Privacy policy
Embodme attaches great importance to the protection of your personal data.
This privacy policy describes how we collect and process your personal data.
The personal data contains all the information concerning an identified or identifiable physical individual.
This privacy policy explains how Embodme collects and processes your personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR) and applicable French data protection law.
data controller
The controller responsible for processing your personal data is EMBODME SAS, 81 rue des poissonniers, 75018 Paris, France (RCS Paris 843 725 714). For any question about your personal data or to exercise your rights, you can contact us at contact@embodme.com.
article 1: collection
Embodme , by collecting and processing your personal data, is responsible for the processing of personal data as required by national legislation concerning the protection of personal data. The personal data that is collected contains the information that you provide us with when you fill out a form to open an account on our site, whenever you purchase products on our website or whenever you contact us. This information is in particular contact information, such as your name, your address, your telephone number, your email address. Also collected as part of this process are details about orders, purchases, deliveries, invoices etc. Personal data may also be collected automatically when you visit our website or open an account. This data may be obtained through the use of cookies that you have accepted when you enter our site and cookies which come from third-party sites. The connection data, such as your IP address or your browsing history may also be collected. The data which is collected is sent to the Sales Department at Embodme.
article 2: purpose / use
2.1) purpose of the collection and the processing of personal data
The reason that we collect and process your personal data is to allow us to improve our products, to provide you with a customer service, to make your visit to the site a more personal experience, to allow you to save your shopping cart, manage your orders, and with your consent, to send you promotional messages and other information about us.
2.2) sales canvassing
In the absence of your agreement, we undertake not use your personal data for sales canvassing purposes. You can unsubscribe and opt out of receiving promotional messages by changing the settings on your account.
2.3) legal basis for processing
We process your personal data on the following legal bases: the performance of our contract with you (creating your account and managing your orders, deliveries and after-sales service); your consent (analytics and advertising cookies, and marketing emails), which you may withdraw at any time; our legitimate interest in improving our products and keeping our site secure; and compliance with our legal obligations, in particular accounting and tax record-keeping.
article 3: cookies
A cookie is a small file stored on your device that records information about your browsing. When you first visit our site, a consent banner lets you accept or refuse non-essential cookies. Essential cookies — needed for the shopping cart, security and remembering your language choice — are always active, because the site cannot work without them. Analytics and advertising cookies (Google Analytics, Google Ads, Google Tag Manager and the Meta/Facebook pixel) are placed only after you have given your consent, and never before. You can change or withdraw your choice at any time using the 'Cookie settings' link in the footer of the site. Your consent choice is stored for six (6) months, after which you will be asked again.
article 4: duration of conservation of data
We keep your personal data only for as long as necessary for the purposes for which it was collected: account and contact data are kept for three (3) years after your last activity; order and invoicing data are kept for ten (10) years to meet our legal accounting and tax obligations; and your cookie consent choice is kept for six (6) months. At the end of these periods your data is deleted or anonymised.
article 5: right of access and rectification, modification
In accordance with the GDPR, you have the right to access your personal data and to obtain its rectification, erasure or portability, as well as the right to restrict or object to its processing and to withdraw your consent at any time (without affecting processing carried out before withdrawal). You may exercise these rights by logging into your account or by emailing contact@embodme.com; we may take appropriate steps to verify your identity first. You also have the right to lodge a complaint with the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL, www.cnil.fr), or with the supervisory authority of your country of residence.
article 6: disclosure
Your data will not be sent to third parties, and in particular to our commercial partners, without your express consent. In certain cases, we may be forced to release your data in accordance with mandatory legal provisions. Data may in particular need to be sent to public authorities, as part of a police investigation, or to financial organisations in particular with regard to payments.
article 7: security
We guarantee that we take every appropriate precaution to preserve data security so as to prevent the data from being damaged or tampered with or unauthorized third parties from gaining access and misusing the data. As part of our security measures we use data encryption using SSL (Secure-Socket- Layer) software, and firewalls. If you think that your account may have been pirated, please contact us at the following contact@embodme.com
article 8 - third-party services
We hand over information that we receive to third parties solely for the purposes described in the following:
a. In certain circumstances, under force of law, Embodme must disclose information to third parties. This occurs notably when law enforcement authorities oblige Embodme to disclose information relating to a suspected crime or abuse. Cases regarding companies who are inquiring about credit card abuse are included.
b. Google Analytics
Google Analytics is a web analytics service provided by Google, Inc. that Embodme uses to help analyze how the site is used; this service uses cookies that generate information about your use of the website, which is then transmitted to and stored by Google on servers in the United States. This information will be used by Google to evaluate your use of the website, compiling reports on website activity for Embodme and providing other services relating to website activity and internet usage. To opt out of this so that your activity on this website is not tracked, follow this link: https://support.google.com/ads/answer/2662922?hl=en
c. Google - Remarketing
Re-marketing is Google’s program for “interest-based advertising”, which Embodme uses within the scope of its marketing operations. A special browser cookies is stored on the user’s computer in order to complete this process. This allows Embodme, Google or third-party services to serve users special ads when visiting other websites.
d. Facebook
Our site uses the Meta (Facebook) pixel to measure the performance of our advertising and to show you relevant ads on Meta platforms. The pixel loads only after you have given your consent, and may set cookies and transmit data to Meta Platforms Ireland Ltd and to Meta in the United States. You can withdraw your consent at any time using the 'Cookie settings' link in the footer, and you can manage your advertising preferences in your Facebook account settings.
e. PayPal and BNP
Financial transactions are handled by our payment service providers: BNP and PayPal. We will only share transaction data with them for the purposes of processing your payments and refunds.
f. Happyfox
Embodme uses Happyfox for processing submitted requests to our customer service. The services are offered by the company Happyfox Inc., Irvine, California. Further information can be found in Happyfox's privacy policy: https://www.happyfox.com/privacy-policy/
g. MailChimp
Embodme uses Intuit Mailchimp to send newsletters and targeted emails. This service is provided by The Rocket Science Group LLC (an Intuit company), 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Where your personal data is transferred to the United States, the transfer is governed by the EU-U.S. Data Privacy Framework and/or the European Commission's standard contractual clauses. Further information can be found in Mailchimp's privacy policy: https://mailchimp.com/legal/privacy/
international data transfers
Some of our service providers (in particular Google, Meta, Mailchimp and Happyfox) are located in the United States. When your personal data is transferred outside the European Union / European Economic Area, we ensure an adequate level of protection by relying on a European Commission adequacy decision (including the EU-U.S. Data Privacy Framework) or on the European Commission's standard contractual clauses.