Privacy Policy

1. Introduction and controller

ALJAZEERA PERFUMES SASU ("we", "us"), located at 97 AVENUE DES CHAMPS ELYSEES, 75008 PARIS, France, is the data controller for the personal-data processing described in this notice. Email: fr@aljazeeraperfumes.com. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés). This policy applies to our French online store, customer accounts, transactions and related customer communications.

2. Personal data we collect

Depending on your interaction with us, we may process: (a) identification and contact details such as names, email addresses, telephone numbers and delivery/billing addresses; (b) account and authentication data; (c) purchase and delivery information including products ordered, invoice references, payment status, refunds and communications; (d) customer-support messages and complaint information; (e) technical and browsing information such as IP address, browser/device details, website interactions and cookie identifiers where permitted; and (f) marketing preferences and records of consent or objection. Payment card information is processed by our payment service providers; we do not store complete card numbers or card security codes on our own servers. We may receive partial payment identifiers, payment confirmations, fraud signals or masked card details from providers.

3. Purposes and legal bases

Orders, payment, accounts and delivery — contract

We use required identity, contact, account and transaction data to provide shopping services, accept orders, process payments, arrange delivery, handle order-related communications and perform the contract (GDPR Article 6(1)(b)). Some information is necessary to fulfil an order; if missing, we may be unable to process or deliver it.

Accounting and regulatory compliance — legal obligation

We retain and disclose records as required by applicable tax, accounting, product-safety and legal obligations (Article 6(1)(c)).

Customer service, claims and legal rights — contract, legal obligation or legitimate interests

We respond to enquiries, handle returns, assist with warranty claims and establish, exercise or defend legal claims under the applicable legal basis for each activity (Articles 6(1)(b), 6(1)(c) or 6(1)(f)). Our legitimate interests include efficient customer support and the protection of our rights, balanced against customers' rights.

Website security and fraud prevention — legitimate interests or legal obligation

We protect our systems, troubleshoot security problems and detect misuse or fraud where necessary and proportionate (Articles 6(1)(f) or 6(1)(c), as applicable). Our legitimate interest is the integrity and security of the service.

Email and SMS marketing — consent or a legal exception

We send electronic promotional messages based on prior consent when required (Article 6(1)(a)). For qualifying existing customers, we may market similar products under the conditions allowed by French electronic-marketing law and the GDPR; an easy, free opt-out is provided. You can unsubscribe at any time.

Analytics, preferences, advertising and profiling — relevant basis per activity

Where applicable, we analyze website use, remember preferences, measure campaigns or personalize advertising. The legal basis depends on the activity and may include consent or legitimate interests where legally permissible; placing or accessing non-essential trackers requires prior consent under French cookie rules. We do not carry out solely automated decisions producing legal or similarly significant effects unless separately disclosed with required information and safeguards.

4. Where data comes from

We usually receive information directly from you when you register, buy, contact support, opt into marketing or use the site. Where applicable, we also receive delivery events from couriers, payment statuses and fraud indicators from payment partners, and technical/marketing information from analytics or advertising providers, subject to applicable law.

5. Who receives your information

Access is limited to authorized staff and service providers who need it to perform relevant tasks. Recipients can include hosting and IT support services, payment processors, delivery/logistics providers, customer-support and communications platforms, accountants and advisers, anti-fraud service providers where used, and competent public authorities where lawfully required. Marketing and analytics partners receive data only as legally permitted and subject to the relevant cookie choices. We do not sell customers' personal data as a product.

6. Transfers outside the European Economic Area

Some authorized providers may process personal data outside the EEA. Where this occurs, we rely on an applicable European Commission adequacy decision or another valid GDPR Chapter V transfer mechanism, such as the European Commission's Standard Contractual Clauses supplemented where necessary. Contact fr@aljazeeraperfumes.com for more information about relevant safeguards.

7. How long we keep data

We retain information only for as long as needed for its stated purposes, then delete or anonymize it unless legal retention or the establishment, exercise or defense of claims justifies restricted archival storage. Retention periods or criteria include:

• Orders and customer records: for contract performance and an applicable period necessary for legal claims.
• Accounting records and relevant supporting documents: generally ten years where the applicable French Commercial Code bookkeeping obligation applies.
• Customer and prospect marketing information: normally for the commercial relationship and, where applicable, up to three years after the end of the relationship or last meaningful contact under CNIL guidance, subject to valid consent/objection and actual practice.
• Cookies, analytics and consent records: see the actual Cookie Policy inventory and the configured consent-management periods; consent choices should be retained for a proportionate time.
• Account data: during the account relationship plus a defined justified period of inactivity/archiving.
Some items may have shorter or longer periods where specifically mandated or justified. We restrict access to archived information.

8. Your rights

Subject to the conditions and exceptions laid down in the GDPR, you have the right to access your data, correct inaccurate data, erase data in eligible circumstances, restrict certain processing, object to processing based on legitimate interests, and receive portable data where applicable. You may withdraw consent at any time without affecting prior lawful processing. You have an unconditional right to object to the use of your personal data for direct marketing, including related profiling. Where applicable, you can challenge qualifying solely automated decisions under Article 22. Send requests to fr@aljazeeraperfumes.com. We ordinarily respond within one month; where legally permitted, this may be extended by up to two further months after informing you within the first month. We may request reasonable identity verification where necessary. You can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

9. Security

We implement appropriate technical and organizational controls based on the risks, including controlled access, appropriate encryption in transit, secure payment integrations, access management and security procedures. No system can guarantee absolute security.

10. Cookies and tracking

Strictly necessary cookies may be used without prior consent when an exemption applies. We request valid consent before optional cookies or similar technologies requiring consent are placed or accessed. Details of provider identity, purposes, lifespan and the way to modify choices appear in our Cookie Policy and cookie management tool. Personalized advertising or behavioral analysis is described there where actually used.

11. Children

Our website and products are not specifically directed at children under 16. We do not knowingly solicit personal data from children for marketing. Any processing involving minors is handled in accordance with applicable laws, including France's relevant rules for consent to information-society services. This business-facing age statement does not replace the specific French statutory consent rules.

12. Changes

We may update this Privacy Policy to reflect legal requirements and changes in processing. The current version and effective date will be published here. Where required, we will give additional notice or seek fresh consent before undertaking materially different processing.