When you make a purchase on our site, as part of our sales process, we collect the following personal information:

- First and last name,
- E-mail address,
- Billing address,
- Delivery address,
- Telephone number.

If you refuse to provide the requested personal data, we will not be able to fulfill your order.

When you browse our site, we also automatically receive your computer's Internet Protocol address (IP address), which allows us to obtain more details about the browser and operating system you are using.

With your permission, we may send you emails about our news, our new products and promotional offers.

As part of our activity of sale and delivery of products and services, we implement a processing of personal data which has the purposes of:
(i) process payments, manage invoicing and accounting;
(ii) process and track orders and deliver products;
(iii) respond to requests and solicitations from Customers and communicate with them;
(iv) promote its services.

The treatments implemented are for some:
(v) necessary for the performance of the Contract or the execution of pre-contractual measures: management of orders and their deliveries, processing of payments, response to requests for information;
(vi) necessary for commercial prospecting operations such as sending information by email;
(vii) necessary for compliance with a legal obligation: this includes processing whose purpose is the management of invoicing and accounting.

The data collected is mainly intended for processing by the Data Controller, the hosting provider, the delivery provider, the payment provider, the services in charge of marketing, the services in charge of IT security, the service in charge of sale, delivery and order, the subcontractors involved in the delivery and sale operations as well as any authority legally authorized to access the personal data in question.

We only keep the data collected for as long as necessary to meet the purposes of the processing, without exceeding a period of two (2) years from our last interaction with the user.

However, we may retain certain data necessary for the purposes of complying with legal, regulatory, judicial or administrative obligations for the period set by the applicable legal obligations.

How do we get your consent?

When you provide us with personal information, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

In accordance with the GDPR, the Customer benefits from the following rights over his personal data: (i) right of access, rectification, updating and deletion of information concerning him; (ii) right to object to the processing of personal data concerning him for legitimate reasons, without reasons and without charge, for these data to be used for commercial prospecting purposes; (iii) right to restriction of processing allowing, in certain circumstances, to temporarily freeze processing; (iv) right to question the person responsible for processing data concerning him; (v) defining guidelines relating to the fate of his personal data after his death; (vi) right of data portability from one automated system to another, without the controller being able to obstruct this; (vii) right to information by notification in the event of a security breach and illicit access to one's information; (viii) right to withdraw consent at any time to data processing; (ix) right to lodge a complaint with a supervisory authority in the event of a violation by the controller of these rights. The Customer may exercise these rights described herein by contacting us at contact@purelabnutrition.com or by mail at Pure Lab Nutrition SAS 218, rue de la Croix Nivert, 75015 PARIS, FRANCE.

We may disclose your personal information if the law requires us to do so or if you violate our General Conditions of Sale and Use.

Our store is hosted on Shopify Inc. Shopify provides us with the online e-commerce platform that allows us to sell our services and products to you.

Your data is stored in Shopify's data storage system and databases, and in the general Shopify application. Your data is stored on a secure server protected by a firewall.

Payment: If you make your purchase through a direct payment gateway (like Stripe and Mollie), then Shopify will store your credit card information. This information is encrypted in accordance with the payment card industry's data security standard (PCI-DSS).

Information relating to your purchase transaction is retained for as long as necessary to complete your order. Once your order is finalized, the information relating to the purchase transaction is deleted.

All direct payment gateways comply with the PCI-DSS standard, managed by the PCI Security Standards Council, which is the joint effort of companies such as Visa, MasterCard and American Express. PCI-DSS requirements ensure the secure processing of credit card information by our store and its service providers.

For more information, please see the Shopify Terms of Service or Privacy Policy.

Generally speaking, we may communicate your personal data with the service providers we use. They will only collect, use and disclose your information to the extent necessary to carry out the services they provide to us and we undertake to ensure that they strictly respect the same obligations as us hereunder.

We may transmit your personal data to its service providers, in particular:
(i) Shopify: e-commerce solution used by Pure Lab Nutrition, whose personal data processing policy, which the Customer hereby declares to accept, is accessible at the following link: https://help.shopify.com/fr /manual/privacy-and-security/privacy;
(ii) Klaviyo: email sending service provider. The data is used to personalize and send communications, including the personal data processing policy, which the Customer hereby declares to accept, is accessible at the following link: https://www.klaviyo.com/legal;
(iii) Smile: publisher of the tool for our Loyalty Program and our Referral Program whose personal data processing policy, which the Customer hereby declares to accept, is accessible at the following link: https://smile .io/privacy-policy;
(iv) Gorgias: publisher of the chat tool available on our site, whose personal data processing policy, which the Customer hereby declares to accept, is accessible at the following link: https://www.gorgias.com /legal/privacy.- Social networks: we use different social network cookies (e.g. Facebook, Instagram, YouTube). By browsing our site, browsing data may be transferred directly to the social networks concerned, even without direct interaction on your part. Once you leave our site or are redirected to a third party's website or application, you are no longer governed by this Privacy Policy nor by the General Conditions of Sale and Use of our site. Links: you may be required to leave our website by clicking on certain links on our site.

We assume no responsibility for the privacy practices practiced by these other sites and recommend that you read their privacy policies carefully.

To keep your personal information secure, we implement a variety of security measures and follow industry best practices.

If you provide us with your credit card information, it will be encrypted through the use of SSL security protocol and stored with AES-256 encryption.

Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

We also protect your personal data offline. Only employees who need to perform a specific job (for example, billing or customer service) have access to personally identifiable information.

Computers and servers used to store personally identifiable information are kept in a secure environment.

A cookie is a small computer file, placed and read when viewing a website. There are several categories of cookies:
(i) Technical cookies (including audience measurement cookies): they allow you to know whether or not you are connected to your customer area or reserved area, to manage your selection of products or services, etc. The site may also use statistical and audience measurement cookies intended to determine the number of visitors and the sections visited;
(ii) Cookies from third-party applications: they are used in accordance with the previous articles by Google and social networks;
(iii) Optional cookies: they are intended to improve the user experience and facilitate your searches by offering products and offers related to your interests. Here is a list of cookies we use:_session_id, unique session identifier, allows Shopify to store information about your session (referrer, landing page, etc.)._shopify_visit, no data retained, persists for 30 minutes from date last visit. Used by our website provider's internal statistics tracking system to record the number of visits._shopify_uniq, no data held, expires at midnight (depending on the visitor's location) the following day. Calculates the number of visits to a store per unique customer.cart, unique identifier, persists for 2 weeks, stores information relating to your shopping cart._secure_session_id, unique session identifier storefront_digest, unique identifier, undefined if the store has a password, it is used to know if the current visitor has access.

Certain cookies, such as technical cookies, are necessary for the operation of the site and cannot be placed without your consent. All other cookies require your consent.

You can accept or refuse, partially or totally, these cookies when you first browse the site. These cookies expire after thirteen (13) months. You are free to withdraw your consent and change your preferences at any time.

It is also possible to configure your browser so that it accepts or refuses certain cookies by following the following links:
- Microsoft Internet Explorer http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies- Microsoft Edge https://privacy.microsoft.com/fr-fr/windows-10- microsoft-edge-and-privacy- Apple Safari https://support.apple.com/fr-fr/HT201265- Google Chrome http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm= en&answer=95647
- Mozilla Firefox https://support.mozilla.org/fr/kb/effacer-cookies-donnees-Site-firefox- Opera https://help.opera.com/en/latest/web-preferences/#cookies

We reserve the right to modify this privacy policy at any time, so please review it frequently.

Changes and clarifications will take effect immediately upon posting on our site.