Privacy Policy

Last Updated: November 2024

At Édesse Fragrances, your privacy is a priority. This Privacy Policy outlines how we collect, use, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) and Belgian law. By using our website, you consent to the terms of this policy.

1. Who We Are

Édesse Fragrances, based in Belgium, operates as an e-commerce platform specializing in scented candles and home decor. For inquiries about this policy, contact us at Info@edessefragrances.com, or fill out our contact form.

2. Personal Data We Collect

We collect the following types of personal data:

  • Account and Purchase Information: Name, email, phone number, shipping address, billing address, and payment details.
  • Technical Data: IP address, browser type, device information, and usage data via cookies.
  • Marketing Preferences: Your opt-ins for newsletters or promotional communications.
  • Transaction Data: Order details, payment confirmations, and refund requests.

3. Purpose of Data Collection

We collect your data to:

  1. Fulfill and manage orders, deliveries, and returns.
  2. Enhance your shopping experience on our Shopify-powered platform.
  3. Provide customer service and respond to inquiries.
  4. Analyze website usage to improve functionality and marketing campaigns.
  5. Send newsletters and promotional offers (with your consent).

4. Children's Privacy

Our website and products are not directed at individuals under the age of 16. We do not knowingly collect data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

5. Cookies and Tracking Technologies

We use cookies to:

  • Maintain your shopping cart and website preferences.
  • Analyze traffic and usage patterns for marketing purposes.
  • Enable third-party tools like Google Analytics.

For detailed information about our use of cookies and how you can manage them, please refer to our Cookie Policy.

6. Legal Basis for Processing

We process your data based on the following legal grounds:

  • Contractual Necessity: To fulfill your orders and provide customer support.
  • Consent: For email marketing and cookie tracking (when required).
  • Legitimate Interests: For website optimization and fraud prevention.
  • Legal Obligation: For record-keeping and compliance with tax regulations.

7. Third-Party Data Sharing

Your data may be shared with trusted third parties, including:

  1. Shopify: Our e-commerce platform handles order processing, payments, and data storage. Shopify complies with GDPR and uses Standard Contractual Clauses for international data transfers.
  2. Payment Providers: (e.g., Stripe, PayPal) to process secure transactions.
  3. Delivery Services: To fulfill orders.
  4. Analytics Services: (e.g., Google Analytics) to improve website performance.

We ensure all third parties adhere to strict data protection agreements.

8. International Data Transfers

As Shopify and some of our service providers operate globally, your data may be transferred outside the EU. Such transfers are safeguarded by GDPR-compliant mechanisms, such as Standard Contractual Clauses.

9. Automated Decision-Making and Profiling

We may use automated processes to:

  • Recommend products based on your browsing history.
  • Tailor promotional emails to your preferences.
    These activities are designed to enhance your experience and are not used for decisions with legal consequences.

10. Data Retention

We retain your data for as long as necessary for the purposes outlined in this policy, including legal obligations or dispute resolutions.
For example:

  • Transaction data: Kept for 7 years per Belgian tax regulations.
  • Marketing preferences: Retained until you unsubscribe.

11. Your Rights

Under GDPR, you have the following rights:

  1. Access: Request a copy of your personal data.
  2. Correction: Update incomplete or inaccurate data.
  3. Erasure: Request deletion of your data (except where legally required).
  4. Restriction: Limit how we process your data.
  5. Portability: Receive your data in a portable format.
  6. Objection: Opt-out of certain data processing, such as marketing.

To exercise your rights, contact us at Info@edessefragrances.com, or fill out our contact form.

12. Data Breach Notifications

In the event of a data breach, we will notify affected users and the relevant supervisory authority (APD/GBA) within 72 hours, as required by GDPR.

13. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in our practices or legal obligations. Please review this page regularly.