PRIVACY POLICY

DATA CONTROLLER

The controller of personal data collected on belairaroma.com is BEL-AIR GROUP, SAS, Domaine du Golf, 31840 Seilh, France. Contact: contact@belairaroma.com.

DATA COLLECTED

We collect the data you provide (first and last name, company, email address, phone number, delivery and billing address, information about your project) when you fill in a form, request a quotation or a scent audit, place an order or create an account. Browsing data is also collected through cookies (see our cookie policy).

PURPOSES AND LEGAL BASES

Your data is used to: handle your contact, quotation and audit requests (pre-contractual measures); process and deliver your orders, provide after-sales service and invoicing (performance of the contract and legal obligations); send you marketing information if you have consented or, for business customers, on the basis of our legitimate interest; improve our website and measure its audience (consent).

RECIPIENTS

Your data is intended for BEL-AIR GROUP and its technical service providers acting on its behalf: website hosting (Shopify International Limited), online payment, shipping and delivery, appointment booking (Calendly). It is never sold. Some providers may be located outside the European Union; such transfers are then covered by appropriate safeguards (adequacy decisions or standard contractual clauses).

RETENTION PERIOD

Prospect data is kept for 3 years after the last contact. Customer data is kept for the duration of the business relationship and then for 3 years for marketing purposes; accounting records are kept for 10 years as required by law.

YOUR RIGHTS

Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time and to give instructions regarding your data after your death. To exercise these rights, write to contact@belairaroma.com. You may also lodge a complaint with the CNIL (www.cnil.fr).

SECURITY

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.