Terms of Service

Our data protection policy is designed to build a relationship of trust between you and our services, and to offer you a positive and fully transparent experience.

AD EVOLIS, which operates Blossaglow, is committed to respecting your personal data and the privacy of our customers ("Your Data").

To guarantee secure use of the Blossaglow website in all its versions (the "Blossaglow Website"), we explain how we process your data so that our services always respect your rights and the confidentiality of your information across all our platforms.

We take all necessary precautions to protect your data against disclosure, loss or alteration. Your data is kept only for as long as necessary for the purposes described below, and you can access and change it at any time by contacting us.

Blossaglow is committed to complying with the essential principles of the European General Data Protection Regulation (GDPR) and French data protection law. This policy describes how your data is processed (section 2), where it goes (section 3), how long it is kept (section 4), your rights (section 5), cookies (section 6), transfers outside the European Union (section 7) and our security measures (section 8).

1. Who are you?

"You" means you as a customer of Blossaglow if you have placed an order on the Blossaglow Website, or as a visitor if you have browsed the Blossaglow Website without placing an order.

2. Why do we process your data?

2.1. When do we collect your personal data? Your personal data may be collected when you visit the Blossaglow Website, which uses cookies, when you place an order for one of our products, or when you subscribe to our newsletter.

Your personal data helps us make your browsing smoother and more personalised, process your orders, prevent fraud, issue refunds and manage customer reviews.

2.2. Browsing the Blossaglow Website: we process your data on the legal basis of your consent.

2.3. Processing your orders: we use your data to manage your orders, customer relations (including through social media), after-sales service, marketing and commercial prospecting, and the delivery of orders. The performance of the contract between you and us is the legal basis for this processing. Our legal obligations are the legal basis for managing product recalls. Your consent or our legitimate interest, depending on the case, is the legal basis for marketing and prospecting.

2.4. Customer reviews: we use your data to allow you to leave a review on the Blossaglow Website and to share reviews with our customers and visitors, on the legal basis of your consent or our legitimate interest.

2.5. Payment collection and fraud prevention: we use your data to collect payments, prevent fraud and ensure the security of payments. The performance of the contract and Blossaglow's legitimate interest as data controller are the legal bases for this processing.

3. Where does your data go?

Your data is shared only with the Blossaglow teams who need it. It is not sent to third parties, except to the service providers we use to process your orders, who specialise in payment transactions, customer relations, after-sales service, delivery, IT development, website management and the provision of guarantees or insurance.

4. Data retention

Blossaglow keeps the data it collects only for as long as necessary to carry out the operations described in section 2.

Prospect data is kept in active archives for 3 years from the last contact. Order and customer data is kept in active archives for 5 years from the end of the business relationship, then in intermediate archives for a further 5 years. Payment card data is kept for the validity period of the card only, without intermediate archiving. Data with administrative relevance, such as data needed for litigation, is kept for the applicable limitation periods.

5. Your rights

• 5.1. You have the right to access, modify and rectify your data.
• 5.2. You have the right to request the restriction of processing of your data, in particular while we verify the accuracy of data you contest, if you consider the processing unlawful but prefer restriction to erasure, if we no longer need the data but you need it to establish, exercise or defend legal claims, or while we verify whether our legitimate grounds override yours following an objection.
• 5.3. You have the right to request the erasure of your data. Blossaglow may nevertheless keep it in intermediate archives for as long as necessary to meet its legal, accounting and tax obligations.
• 5.4. You have the right to object to the processing of your data for commercial prospecting. For marketing emails, you can unsubscribe at any time by clicking the "unsubscribe" link included in every newsletter or by contacting us.
• 5.5. You have the right to give instructions regarding the retention, erasure and communication of your personal data after your death. Without such instructions, your heirs may contact Blossaglow to settle your estate, close your account or request that processing stops.
• 5.6. You have the right to data portability.
• 5.7. You have the right to withdraw your consent to processing based on consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
• 5.8. You have the right to lodge a complaint with the competent supervisory authority at any time (in France, the CNIL: www.cnil.fr).

To exercise your rights, please send your request, with your email address, full name and postal address, to contact@blossaglow.com. We may ask for proof of identity if we have reasonable doubts about it. We will reply within one (1) month of receiving your request.

6. Cookies

6.1. What is a cookie? When you browse a website such as Blossaglow, a small text file called a cookie may be placed on your device (computer, phone or tablet) through your browser, depending on your choices. During its period of validity, a cookie allows the website to recognise your device on your next visit. Only the issuer of a cookie can read or modify the information it contains.

6.2. What are cookies used for on Blossaglow? Some cookies are placed by Blossaglow and its service providers, and some come from third parties.

• Essential cookies are necessary to access our website and, for example, to place an order. Without them, you may experience browsing problems and be unable to order. They also allow Blossaglow to monitor its activity.
• Analytics and personalisation cookies are not mandatory. They help us make your searches easier, optimise your experience, better understand your expectations, adapt our offers and improve the organisation of our website.
• Advertising cookies allow us and our advertising partners, such as Meta (Facebook and Instagram), to show you offers and advertisements that are relevant to your interests, based on your browsing, and to measure the performance of our campaigns.

6.3. Third-party cookies: third parties that place cookies through our website apply their own privacy policies. These cookies are not necessary to use our website.

6.4. Social media: our website may include features from social networks, such as "share" or "like" buttons. These networks may identify you even if you have not used these buttons, if you were logged in to your social network account while browsing our website. We have no control over how they use your data. Please read their privacy policies to manage your settings, for example Facebook: https://www.facebook.com/privacy/policy

6.5. Your browser settings: your browser lets you accept or refuse cookies, be asked each time, or delete cookies already stored. Refusing certain cookies may affect your browsing or prevent you from using some services, such as placing an order. To learn how to manage cookies, please see the help menu of your browser.

7. Transfers outside the European Union

When some of our service providers are located outside the European Union, some of your data may be transferred to countries whose level of data protection has not been recognised as adequate by the European Commission. In this case, we make sure the transfer complies with applicable regulations and that your privacy and fundamental rights are protected, for example by using the European Commission's standard contractual clauses. You can request more information about these transfers by writing to contact@blossaglow.com.

8. Security measures

We take technical and organisational measures to ensure a level of security appropriate to the risks to the rights and freedoms of individuals, taking into account the state of the art, the costs, the nature, scope, context and purposes of the processing, and the risks identified. Card payments on our website are processed in compliance with the Payment Card Industry Data Security Standard (PCI-DSS).

9. Updates to this policy

This policy will be updated whenever necessary to remain compliant with applicable data protection regulations, and reviewed at least every three (3) years.