LAST UPDATE: 22 OCTOBER 2024
ARTICLE 1: INTRODUCTION
This Privacy Policy aims to inform users of our online store (hereinafter referred to as “the Site”) about how we collect, use, share, and protect the personal information you provide to us or that we gather during your use of the Site.
We are committed to protecting the privacy of our users and to complying with the applicable data protection laws and regulations, including the General Data Protection Regulation (GDPR) for residents of the European Union and the California Consumer Privacy Act (CCPA) for residents of California.
By using the Site, you agree to the terms and conditions of this Privacy Policy and consent to the collection, use, sharing, and protection of your personal information in accordance with the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Site.
We encourage you to read this Privacy Policy carefully to better understand our data protection practices and your rights regarding your personal information.
ARTICLE 2: DATA CONTROLLER
The data controller responsible for the personal data collected on the Site is SARL SPACE DELIRIUM, a company with its registered office at 152 rue du Galibier, 62223 Saint-Nicolas, France, registered with the Arras Trade and Companies Register under number 885 060 483, represented by William LEGRAND in his capacity as Co-Manager (hereinafter referred to as “we,” “our,” or “us”).
As the data controller, we determine the purposes and means of processing the personal data collected on the Site. We are committed to implementing appropriate technical and organizational measures to ensure the protection and confidentiality of your personal data in compliance with applicable laws and regulations, including the General Data Protection Regulation (GDPR) for European Union residents and the California Consumer Privacy Act (CCPA) for California residents.
If you have any questions or concerns regarding this Privacy Policy or the processing of your personal data, please feel free to contact us using the details provided in the “Contact Us” section of this Privacy Policy.
ARTICLE 3: SCOPE OF THE PRIVACY POLICY
This Privacy Policy applies to all personal data collected, used, and shared by SPACE DELIRIUM when you interact with our online sales site (hereinafter referred to as the “Site”), including when you make purchases, sign up for our newsletter, create a user account, or contact us via our contact form or communication channels. Personal data refers to any information relating to an identified or identifiable individual.
The purpose of this Privacy Policy is to inform you about the types of personal data we collect, the purposes for which we use them, the parties with whom we share them, and your rights and options regarding data protection. We invite you to read this Privacy Policy carefully to understand our practices regarding the processing of your personal data.
Please note that this Privacy Policy does not apply to third-party websites, applications, or services, including those that may be linked to or accessible via our Site. We encourage you to review the privacy policies of these third-party sites, applications, or services to understand their practices regarding the protection of personal data.
By using our Site and providing us with your personal data, you confirm that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. If you do not agree with our use of your personal data as outlined in this Privacy Policy, please do not use our Site or provide us with your personal data.
ARTICLE 4: COLLECTION OF PERSONAL INFORMATION
4.1. Information Provided Voluntarily by the User
When you interact with our Site, we may collect personal information that you voluntarily provide. This may include, but is not limited to, your name, email address, postal address, phone number, date of birth, payment information, and any other details you choose to share with us. We collect this information when you create an account, place an order, sign up for our newsletter, participate in promotions, submit feedback, or contact us through our contact form or communication channels.
4.2. Information Collected Automatically
We also reserve the right to collect personal information automatically through tracking technologies such as cookies, server logs, and web beacons. Automatically collected information may include, but is not limited to, your IP address, browser type and version, operating system, pages viewed, access times, the duration of your visit, browsing history, information about your interaction with the Site, and other data on how you use our Site.
This information helps us better understand how our visitors use our Site and improve the user experience. For more details on the cookies and tracking technologies we use, please refer to our Cookie Policy (Article 10).
In summary, we collect personal information that you provide voluntarily, as well as information we automatically collect when you use our Site. This data is collected to provide you with our products and services, enhance your user experience, and inform you of our offers and promotions.
ARTICLE 5: USE OF PERSONAL INFORMATION
We use the personal information collected for various purposes, in accordance with our privacy policy and applicable laws. The main uses of your personal information are as follows:
5.1. Order Fulfillment
We use your personal information to process and fulfill the orders you place on our Site. This may include, but is not limited to, verifying your identity, payment information, communicating with you about your order status, delivering products, and managing returns and refunds.
5.2. Enhancing User Experience
Your personal information helps us improve your user experience on our Site by allowing us to personalize content, product recommendations, and promotional offers based on your preferences and purchase history. We also use your information to analyze and understand Site usage and to detect and resolve technical or other issues related to our Site.
5.3. Communication and Marketing
With your consent, we use your personal information to send you marketing communications via email, SMS, or other communication channels, such as special offers, promotions, events, and information about our products and services. You may unsubscribe from these communications at any time by following the opt-out instructions provided in each communication or by contacting us directly.
In summary, we use your personal information to fulfill orders, improve the user experience on our Site, and inform you about our offers and promotions. We process your personal data in compliance with the privacy policy and applicable laws and are committed to protecting your data privacy rights.
ARTICLE 6: SHARING OF PERSONAL INFORMATION
We are committed to protecting the confidentiality of your personal information and only share it with third parties under certain circumstances, in accordance with our privacy policy and applicable laws. The situations in which we share your personal information are as follows:
6.1. Third-Party Service Providers
We use third-party service providers to assist us with various aspects of our business, such as payment processing, logistics and delivery, marketing, data analysis, and customer support. These service providers have access to your personal information only to the extent necessary to perform the services they provide on our behalf and are required to protect the confidentiality and security of your personal information.
• Hosting: Our store is hosted on Shopify Inc., which provides the online e-commerce platform that allows us to sell our services and products to you. Your data is stored within Shopify’s data storage system, databases, and general application. Your information is kept on a secure server protected by a firewall. For more details, please refer to Shopify’s Privacy Policy [here].
• Payment: We use REVOLUT and PAYPAL payment services to process transactions. Your banking information is never shared with us but is stored in our payment service providers’ databases. This data is encrypted according to security standards established by the payment card industry (PCI-DSS, PSD2 SCA, 3DS). Information related to your purchase is retained only as long as necessary to complete your order. Once your order is finalized, the transaction data is deleted. For more details, please refer to the Privacy Policies of Revolut [here] and PayPal [here].
• Logistics: Our logistics provider, La Poste, uses three different services depending on the destination of shipments. For France, we use Colissimo and postage stamps, while for the rest of the world, we rely on Delivengo. All personal data processing operations are carried out in compliance with current regulations, including the General Data Protection Regulation (GDPR), French Law No. 78-17 “Data Processing, Files and Individual Liberties” of January 6, 1978, as amended, and its implementing decrees (referred to as “the Regulation” or “the Applicable Regulation”). For more details, please refer to the Privacy Policies of La Poste [here], Colissimo [here], and Delivengo [here].
• Billing: Our billing service provider, Pennylane, implements various security measures to protect your data and has obtained ISO 27001 certification for all its systems and activities. These measures include data encryption during transmission and storage, continuous backups, strict access control, transaction traceability, and a robust infrastructure. For more details, please refer to Pennylane’s Privacy Policy [here].
• Marketing: Our email marketing provider, Brevo, stores your data on servers located within the European Union. Your data is encrypted before being stored and protected by advanced security measures such as multi-factor authentication, IP whitelisting, etc. Brevo is ISO 27001:2013 certified and applies practices compliant with data privacy regulations, including GDPR, CASL, and CCPA. For more details, please refer to Brevo’s Privacy Policy [here].
6.2. International Data Transfers
In some cases, we may need to transfer your personal information to third-party service providers located in countries outside the European Union or the United States. When this occurs, we ensure that appropriate safeguards are in place to protect your personal information, in accordance with applicable data protection laws, such as standard contractual clauses or Privacy Shield certification.
6.3. Legal Disclosure and Compliance
We may be required to disclose your personal information if necessary to comply with a legal obligation, court order, or to protect our rights, property, or the safety of our users or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.
In summary, we share your personal information only with third-party service providers, in the context of international data transfers, and when disclosure is required by law. We implement safeguards to protect your personal information and ensure that our partners comply with applicable data protection laws.
ARTICLE 7 : DATA RETENTION
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, and to protect our legitimate rights and interests. The retention period of your personal data depends on the nature of the information and its intended use.
Here are the criteria we use to determine the appropriate retention periods for your personal information:
• The length of your relationship with us (e.g., as long as you have an account on our online store or receive our marketing communications);
• Legal or regulatory requirements we must follow (e.g., tax laws or e-commerce regulations);
• Guidelines from data protection authorities and industry best practices;
• Applicable statutes of limitations for legal actions or potential disputes.
When we no longer need to retain your personal information, we securely delete or anonymize it. Anonymized information may be retained indefinitely for statistical and research purposes, without compromising your privacy.
It’s important to note that you can exercise your data protection rights, such as the right to erasure, as described in Article 9 of this privacy policy. In certain circumstances, exercising these rights may lead to the early deletion of your personal information.
Protecting your personal information is of utmost importance to us. We implement appropriate technical and organizational measures to safeguard your data against any loss, alteration, unauthorized access, disclosure, or misuse. These measures include, but are not limited to:
• The use of encryption technologies to secure data both in transit and at rest;
• Restricting access to your personal information to employees and service providers who need it to perform their duties;
• Regularly training our staff on best practices for information security and data protection;
• Implementing backup and recovery procedures to ensure the availability and resilience of our systems and services;
• Regular monitoring and assessment of the effectiveness of our security measures to ensure they meet legal and regulatory requirements.
Despite our efforts to protect your personal information, it’s important to note that no security system is completely foolproof. Therefore, we cannot guarantee absolute security for your data. In the event of a security breach affecting your personal information, we will notify you as soon as possible, in accordance with applicable legal and regulatory requirements, and take the necessary steps to mitigate the impact and prevent future incidents.
We also encourage you to take steps to protect your personal information online. For example, choose a strong and unique password for your account on our site, do not share your password with others, and ensure you use up-to-date antivirus software on your computer or mobile device.
ARTICLE 9 : YOUR DATA PROTECTION RIGHTS
As a user and in accordance with the European Union’s General Data Protection Regulation (GDPR), you have several rights regarding the protection of your personal information. These rights include:
9.1. Right of Access: You have the right to request access to the personal information we hold about you. We will provide you with a copy of this data in a structured, commonly used, and machine-readable format, within the limits provided by law.
9.2. Right to Rectification: If you find that the personal information we hold about you is inaccurate or incomplete, you may request its correction or update.
9.3. Right to Erasure: You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent, provided the processing was based on your consent.
9.4. Right to Restriction of Processing: In certain circumstances, you may request the restriction of the processing of your personal information, such as when you dispute the accuracy of the data or when you object to its processing.
9.5. Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit this data to another data controller without hindrance from us, where technically feasible and where the processing is based on your consent or a contract.
9.6. Right to Object: You have the right to object to the processing of your personal information for reasons related to your particular situation, where such processing is based on our legitimate interests. You may also object to the processing of your data for direct marketing purposes.
To exercise any of these rights, please contact us using the details provided in Article 13 (Contact Us) of this Privacy Policy. We are committed to responding to your request within the legally prescribed timeframes. Please note that the exercise of some of these rights may be subject to legal conditions and exceptions.
ARTICLE 10 : COOKIE POLICY
We use cookies and similar technologies to enhance the user experience, personalize content and ads, provide social media features, and analyze our traffic. A cookie is a small text file stored on your computer, smartphone, or other device when you visit our website.
The cookies we use can be categorized as follows:
10.1. Essential Cookies: These cookies are necessary for the functioning of our website and cannot be disabled. They are usually set in response to actions you take, such as logging into your account or filling out forms.
10.2. Performance Cookies: These cookies allow us to measure and analyze traffic on our site to improve its performance. They help us understand how visitors interact with our site and identify the most visited pages or potential issues.
10.3. Functional Cookies: These cookies enhance the functionality and personalization of our site by remembering your preferences, such as language or the region you are in.
10.4. Advertising or Targeting Cookies: These cookies are used to display relevant ads tailored to your interests. They may also be used to limit how often you see an advertisement and to measure the effectiveness of advertising campaigns.
You can manage your cookie preferences by adjusting your browser settings. Please note that disabling certain cookies may affect your experience on our site and limit access to certain features.
For more information on cookies and how to manage them, you can visit www.allaboutcookies.org.
By using our site, you agree to the use of cookies in accordance with this cookie policy. If you do not agree to the use of these cookies, please disable them by following the instructions in this policy or by adjusting your browser settings.
ARTICLE 11 : THIRD-PARTY SITES AND SERVICES
Our website may contain links to third-party websites and services that are not operated or controlled by us. This privacy policy does not apply to the practices of these third-party websites and services, and we are not responsible for their content, privacy, or security practices.
We encourage you to carefully review the privacy policies of any third-party websites and services you visit to understand how they collect, use, and share your personal information. When you leave our website, please be aware that our privacy policy no longer applies.
We are not responsible for links to third-party websites displayed on our website, and the presence of such links does not imply our endorsement or affiliation with these third-party sites. You access and use these third-party sites at your own risk, and we cannot be held liable for any consequences related to your use of these sites.
Additionally, we may use third-party services to facilitate certain features of our website or to enhance our services. These third parties may have access to some of your personal information in the course of providing these services. However, we ensure that these third parties adhere to privacy and security standards consistent with our privacy policy and applicable laws.
ARTICLE 12 : CHANGES TO THE PRIVACY POLICY
We reserve the right to modify this privacy policy at any time to reflect changes in our personal data protection practices, legal requirements, or for any other reason. Any changes made to this privacy policy will be posted on our website, along with the date of the last update. We encourage you to regularly check this page to stay informed of any changes.
In the event of substantial changes, we will make every effort to notify you via email or a prominent notice on our website before the modification takes effect. Your continued use of our services after the changes take effect signifies your acceptance of the revised privacy policy.
If you do not agree with the changes made to our privacy policy, you must discontinue using our services and contact us to have your personal information deleted.
ARTICLE 13 : CONTACT US
If you have any questions, concerns, or comments regarding our privacy policy or our practices for handling personal data, please feel free to contact us. You can reach us through the following methods:
SPACE DELIRIUM, 152 rue du Galibier, 62223 Saint-Nicolas, France.
Email: hello@spacedelirium.com
Our representative or data protection officer will be happy to assist you and respond to any inquiries. We are committed to addressing and resolving any concerns or complaints you may have regarding our handling of your personal information quickly and efficiently.
If you believe that our processing of your personal data violates data protection laws, you also have the right to file a complaint with the appropriate supervisory authority in your country or the jurisdiction where you reside.
ARTICLE 14: SPECIFIC PROVISIONS FOR CALIFORNIA RESIDENTS (CCPA)
This section applies to residents of the State of California, in accordance with the California Consumer Privacy Act (CCPA). The following provisions outline our commitments and your rights under the CCPA.
Collection, Use, and Sharing of Personal Information: We have detailed the categories of personal information we collect, the sources of that information, the purposes for which we use it, and the categories of third parties with whom we share it in the previous sections of this privacy policy.
Your Rights Under the CCPA:
a. Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected, used, disclosed, or sold about you over the past 12 months.
b. Right to Delete: You have the right to request the deletion of your personal information that we have collected or maintained, subject to certain exceptions.
c. Right to Opt-Out of the Sale of Personal Information: If we sell personal information, you have the right to opt-out of the sale of your personal information. Currently, we do not sell personal information.
To exercise any of these rights, please contact us using the details provided in Section 13 (Contact Us).
Non-Discrimination: In accordance with the CCPA, we will not discriminate against consumers who exercise their rights under the CCPA. This means that if you exercise any of your rights under the CCPA, we will not deny you goods or services, charge you different prices or rates, provide you with a different level or quality of goods or services, or suggest that you may receive a different price or rate or a different level or quality of goods or services.
Authorized Agent: You may designate an authorized agent to exercise your rights under the CCPA on your behalf by providing written authorization or a power of attorney to do so. Your authorized agent will also need to verify their identity with us and may be required to provide proof of their authorization to act on your behalf.
