Last updated: 01-06-25
At Éclat Des Fleurs LTD, we are committed to protecting your privacy and personal data in compliance with the UK GDPR and EU General Data Protection Regulation (GDPR).
This Privacy Policy explains how we collect, use, store and protect your information when you visit our website or interact with us.
We collect information that you provide to us directly, such as when you create an account, place an order, or contact us for support. This information may include: email, password, data communicated while using the service, usage data, first name, last name, IP address, billing information, universally unique identifier (UUID), purchase history, device information, phone number, physical address, user subscriptions, page views, device logs, operating systems, browsing history, browser information, clicks, interaction events, scroll interactions, relative position to scroll, crash data, language.
Unless otherwise specified, all Data requested by this Website is mandatory.
If the user refuses to communicate them, it may be impossible for this Website to provide the Service.
The data is processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located.
Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be stored for a longer period due to any legal obligations or on the basis of the consent of the Users.
The Data Controller processes Personal Data relating to the User if one of the following conditions exists:
- the User has given consent for one or more specific purposes.
- processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures;
- the processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
- the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- the processing is necessary for the pursuit of the legitimate interest of the Owner or third parties.
2. What data do we collect?
We may collect the following personal data:
Name and Surname
Email address
Shipping and billing address
Payment details (handled securely by third-party processors)
Communication preferences
Any personal messages you voluntarily send us (eg contact form)
3. Why we collect your data
We collect and process your data to:
Fulfil and ship your orders
Communicate with you regarding your purchases
Send marketing updates (only if you've opted in)
Improve our website and user experience
Comply with legal obligations
4. Legal basis for processing
We process your data based on:
The performance of a contract (eg when you buy something)
Your consent (eg newsletter subscription)
Our legitimate interests (eg improving our services)
5. How we store and protect your data
Your data is stored securely on protected servers and is only accessible by authorized personnel.
We never sell or share your data with third parties for commercial purposes.
Payment data is handled by secure processors like Stripe or PayPal — we do not store payment details on our servers.
6. Third party services
We use trusted third-party tools for:
Payment processing (eg Stripe, PayPal)
Email and newsletter delivery (eg Mailchimp)
Website analytics (eg Google Analytics)
These services are GDPR-compliant and process your data only as necessary.
7. Your rights
You have the right to:
Access your personal data
Correct inaccurate data
Request deletion of your data (where legally possible)
Withdraw consent at any time
Object to certain types of processing