Privacy Policy

ELLA-EXTENSION Privacy Policy Last updated: March 2025

At Ella-Extension, we take the protection of your personal data very seriously. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have regarding your personal data.

This policy applies to all personal data collected through our website and in the context of our commercial relationship with you. It has been drafted in compliance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of January 6, 1978 (Informatique et Libertés), as amended.

By using our website and/or placing an order, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Company Name: Ella-Extension Email: serviceclient-ellaextension@gmx.fr

For any question or request relating to the processing of your personal data, you may contact us directly at the above email address.

2. What Personal Data We Collect

We collect personal data that you provide to us directly, as well as data collected automatically when you browse our website.

2.1 Data You Provide to Us

When you place an order, create an account, contact our customer service, or subscribe to our newsletter, we may collect the following information:

Full name
Email address
Postal address (billing and/or delivery)
Phone number
Order history and purchase details
Payment information (processed securely via our payment providers; we do not store card numbers on our servers)
Any messages or correspondence you send us

2.2 Data Collected Automatically

When you visit our website, certain technical data may be collected automatically, including:

IP address
Browser type and version
Operating system
Pages visited and time spent on each page
Referring URL (the website from which you arrived)
Date and time of your visit
Cookie identifiers (see Section 7)

This data is collected for statistical and security purposes and does not, in itself, allow us to identify you personally unless combined with other information.

3. How We Use Your Personal Data

Ella-Extension processes your personal data for the following purposes and on the following legal bases:

3.1 Processing and Fulfilling Your Orders Legal basis: Performance of a contract

We use your personal data to process your orders, arrange delivery, issue invoices, manage payments, and handle any returns or exchanges. Without this data, we would be unable to fulfill your purchase.

3.2 Customer Account Management Legal basis: Performance of a contract

If you create an account on our website, we use your data to manage your account, allow you to track your orders, and facilitate future purchases.

3.3 Customer Support and After-Sales Service Legal basis: Performance of a contract / Legitimate interest

We use your contact details and order information to respond to your inquiries, resolve disputes, and provide after-sales assistance.

3.4 Sending Transactional Communications Legal basis: Performance of a contract

We will send you order confirmations, shipping notifications, and other communications directly related to your purchase. These are not marketing emails and cannot be opted out of, as they are necessary for the execution of your order.

3.5 Sending Marketing and Promotional Communications Legal basis: Consent

With your prior consent, we may send you newsletters, promotional offers, product launches, and other marketing communications. You may withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any of our emails or by contacting us at serviceclient-ellaextension@gmx.fr.

3.6 Improving Our Website and Services Legal basis: Legitimate interest

We analyze anonymized browsing data and usage statistics to improve the performance, content, and user experience of our website.

3.7 Compliance with Legal Obligations Legal basis: Legal obligation

We may process and retain certain data as required by applicable law, including tax regulations, accounting obligations, and consumer protection legislation.

3.8 Fraud Prevention and Security Legal basis: Legitimate interest / Legal obligation

We may process data to detect, prevent, and investigate fraudulent transactions, unauthorized access, or other illegal activities.

4. How Long We Retain Your Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, and in compliance with applicable legal retention periods. The following retention periods apply:

Order and transaction data: 10 years, in compliance with French commercial and tax law.
Customer account data: For the duration of the account's existence, and up to 3 years after the last interaction if the account becomes inactive.
Customer support correspondence: Up to 3 years from the date of the last exchange.
Marketing consent and newsletter subscriptions: Until you withdraw your consent or unsubscribe.
Cookies and browsing data: As specified in our cookie settings (see Section 7).

Once the applicable retention period has expired, your data is securely deleted or anonymized.

5. Who We Share Your Data With

Ella-Extension does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with the following categories of trusted third-party service providers, strictly for the purpose of fulfilling our obligations to you:

Shipping and logistics providers: To arrange delivery of your order.
Payment processors: To securely process your payment transactions.
Email service providers: To send transactional and marketing communications.
Website hosting and analytics providers: To operate and improve our website.
Legal and regulatory authorities: Where required by law, court order, or regulatory obligation.

All third-party service providers with whom we share your data are contractually bound to process your data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable data protection law.

We do not transfer your personal data outside the European Economic Area (EEA) unless adequate safeguards are in place in accordance with GDPR requirements (such as Standard Contractual Clauses approved by the European Commission).

6. Your Rights

Under the GDPR and applicable French law, you have the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting us at serviceclient-ellaextension@gmx.fr.

Right of Access You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.

Right of Rectification You have the right to request that any inaccurate or incomplete personal data be corrected or updated without undue delay.

Right to Erasure ("Right to be Forgotten") You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent, or where the data has been unlawfully processed. Please note that this right is subject to certain legal retention obligations that may prevent full deletion.

Right to Restriction of Processing You have the right to request that the processing of your personal data be restricted in certain circumstances, for example while a dispute regarding the accuracy of the data is being resolved.

Right to Data Portability Where processing is based on your consent or on the performance of a contract, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.

Right to Object You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on our legitimate interests, on grounds relating to your particular situation.

Right to Withdraw Consent Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Right to Lodge a Complaint If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the French data protection supervisory authority:

CNIL (Commission Nationale de l'Informatique et des Libertés) Website: www.cnil.fr Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France

We encourage you to contact us first at serviceclient-ellaextension@gmx.fr so that we may attempt to resolve your concern directly.

We will respond to all requests within 30 days of receipt. In the case of complex or numerous requests, this period may be extended by up to two additional months, in which case we will notify you accordingly.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure the proper functioning of the site, analyze traffic, and where applicable, personalize content and advertisements.

7.1 What Is a Cookie?

A cookie is a small text file that is stored on your device (computer, tablet, or smartphone) when you visit a website. It allows the website to recognize your browser and store certain information about your preferences or past actions.

7.2 Categories of Cookies We Use

Strictly necessary cookies: These cookies are essential for the website to function properly. They enable core features such as shopping cart management, secure login, and session continuity. They cannot be disabled as the website would not function without them.
Performance and analytics cookies: These cookies collect anonymized information about how visitors use our website, such as which pages are visited most frequently and whether error messages are encountered. This data helps us improve the performance and content of our website.
Functional cookies: These cookies allow the website to remember your preferences (such as your language, currency, or region) to provide a more personalized experience.
Marketing and targeting cookies: These cookies are used to track your browsing activity across websites in order to display relevant advertisements and measure the effectiveness of advertising campaigns. They are only activated with your prior consent.

7.3 Managing Your Cookie Preferences

You may manage your cookie preferences at any time through our cookie consent banner, which is displayed upon your first visit to our website. You may also configure your browser settings to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the website.

For guidance on managing cookies in your browser, please refer to:

Google Chrome: chrome://settings/cookies
Mozilla Firefox: about:preferences#privacy
Safari: Preferences > Privacy
Microsoft Edge: Settings > Cookies and site permissions

Cookies classified as strictly necessary cannot be refused as they are essential to the operation of the website.

8. Data Security

Ella-Extension implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include, where applicable, encryption of data in transit (SSL/TLS), restricted access controls, and regular security reviews.

However, please be aware that no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, in accordance with applicable law.

9. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe that a child under 16 has provided us with personal data without parental consent, please contact us immediately at serviceclient-ellaextension@gmx.fr and we will take steps to delete such data promptly.

10. Changes to This Privacy Policy

Ella-Extension reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for any other reason. Any changes will be effective immediately upon publication on our website, and the date at the top of this page will be updated accordingly.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of our website following the publication of any changes constitutes your acceptance of the updated policy.

11. Contact

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:

Company Name: Ella-Extension Email: serviceclient-ellaextension@gmx.fr Response Time: 3–5 business days