOD are intended to facilitate user navigation on the Site, they allow them to:

• establish traffic statistics for the Site;
• adapt the presentation of the Site to the display preferences of the User's device;
• memorize information entered in forms, manage and secure access to User accounts or the shopping cart as part of an Order;
• provide content, including advertising, personalized for the user.

Certain cookies may also be issued by our partners to:

• personalize the user experience outside the Site;
• identify the Products viewed or purchased on the Site;
• send the newsletter if the User has subscribed to it;

We broadcast an alert message (banner), asking each person visiting the site if they wish to accept cookies. They do not contain any confidential information concerning users of the site.

The banner will inform the user:

• On the precise purposes of the cookies used;
• On the possibility of opposing these cookies and changing settings by clicking directly on a link;
• On the fact that continuing to browse constitutes agreement to the placement of cookies on your terminal.

The issuance and use of third-party cookies is governed by the provisions of their respective privacy policies.

The deposit and reading of cookies will not be carried out if the user refuses the deposit of cookies.

Who collects your data?

The JOD website collects your personal data.

But also our logistics providers who prepare and transport the package to your home.

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our services and products to you.

Your data is stored in Shopify's data storage system and databases, and in the general Shopify application. Your data is stored on a secure server protected by a firewall.

Payment:

If you make your purchase through a direct payment gateway, then Shopify will store your credit card information. This information is encrypted in accordance with the payment card industry's data security standard (PCI-DSS). Information relating to your purchase transaction is retained for as long as necessary to complete your order. Once your order is finalized, the information relating to the purchase transaction is deleted.

All direct payment gateways comply with the PCI-DSS standard, managed by the PCI Security Standards Council, which is the joint effort of companies such as Visa, MasterCard, American Express and Discover.

PCI-DSS requirements ensure the secure processing of credit card information by our store and its service providers.

For more information, please see Shopify's Terms of Service and Privacy Policy.

We collect information when you register on our site, when you log into your account, make a purchase, participate in a competition, and when you log out. The information collected is that which you entered. This includes your name, email address, phone number and credit card.

We inform the user that we automatically receive and store information from their computer and browser.

For what purpose is my data collected?

The site, the company and all other persons concerned collect your data for the purpose of:

Communicate with you; Process your transactions; Providing our services; Security and fraud prevention; Comply with the law-Commercial statistics ; Therefore, any information we collect from you may be used to:

Personalize your experience and improve customer service by better meeting your needs; Display targeted advertising content; Being able to contact you; Be able to respond to requests from judicial authorities;

How long is your data kept?

The length of time we retain personal data depends on our business needs and legal obligations.

As part of the purchase of products, we keep your data as long as they are necessary for the purposes for which they were collected (e.g. management of the commercial relationship between you and us), and for all other related purposes such as monitoring our stocks but while complying with applicable legislation regarding data security and retention.

If you agree to receive emails from JOD to follow our adventure, your data is kept until your request to unsubscribe or delete your personal data, or after a certain period of no activity (for a maximum of 3 years from of the last contact (eg: click in one of our emails).

If a customer account is created, the data will be kept until you send a request to delete it or after a period of inactivity on your part (for a maximum of 3 years from from the end of the commercial relationship (e.g.: last order) or from the last contact (e.g.: click in one of our emails).

When you contact us to obtain information about our products, or about our brand, or when you apply for a job offer, the data is only kept for 3 years from the date of collection or the last contact with you. initiative.

Is the data collected about me sold or disclosed to third parties?

The company is the sole owner of the information collected on this site. Information collected in this way will not be sold to any other company without your consent, other than as necessary to respond to a request or transaction.

Personally identifiable information will not be transferred to third parties, except to third parties who enable the Company to operate this site, or conduct its business. Third parties undertake to keep this information confidential.

In addition, we will share information necessary for an investigation, or to prevent illegal activities or any situations involving potential threats to the physical safety of individuals. More broadly, we will share information when the law requires us to do so.

Non-private information may be provided to other parties for any commercial use.

On what basis is my data collected?

Personal data will be collected by this site and the company only in cases where applicable regulations permit it and in particular under the following conditions:

You have given free, specific, informed and unequivocal consent regarding the processing of your personal data;

The information provided is necessary for the execution of the contract or pre-contractual measures taken at your request;

To ensure compliance with the legal or regulatory obligations of the company or the site.

When the interests of the company or the site are such as to justify processing by the site or the company of your personal data accompanied by adequate protection guarantees.

For minors under 16 years of age, consent can only be given or authorized by the holder of parental authority.

How is the security of my personal data preserved?

The site uses security measures to protect the personal information you transmit to us.

Sensitive information transmitted online is protected by state-of-the-art encryption.

Additionally, the company implements protections for offline information. The servers that host this data are stored in a secure environment.

Except for employees who need access to this data (billing, leads, customer service), no one has access to this personally identifiable information.

What are my rights ?

We inform you that you have several rights, listed below:

The right of access : if the user requests it, the company will provide him with a copy of the personal data concerning him;

The right to object : the user has the right to object to their personal data being processed by the company.

The right to limit processing : the user has the right to ask the company to limit the processing of their personal data, in particular when the user opposes this processing, contests the accuracy of the data or when he believes that its use is illegal.

The right to data portability : the user can, under certain conditions, request to receive all of their personal data to transfer them to another data controller, without the company being able to object.

The right to rectification : the user can ask the company to rectify the personal data communicated to them by them.

The right to be forgotten : under certain conditions, the user has the right to obtain from the company that it erases certain personal data concerning him as soon as possible. The right to be forgotten can only be obtained in certain cases and in particular for reasons of public interest, for archival purposes or to comply with legal obligations conditioning the processing of personal data by the company.

Provided they provide proof of their identity, users can exercise their right with the company by email to the following address: contact@jodcosmetics.com

The company undertakes to respect the directives given by any user relating to the conservation, erasure and communication of their personal data after their death. In the absence of instructions from the user, the company will grant the requests of the heirs as set out by the applicable provisions of the Data Protection Act.

Failing this, complaints relating to the processing of your personal data can be addressed to the Commission Nationale de l'Informatique et des Libertés at the following address: 3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex.