Privacy policy

Data Controller

Tour Sébastopol, 3 Quai Kléber, 67000 Strasbourg, France
Email: info@erboliabeauty.my
Phone: +33 3 88 23 70 58

Data We Collect

We collect the following categories of personal data:

  • Identity data: name, date of birth, gender

  • Contact data: postal address, email address, phone number

  • Transaction data: order history, payment details (processed by our payment providers — we do not store full card numbers)

  • Technical data: IP address, browser type, device information, cookies and usage data

How We Collect Data

We collect data when you:

  • Create an account or place an order

  • Subscribe to our newsletter

  • Contact our customer service

  • Browse our website (via cookies)

Purpose and Legal Basis



Purpose Legal Basis
Processing and delivering orders Performance of a contract
Customer service and after-sales support Performance of a contract
Fraud prevention and payment security Legitimate interest
Marketing communications (with consent) Consent
Website analytics (with consent) Consent

Data Sharing

We share personal data with the following categories of recipients:

  • Payment providers:— for processing payments

  • Shipping carriers:— for delivering orders

  • Analytics providers: — for website improvement (only with consent)

  • Legal authorities: when required by law

We do not sell personal data to third parties.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes described above:

  • Order and transaction data: 10 years (French accounting and tax obligations)

  • Account data: until account deletion, or 3 years after last activity

  • Marketing consent data: until consent is withdrawn

Cookies

Our website uses cookies. Essential cookies are necessary for the website to function. Non-essential cookies (analytics, marketing) are only placed after you give your consent via our cookie banner. You can withdraw your consent at any time through the cookie settings.

For more information, please see our Cookie Policy

Your Rights

Under the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Erase your data (right to be forgotten)

  • Restrict processing

  • Data portability

  • Object to processing

  • Withdraw consent at any time

To exercise these rights, contact us at info@erboliabeauty.my. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), the French data protection authority.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including SSL encryption and PCI-DSS compliant payment processing. We do not store full payment card numbers on our servers.