PRIVACY POLICY
I. Your personal data
A) Information you provide to us:
To place an order on our website, create a customer account, contact us or subscribe to our newsletter and other marketing activities, you generally provide us with the following data:
- Your identification data and contact details: your first name, last name, the language and country from which you interact with us, as well as your contact details such as your email address, postal address, delivery address and telephone number.
- Economic and payment information: your bank details (please note that all payment transactions are encrypted by the receiving bank (Crédit Mutuel), we do not store any card numbers), information about your purchases, your orders, your returns, etc.
- Login, geolocation and browsing data.
- Your profile – if you open a customer account, you create a profile and identify yourself when visiting our website, so data such as your customer ID and password, your recent purchases and your preferences will be stored.
- Your personal preferences: this includes your wishlist, and your marketing and cookie preferences.
- Additional personal information – you may also provide us with other personal information such as your date of birth, gender, etc. We are the only ones who collect and store this additional information, and we may be required to share some of this data in the event of an audit by the tax authorities or any other competent state body (for example DGCCRF...).
When we ask you to enter your personal data to access a feature, some fields are mandatory because they are necessary for us to provide you with that feature (for example, to deliver a parcel we need your postal address).
It is important that the personal information shared about you is accurate and up to date. Please inform us of any changes to your information.
We do not store any sensitive personal information, and as our website is not intended for children, we do not store any data relating to children.
B) Data obtained via cookies
Subject to your consent, we use cookies and other similar technologies to make it easier for you to browse our site by adapting it to your device or browser and to offer you products that match your shopping habits.
- Usage data – this information includes the products and services you have purchased from us and how you use our website and applications.
Technical data – this information includes:
- Your IP address, your browser and its version, your location and time zone, your browser extensions, operating system and platform, as well as other technical data about the device you use to browse our site.
- Information about your visit, including URLs and your click path to, through and from our website (including date and time); products you viewed or searched for; page response times, download errors, time spent on pages, interactions on pages (such as clicks and mouse movements), and how you leave pages.
You will find more information on this page.
II. Why do we use your personal data?
Depending on the type of data we hold about you, we may process it for the following purposes:
- To manage your registration as a user on our website: if you wish to use our services, we need to process your data to identify you as a user of the website and allow you to access different features as well as personalised services. You can delete your account at any time by contacting us.
- To perform a purchase contract with you: your data is used to keep you informed about the status of your order, prepare your order, accept your payment, give you access to after-sales service and refund your order. It also allows us to prevent possible fraud against you and against us during the purchase. If we consider an action to be fraudulent, this processing may allow us to block the transaction.
- To respond to requests sent to customer service.
- To improve our services: by using our website, you are informed that we process your browsing and purchase data for analysis and statistical purposes. This helps us better understand how you use our website in order to improve its usability and the quality of the services we offer.
- For marketing purposes: if you subscribe to our newsletter, we process your data to manage your subscription and send you targeted information by email. We need your consent for any direct marketing. You can unsubscribe from our communications at any time (for example, to unsubscribe from the newsletter, simply click on the “If you no longer wish to receive our news, you can unsubscribe” link at the bottom of our newsletters and confirm your unsubscription).
III. Third parties
When using our website, you may receive information from third parties with whom we work to provide you with certain services. These may include:
- Financial institutions
- Fraud detection and prevention entities
- Logistics, transport and delivery service providers
- Service providers related to marketing and advertising
We may share your information with our third parties for the following reasons, for example:
- Payment services in order to process payment;
- Delivery companies in order to deliver your order;
- Credit and fraud prevention agencies in order to verify your credit rating and identity;
- Analytics tools that allow us to process your information and optimise your shopping journey on our website.
We ask third parties to commit to respecting the security of your personal information in accordance with the law. Third parties may only use your personal information according to our instructions and not for their own purposes.
IV. What are your rights?
A) Legal bases:
For the processing of your data, we rely on legal bases that depend on how you interact with our website.
- When you purchase products from our website, we need your personal data to perform the contract between you and us. For example, we need your contact details to deliver your order.
- We also rely on other legal bases such as our legitimate interests. For example, we consider it to be in your interest that your identity cannot be used for fraudulent purposes, that our customer service teams can access your order information to serve you better, and that we can better understand how you use our website to improve its usability and the services we offer you.
- We respect the importance given to consent in the GDPR.
B) Consent
Your consent must be given clearly and unambiguously. This is why, when you agree to receive our communications (in particular via newsletters):
- We explain how we will use your data and the type of communication you will receive.
- You must tick a box confirming your consent to subscribe.
- Persons under 18 years of age cannot give consent.
- You can withdraw your consent at any time.
In accordance with the French Data Protection Act of 6 January 1978, as amended by the law of 6 August 2004, the customer has the right to access, rectify, modify and delete data concerning them.
- Right of access to data: the possibility to receive a copy of the personal information we hold about you.
- Right to rectification: the possibility to request the correction of inaccurate information about you.
- Right to erasure of your personal data: the possibility to ask us to delete your data.
Regardless of the purpose or legal basis under which we process your data, you may at any time and at no cost send us an email to exercise your rights.
Or send us a letter to the following address:
My Bubble Tea
135 impasse de l'ill
67150 Nordhouse
France
Please note, however, that we are not always able to comply with this request for legal reasons that we will explain to you, where applicable, after receiving your request. If you have a customer account, you can also modify your personal details from your customer area by logging in with your email address and password.
V. Security of your personal information
If you create an account, you choose a password and are responsible for keeping it confidential. This is why we recommend that you choose a strong password and do not share it. We recommend that you only log in on secure networks, preferably private networks. Be aware of the risks associated with public Wi‑Fi networks.
If you receive an email claiming to be from the brand we work for and asking you to provide personal information, please do not reply and forward this email to us so that we can take the necessary action. We will never send you emails asking for your login details.
All our service providers operate within the European Economic Area (EEA) and must therefore comply with the same legislation as we do.
VI. Retention period of your personal data
We will retain your data for as long as you remain a customer and afterwards, in order to answer any questions or complaints, or to retain any data necessary to meet legal, accounting or analytical requirements.