Privacy Policy & Personal Data Protection – Abeerah Boutique
Abeerah Boutique places great importance on protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection laws.
By using our website, you agree to the practices described in this Privacy Policy.
1. Data Controller
The data controller responsible for processing your personal data is:
Company Name: Abeerah Boutique
Legal Structure: SAS
Business Address: France
Email: contact@abeerahboutique.fr
Website: www.abeerahboutique.fr
For any questions regarding your personal data, you may contact us using the details above.
2. Personal Data We Collect
We collect only the personal data necessary to provide our services.
2.1 Identification Data
- First and last name
- Email address
- Phone number
- Shipping and billing address
2.2 Order & Transaction Data
- Order history
- Products purchased
- Purchase amounts
- Payment method used (no full card details are stored)
2.3 Browsing & Technical Data
- IP address
- Browser type
- Pages visited
- Cookies and tracking data
3. Purposes of Data Processing
Your personal data is collected and processed for the following purposes:
3.1 Order Management (Legal Basis: Contract Performance)
- Order processing and confirmation
- Product preparation and shipping
- Delivery tracking
- Invoicing
- Customer support and after-sales service
3.2 Customer Relationship Management (Legal Basis: Contract & Legitimate Interest)
- Responding to customer inquiries
- Managing customer accounts
- Improving our products and services
3.3 Marketing & Communication (Legal Basis: Consent)
- Sending newsletters and promotional offers
- Personalizing communications
- Conducting customer satisfaction surveys
You may withdraw your consent at any time.
3.4 Legal Obligations (Legal Basis: Legal Obligation)
- Accounting and invoicing
- Compliance with tax regulations
- Fraud prevention
3.5 Analytics & Website Optimization (Legal Basis: Legitimate Interest)
- Website traffic analysis
- Improving user experience
- Optimizing product offerings
4. Legal Basis for Processing
In accordance with GDPR, your data is processed based on:
- Contract execution (order processing and delivery)
- Consent (marketing communications and cookies)
- Legal obligations (accounting and tax compliance)
- Legitimate interest (service improvement and fraud prevention)
5. Data Recipients
Your personal data may be shared with:
- Authorized staff of Abeerah Boutique
- Technical service providers (website hosting, payment gateways)
- Delivery partners (Colissimo, Chronopost, DHL, UPS, or similar couriers)
- Marketing service providers (with your consent)
- Legal or administrative authorities when required by law
All partners are required to ensure confidentiality and data security.
6. Transfer of Data Outside the European Union
Some data may be transferred outside the European Union, particularly when using international service providers such as hosting or payment platforms.
These transfers are protected by GDPR-approved safeguards, including:
- Standard contractual clauses
- Adequacy decisions by the European Commission
7. Data Retention Period
Your personal data is retained only for as long as necessary:
- Active customer data: 3 years from last purchase
- Prospect data: 3 years from data collection
- Billing and accounting data: 10 years (legal requirement)
- Cookies and browsing data: 13 months
After these periods, data is deleted or anonymized.
8. Your Rights Under GDPR
You have the following rights regarding your personal data:
8.1 Right of Access
Request access to your personal data and processing details.
8.2 Right of Rectification
Request correction of inaccurate or incomplete data.
8.3 Right to Erasure (Right to Be Forgotten)
Request deletion of your data under certain conditions.
8.4 Right to Restriction of Processing
Request limitation of data processing in specific cases.
8.5 Right to Data Portability
Receive your data in a structured, commonly used format.
8.6 Right to Object
Object to data processing, especially for marketing purposes.
8.7 Right to Withdraw Consent
Withdraw consent at any time for consent-based processing.
8.8 Post-Mortem Data Rights
Set instructions regarding your personal data after death.
How to Exercise Your Rights
You may contact us:
- By email: contact@abeerahboutique.fr
- By post: Abeerah Boutique, France
We will respond within one month. Proof of identity may be requested to ensure data security.
9. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you may file a complaint with:
CNIL – Commission Nationale de l’Informatique et des Libertés
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr
10. Data Security
We implement strong technical and organizational measures to protect your data, including:
- SSL/TLS encryption
- Secure payment gateways
- Restricted access to personal data
- Regular system backups
- Staff data protection training
11. Cookies Policy
Abeerah Boutique uses cookies to improve browsing experience and analyze website performance.
Types of Cookies Used
- Essential cookies: Website functionality (cart, login)
- Analytics cookies: Traffic measurement (with consent)
- Marketing cookies: Personalized advertising (with consent)
You can manage or withdraw cookie consent at any time through the cookie banner or browser settings.
12. Changes to This Privacy Policy
Abeerah Boutique reserves the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated effective date.
We encourage you to review this policy regularly.