Privacy Policy

1 Introduction

Welcome to Boost Barber. We place paramount importance on the protection of your personal data and are committed to respecting your privacy. This privacy policy explains how we collect, use, share, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and current French legislation.

By using our website https://boostbarber.com/, you accept the practices described in this policy.

2 Data Controller

3 Data Collected

We collect different types of personal data when you use our site:

• Identification information: name, first name, email address, phone number
• Delivery information: full postal address
• Payment information: transaction data (via our secure payment providers)
• Browsing information: IP address, browser type, pages visited, visit duration
• Cookies and similar technologies: to enhance your user experience
• Purchase history: products ordered, order dates and amounts

4 Purposes of Processing

We use your personal data for the following purposes:

• Process and fulfill your orders
• Manage your customer account
• Contact you regarding your orders
• Improve our products and services
• Personalize your shopping experience
• Send you marketing communications (with your consent)
• Prevent fraud and ensure the security of our site
• Comply with our legal and regulatory obligations

5 Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual performance: to process your orders and provide our services
• Consent: for marketing communications and the use of non-essential cookies
• Legitimate interest: to improve our services, prevent fraud, and ensure security
• Legal obligation: to comply with our tax and accounting obligations

6 Data Sharing

We never sell your personal data. We may share your information with:

• Service providers: web hosting, payment processing, delivery
• Marketing services: with your explicit consent
• Legal authorities: if required by law or to protect our rights
• Business partners: only as necessary for the performance of our services

All our partners are required to respect the confidentiality of your data and to use it only for the purposes for which it was shared.

7 Data Retention

We retain your personal data as long as necessary to fulfill the purposes described in this policy:

• Account data: until your account is deleted or 3 years of inactivity
• Order data: 10 years in accordance with accounting obligations
• Marketing data: 3 years from the last contact
• Cookies: according to the durations defined in our cookie policy (maximum 13 months)

8 Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct your inaccurate or incomplete data
• Right to erasure: request the deletion of your data
• Right to restriction: restrict the processing of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to withdraw your consent: at any time for processing based on consent
• Right to lodge a complaint: with the CNIL (French Data Protection Authority)

9 Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, modification, disclosure, or destruction:

• SSL/TLS encryption for all communications
• Secure data storage with restricted access
• Regular backups and recovery procedures
• Regular training of our staff on data protection
• Periodic security audits
• PCI-DSS certified payment processors

10 Cookies

Our site uses cookies to improve your experience. Cookies are small text files stored on your device. We use:

• Essential cookies: necessary for the site to function
• Performance cookies: to analyze site usage
• Functionality cookies: to remember your preferences
• Advertising cookies: to personalize ads (with your consent)

You can manage your cookie preferences via your browser settings or our consent banner.

11 International Transfers

Your data is primarily hosted and processed within the European Union. If we transfer data outside the EU, we ensure that appropriate safeguards are in place (standard contractual clauses, Privacy Shield, etc.) to protect your data in accordance with the GDPR.

12 Minors

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from minors without parental consent. If you believe we have collected data concerning a minor without authorization, please contact us immediately.

13 Policy Changes

We may update this privacy policy periodically to reflect changes in our practices or for legal, regulatory, or operational reasons. The date of the last update is indicated at the top of this page. We encourage you to review this policy regularly to stay informed about how we protect your data.

In the event of a substantial change, we will notify you by email or via a visible notice on our site.

14 External Links

Our site may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of each site you visit.