At Onest Store, we consider protecting your privacy to be of paramount importance . We protect your data in accordance with French and European law on the protection of personal data. The collection and storage of some of your personal data is intended only to improve the customer experience of the Site, its operation and its services .
This privacy policy is to inform users of this site about the personal data we will collect when you visit www.oneststore.com (the “Site”) or that you make a purchase there, as well as the following information, if applicable:
- The identity of the data controller
- The personal data we will collect
- Use of collected data
- Who has access to the data collected
- The rights of site users
- The site's cookie policy
- Applicable laws
This privacy policy operates alongside the terms and conditions of use of our site.
Identity of the data controller
The Onest Store platform is the property of SAS LS Fair Market with share capital of €3,000 whose head office is 38B rue des entrepreneurs, 75015 Paris , registered in the Paris Trade and Companies Register under number 9 77 90 40 28 .
When using the websitewww.oneststore.com (hereinafter referred to as the “Site”), personal data is collected by SAS LS Fair Market.
Personal data we collect
Data collected automatically
When you visit and use our site, we may automatically collect and store information, including the following:
- IP adress
- Location, time zone
- Information about the device used and web browser
- Search terms, links or other websites that led you to our site
- Your activity on the site
- Number of visits
Data collected non-automatically
When you create your customer account or make purchases on the Site, you are asked for certain data:
- Last name First Name
- Delivery address and invoicing
- E-mail address
- Phone number
- Product reviews
Please note that we only collect data that helps us achieve the purpose set out in this privacy policy. We will not collect additional data without first informing you.
How we use personal data
Personal data collected on our site will only be used for the purposes specified in this policy or indicated on the relevant pages of our site. We will not use your data beyond what we disclose.
The data we collect automatically is used for the following purposes:
- Statistics (e.g. analysis of trends and uses)
- Improvement of customer experience (e.g. performance analysis, content, technical operation, structure)
The data we collect non-automatically is used for the following purposes:
- Newsletter: By subscribing to our newsletter, you agree to receive our news, offers and partner offers by email. You can change your preferences and unsubscribe at any time via your account or by following the link in our newsletter emails.
- Our loyalty program: By creating a customer account on our site, you join our loyalty program. To reward you for your loyalty, we may use your account information to offer you exclusive benefits, such as discounts and gifts.
- Tracking your return requests and other customer service contacts: If you contact us with questions or problems regarding your order, we may use your information to help resolve your problem. We may also use this information to improve our customer service and user experience.
- Communication of offers and benefits from Onest Store or our sellers by e-mail or text message: We can send you offers and information on the products and services we offer, as well as on the brands referenced on our site. Your information is used to provide you with personalized offers tailored to your interests. If you do not wish to receive these offers, you can unsubscribe at any time.
- Sharing your comments and opinions: We encourage customers to share their opinions on products purchased on our site. If you choose to post a review, it will be visible to other users of the site. We will never share your name or personal information with third parties without your consent.
Who we share personal data with
Employees
We may disclose to any member of our organization such user data as they reasonably need to carry out the purposes set out in this policy.
Third parties
As an online concept store, and to ensure the proper functioning of our services, we work with partner brands and other business partners (e.g.: IT service providers, payment service providers and service providers involved in the newsletter). The data is shared for the sole purpose of providing the service of the Onest Store platform.
We ensure that our partners respect a level of protection similar to that which we apply for the confidentiality of your data.
Under no circumstances do our partners have the right to contact you directly for commercial purposes.
Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose.
Other disclosures
We undertake not to sell or share your data with other third parties, except in the following cases:
- If required by law
- If it is required for any legal procedure
- To prove or protect our legal rights
- To buyers or potential buyers of this company in the event that we seek to sell the company
If you follow hyperlinks from our site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.
How long we store personal data
The personal data collected will be kept in accordance with applicable regulations and for the duration necessary to achieve the objectives stated above.
Personal data related to the handling and execution of the services, will be kept for a maximum period of 10 (ten) years from the last accounting or administrative year during which the service was provided to the member. Personal data collected for the purposes of sending information or offers, such as sending newsletters, will be retained for a maximum period of 3 (three) years from the last interaction between the company and the user or member.
We will ensure that users are notified if their data is retained for longer than this period.
How we protect your personal data
At Onest Store, protecting your data is our priority. We take all necessary measures to ensure the security and confidentiality of your personal information. We only work with trusted partners who meet high standards of quality, reliability and security. Please note that our privacy policy applies only to our services and websites, and does not cover the practices of any linked sites or external sources.
If you are a European resident, you have a right of access to the personal information we hold about you and you can request that it be corrected, updated or deleted. If you wish to exercise this right, please contact us using the contact details provided below. Furthermore, if you are a European resident, note that we process your information in order to fulfill our contractual obligations towards you (for example if you place an order on the Site) or to pursue our commercial interests legitimate, listed above. Please also note that your information may be transferred outside of Europe, including to Canada and the United States.
International data transfers
In order to ensure the security of personal data, we ensure that transfers outside the European Union comply with the guarantees required by regulations. Our partners undertake not to transfer personal data without adequate protection measures.
Your rights as a user
Under the GDPR, users have the following rights as data subjects:
- Permission to access
- Right to restrict processing
- Right to data portability
You will find further information on these rights in chapter 3 (art 12-23) of the GDPR.
How to modify, delete or contest the data collected
Cookie Policy
A cookie is a small file, stored on a user's hard drive by the website. Its purpose is to collect data relating to the user's browsing habits.
We use the following types of cookies on our site:
- Functional cookies: We use them to remember all the selections you make on our site so that they are saved for your next visits.
- Analytics cookies: This allows us to improve the design and functionality of our site by collecting data about the content you access and engage with while using our site.
- Targeting cookies: These cookies collect data about how you use the site and your preferences. This allows us to make the information you see on our site more promotional and targeted to you.
Our website uses cookies, deposited directly by our simplified joint stock company LS Fair Market, whose head office is located at 38Bis rue des entrepreneurs, 75015, Paris, registered in the Paris Trade and Companies Register under number 9 77 90 40 28. In addition, certain third-party cookies are placed on the site by some of our partners, such as communications agencies, audience measurement companies, targeted advertising providers, etc. These third-party cookies allow them, during the validity period of their cookies:
- to collect navigation data concerning users consulting the site, and
- to determine advertising content likely to correspond to the user's interests, in order to send them personalized advertisements based on their browsing history collected by the third party.
Users have the option to prevent the collection of information about them via these cookies. The user has the possibility to regulate and adjust the deposit and reading of cookies on their browser at any time, according to the options set out below. Any configuration undertaken by the user could influence their navigation on the site and their conditions of access to certain services requiring the use of cookies. LS Fair Market cannot be held responsible for the consequences of less efficient operation of the site attributable to the inability to install or read cookies necessary for its proper functioning, once the user has refused or deleted them.
To adjust the configuration of cookies, the user can configure their browser software in order to save cookies in their terminal or, on the contrary, to reject them, systematically or according to their source. They also have the possibility of configuring their browser software so that the acceptance or rejection of cookies is offered to them occasionally, before a cookie can be saved on their terminal. Thus, the management of cookies by the user can be carried out in particular via their browser software.
Changes
This privacy policy may be amended from time to time to maintain compliance with the law and to reflect any changes to our data collection process. We recommend that our users check our policy from time to time to ensure that they are informed of any updates. It is up to the user exclusively to keep themselves informed of our confidentiality policy regularly in order to follow our updates.
Applicable laws
We use your personal data in compliance with the Data Protection Act (Law n°78-17 of January 6, 1978 amended by Law n°2004-801 of August 6, 2004 and Law n° 2018-493 of June 20, 2018) , the ePrivacy Directive (Directive of July 12, 2002 amended by Directive 2009/136/EC) and the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 relating to the protection of natural persons with regard to the processing of personal data and the free movement of such personal data) as well as any national or subsequent regulations succeeding them.
In accordance with the General Data Protection Regulation (GDPR), this privacy policy complies with the following regulations.
Personal data must be:
- processed in a lawful, fair and transparent manner with regard to the person concerned (lawfulness, loyalty, transparency);
- collected for specific, explicit and legitimate purposes, and not subsequently processed in a manner incompatible with these purposes; further processing for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes is not considered, in accordance with Article 89(1), to be incompatible with the original purposes (limitation purposes);
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimization);
- accurate and, if necessary, kept up to date; all reasonable measures must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (accuracy);
- kept in a form allowing the identification of the persons concerned for a period not exceeding that necessary for the purposes for which they are processed; personal data may be retained for longer periods to the extent that they will be processed exclusively for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89 , paragraph 1, provided that the appropriate technical and organizational measures required by the regulation are implemented in order to guarantee the rights and freedoms of the data subject (retention limitation);
- processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using technical or organizational measures appropriate (integrity and confidentiality).
Processing is only lawful if and to the extent that at least one of the following conditions is met:
- The data subject has consented to the processing of their personal data for one or more specific purposes;
- The processing is necessary for the performance of a contract to which the data subject is a party or for the execution of pre-contractual measures taken at the request of the data subject;
- The processing is necessary for compliance with a legal obligation to which the data controller is subject;
- The processing is necessary to safeguard the vital interests of the data subject or another natural person;
- The processing is necessary for the execution of a mission of public interest or relating to the exercise of public authority vested in the controller;
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the person concerned is a child.
For residents of the State of California, this privacy policy is intended to comply with the California Consumer Privacy Act (CCPA) . If there are inconsistencies between this document and the CCPA , state law will apply. If we find any inconsistencies, we will change our policy to comply with the relevant law.
Consent
Users agree that by using our site, they consent to:
- The conditions set out in this privacy policy and
- The collection, use and retention of the data listed in this policy.
Contact
If you have any questions to ask us, do not hesitate to contact us by email: contact@oneststore.com
Effective date: November 11, 2023