Legal Notice
Privacy Policy
Last updated: January 1, 2025 · GDPR Compliant
Secured Data
SSL encryption & secure storage
Never sold
Your data is never resold
Your rights
Access, rectification, deletion
1. Data Controller
ILÀRA SAS, a simplified joint stock company with a share capital of €10,000, registered with the Paris Trade and Companies Registry under no. 123 456 789, with its registered office at 12 rue des Plantes, 75011 Paris. DPO contact: dpo@ilara-tea.com.
2. Data Collected
We collect the following data:
Identity Data — Last name, first name, email address, phone number
Delivery Data — Postal address, city, postcode, country
Payment Data — Card type (not the full number, managed by our secure PSP)
Browsing Data — Cookies, IP address, pages visited, session duration
Account Data — Order history, wishlist, preferences
3. Purposes and Legal Basis
Purpose
Legal Basis
Order processing
Contract execution
Customer service
Contract execution / Legitimate interest
Newsletters & offers
Consent
Fraud prevention
Legitimate interest
Accounting obligations
Legal obligation
Website improvement
Legitimate interest
4. Data Retention Period
Customer data is retained for 3 years after the last order or interaction. Billing data is retained for 10 years in accordance with legal obligations. Browsing data via cookies is retained for a maximum of 13 months.
5. Data Recipients
Your data is shared only with:
- Our delivery providers (La Poste, Colissimo, DHL)
- Our payment provider (Stripe — PCI-DSS level 1 certified)
- Our hosting provider (OVH Cloud — servers in France)
- Our transactional email tool (Mailjet)
No data is sold or transferred to third parties for commercial purposes.
6. Cookies
We use the following types of cookies:
Essential
Cart, session, authentication — required for the site to function
Required
Analytics
Anonymised audience measurement (Matomo, hosted in France)
Optional
Marketing
Ad personalisation (disabled by default)
Optional
You can manage your cookie preferences at any time at the bottom of the page.
7. Your Rights (GDPR)
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
Access
Obtain a copy of your data
Rectification
Correct inaccurate data
Deletion
Request erasure of your data
Objection
Object to certain processing
Restriction
Restrict the use of your data
Portability
Receive your data in a readable format
To exercise your rights, contact us at dpo@ilara-tea.com or via our contact form. We will respond within 30 days. You can also lodge a complaint with the CNIL (cnil.fr).
