1. Data Controller

The data controller is CENT PHILTRES, represented by Nathalie Delorme.

SAS CENT PHILTRES
Registered office: 3 rue de Picpus, 75012 Paris, France
SIRET: 754 003 465

2. Data Collected

We collect the following information:

Account Creation

• First name
• Last name
• Email address
• Password (hashed)

Orders

• Shipping address
• Billing address
• Phone number

Payment

Your banking information is processed exclusively by our secure payment providers. We do not store any bank card information.

Browsing Data

• IP address
• Session cookies
• Audience measurement cookies (Google Analytics)

Newsletter

• Email address (only if you have given your explicit consent)

Mandatory fields are marked with an asterisk during data collection.

3. Purpose of Data Collection

Your data is used for:

• managing customer accounts;
• processing and delivering orders;
• invoicing and compliance with legal obligations;
• fraud prevention and website security;
• sending newsletters, only with your consent;
• audience analysis via Google Analytics (subject to your consent).

4. Legal Basis

The processing of your data is based on:

Performance of a Contract

• order management;
• delivery;
• customer account management.

Your Consent

• account creation;
• newsletter subscription;
• use of audience measurement cookies.

Legal Obligations

• invoice retention;
• age verification where applicable.

Legitimate Interest

• website security;
• fraud prevention.

5. Data Recipients

Your data is strictly confidential and is only shared with service providers necessary for the operation of the website:

• Shipping carriers: for delivering your orders;
• Payment providers (e.g. La Banque Postale, VivaWallet): for securing transactions;
• Website hosting provider: for secure data storage;
• Google Analytics: only if you have accepted audience measurement cookies.

Certain processing operations, particularly those related to Google Analytics, may involve data transfers outside the European Union, subject to the safeguards implemented by Google.

6. Data Retention Period

• Account data: until the account is deleted or after 3 years of inactivity;
• Order data: 10 years, in accordance with legal obligations.

7. Your Rights

In accordance with the GDPR, you have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to object;
• right to restriction of processing;
• right to data portability.

You may exercise your rights by contacting:

contact@centphiltres.co

8. Cookies

The website uses:

• cookies necessary for the proper functioning of the website (cart, login, session);
• optional audience measurement cookies.

You may manage your preferences through the cookie banner displayed during your first visit or through the link:

“Manage my cookies”