Here at Moi-Même we are committed to safeguarding the privacy of our website visitors and service users. In this policy we explain how we will handle your personal data. Please read these in conjunction with our Terms and Conditions.
Moi-Même is the trading name of C Bourquin Services Ltd. We are the controller and processor of your data under GDPR (General Data Protection Regulation). Our nominated representative as data controller is Camilla Bourquin.
Our contact details are here.
1. The data we collect
The amount and type of data we collect from you depends on our relationship with you as a visitor and customer of our site and company:
1.1 Visitor to moi-meme.co.uk with no further interaction:
We may collect data about your use of our website and services (“usage data”). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use.
The source of the usage data is our analytics tracking system – Google Analytics and the Facebook pixel installed on our website.
1.2 Visitor to moi-meme.co.uk with subscription to our email list:
Information in 1.1 plus:
1.3 Visitor to moi-meme.co.uk with customer account created:
Information in 1.1 and 1.2 (if relevant) plus:
Depending on how much information you add when creating your account, we will collect some or all of the following (“account data”):
- Your name
- Your email address
- Your billing address
- Your shipping address
- For PayPal payments: your PayPal email address
- For credit/debit card payments: your customer ID and card tokens created by Stripe, our payment processor
- Answers to your preferences questionnaire
- IP address
1.4 Subscription or shop product purchased (“transaction data”):
As per 1.3
1.5 Contacting us:
Should you contact us directly, either via our general email address (firstname.lastname@example.org), an employee’s Moi-Même email address or the contact form on our website, we will collect your email address and any information included within the emails (“enquiry and correspondence data”). The correspondence data may include the communication content and metadata associated with the communication. Our website will generate the metadata associated with communications made using the website contact forms.
How we use your personal data
2.1 Usage data collected via Google Analytics and Facebook Pixel in 1.1:
This usage data may be processed for the purposes of analysing the use of the website and services. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services.
We also collect data about your activities that does not personally or directly identify you when you visit our website or the websites and online services where we display advertisements (“Publishers”). This information may include the content you view, the date and time that you view this content, the products you purchase, or your location information associated with your IP address. We use the information we collect to serve you more relevant advertisements (referred to as “Retargeting”). We collect information about where you saw the ads we serve you and what ads you clicked on.
2.2 Email list data collected in 1.2:
If you have consented to receive emails from us, we will process your email list data to send you marketing emails covering topics that we believe may be relevant and of interest to you. These may include, but are not limited to: offers and discounts, new and existing products, blog posts, queries regarding your account or purchases, reminders about incomplete purchases in your basket etc.
You are welcome to unsubscribe from our email list at any time by clicking ‘unsubscribe’ in any email sent from us.
2.3 Account data collected in 1.3:
We may process your account data for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is our legitimate interests, namely the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
2.4 Transaction data collected in 1.4:
We may process transaction data for the purpose of supplying the purchased goods and services and keeping proper records of those transactions. We may also process this data to analyse the effectiveness of our marketing and make decisions on future product offerings. We may use your email address collected in 1.4 to confirm your transaction, contact you if there are any issues regarding your purchase and confirm dispatch of your order. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely our interest in the proper administration of our website and business.
2.5 Enquiry and correspondence data collected in 1.5
We may process this data to resolve queries raised by you, for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users.
2.9 In addition to the specific purposes for which we may process your personal data set out in this Section 2, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Providing your personal data to others
3.1 Financial transactions relating to our website and services are handled by our payment services providers, PayPal and Stripe. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. You can find information about the payment services providers’ privacy policies and practices at https://www.paypal.com/ and https://stripe.com/gb.
3.2 We will pass your personal details, specifically your name, email address, shipping address and any products to be sent to you to our fulfilment centre so that they can pack and send subscription boxes and orders.
3.3 In order to process your subscription or shop purchase orders, your details may be held or passed to any or all of the following organisations:
- Stripe – our payment processor for credit and debit cards
- PayPal – alternative payment processor
- Mailchimp – for email marketing
- Fulfilment centre – for the packing and sending of subscription boxes and shop orders
- Dropship brands – for orders that are placed on our website and fulfilled directly by our partner brands – we currently have dropship agreements in place with the following: Katie Loxton
3.3 In addition to the specific disclosures of personal data set out in this Section 3, we may also disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Retaining and deleting personal data
4.1 This Section 4 sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
4.2 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
4.3 We will retain and delete your personal data as follows:
(a) all personal data will be retained for a maximum period of 2 years following the cancellation of a subscription, at the end of which period it will be deleted from our systems.
(b) all personal data will be retained for a maximum period of 2 years following the last active communication with you regarding an enquiry or shop transaction, at the end of which period it will be deleted from our systems.
(c) all personal data will be retained for a maximum period of 2 years following the last active communication with you regarding an enquiry or shop transaction, at the end of which period it will be deleted from our systems.
(d) following a request to unsubscribe from our email list, Mailchimp will remove your email from any future communications and we will remove your data from Mailchimp within 28 days of your unsubscribe request.
4.4 Notwithstanding the other provisions of this Section 4, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
5.1 We may update this policy from time to time by publishing a new version on our website.
5.2 You should check this page occasionally to ensure you are happy with any changes to this policy.
6.1 You may instruct us to provide you with any personal information we hold about you; provision of such information will be subject to:
(a) the supply of appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing your current address).
6.2 We may withhold personal information that you request to the extent permitted by law.
Third party websites
7.1 Our website includes hyperlinks to, and details of, third party websites.
7.2 We have no control over, and are not responsible for, the privacy policies and practices of third parties.
8.1 Please let us know if the personal information that we hold about you needs to be corrected or updated.
9.1 A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
9.2 Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
9.3 Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
Cookies that we use
Cookies used by our service providers
12.1 Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:
(a) https://support.google.com/chrome/answer/95647?hl=en (Chrome);
(b) https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);
(c) http://www.opera.com/help/tutorials/security/cookies/ (Opera);
(d) https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);
(e) https://support.apple.com/kb/PH21411 (Safari); and
(f) https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).
12.2 Blocking all cookies will have a negative impact upon the usability of many websites.
12.3 If you block cookies, you will not be able to use all the features on our website.
13.1 This website is owned and operated by C Bourquin Services Ltd trading as Moi-Même.
13.2 We are registered in England and Wales under registration number 08875180, and our registered office is at 6 Minster Way, Bath, BA2 6RQ.
13.3 You can contact us:
(a) by post, using the postal address given above;
(b) using our website contact form;
(c) by telephone, on the contact number published on our website; or
(d) by email, using the email address published on our website.