Privacy policy
(UPDATED 07/04/2022)
This privacy policy is designed to help you understand how Sanaflow collects, processes and stores your personal data.
The list below reproduces the different sections of this privacy policy. You can click directly on the titles below to access a specific section of this privacy policy.
1- Data controller / Contact
2- When are your personal data collected?
3- Processing of personal data by Sanaflow
4- Recipients of personal data
5- How will your personal data be hosted?
6- Retention period for personal data processing
7- Exercise of legal rights
1- Data controller / Contact
This privacy policy is intended to help you understand how your personal data is collected, processed and stored by Sanaflow (hereinafter "Sanaflow", "we ", " our "and " our "), data controller within the meaning of European regulations on the protection of personal data, Sanaflow société SAS with capital of 10,000 euros, registered in the PARIS Trade and Companies Register under number 893503516, whose registered office is located at 54 rue crillon, 69006 LYON, France.
Sanaflow (Le Lab de l'Endo) can be reached via the following contact methods:
- Contact us at [email protected]
- Call us on 07 61 39 32 28
- By writing to us at 54 rue crillon, 69006 Lyon, France
2- Consent
When you provide us with your personal information to complete a transaction, verify your credit card, place an order, arrange for delivery or return a purchase, we assume that you consent to the collection and use of your information for this purpose only.
If we ask you to provide us with your personal information for any other reason, for example for marketing purposes, we will ask you directly for your explicit consent, or we will give you the opportunity to refuse.
If, after having given us your consent, you change your mind and no longer consent to our contacting you, collecting your information or disclosing it, you may notify us by contacting us at [email protected] or by mail at: SANAFLOW - 54 RUE CRILLON, 69006 LYON, France
3- When are your personal data collected?
We receive and process a certain amount of information, which may include personal data, about you when you access and use our site in various ways:
- When you provide us directly with your personal data by filling in a registration or contact form on our site.
- When you link your account on the site to an account opened on a third-party site or social network, or within the limits permitted by the privacy settings you have defined on that third-party site or social network.
We track your activity and your use of our site via our server log files and "cookie" tracking tools and technologies. (section below)
4- Cookies
When you browse our site and/or place an order, data may be stored in your browser or retrieved. These are known as cookies.
The French Data Protection Authority (CNIL) defines a cookie as "a small file stored by a server on a user's terminal (computer, telephone, etc.) and associated with a web domain (i.e. in most cases, with all the pages of a single website). This file is automatically returned on subsequent contacts with the same domain."
In practice, we use first-party cookies. These cookies are necessary for the proper functioning of the Lab de l'Endo site. They enable us to memorize the information you enter in the forms on our site(for example, so that you don't have to re-enter your information each time you use the site, or to manage and secure access to your account or shopping cart). Most of them cannot be deactivated.
Here you will find a non-exhaustive list of cookies related to the operation of our site*:
- session_id: unique session identifier, allows Shopify to store information about your session (referrer, landing page, etc.).
- shopify_visit: no data retained, persists for 30 minutes since last visit. Used by our website provider's internal statistics tracking system to record the number of visits.
- shopify_uniq: no data retained, expires at midnight (depending on visitor location) the following day. Calculates the number of store visits per unique customer.
- cart: unique identifier, persists for 2 weeks, stores your shopping cart information.
- secure_session_id: unique session identifier
- storefront_digest: unique identifier, undefined if the store has a password, used to determine whether the current visitor has access.
*SOURCE: Shopify
We also use third-party cookies placed by our partners. These third-party cookies are managed directly by the companies issuing them, who must also comply with data protection regulations.
As part of the General Data Protection Regulation (RGPD) (which came into force on May 25, 2018) forming part of the French Data Protection Act of 1978 establishing rules on the collection and use of data on French territory, we systematically offer users of the Lab de l'Endo website the option of choosing the use of cookies.
You will find this module as soon as you enter the site:
Oppose cookies via your browser :
5- Recipients of personal data
In our capacity as data controller, we will be the first recipients of your personal data. More specifically, your data will be processed by the following staff at Sanaflow (Le Lab de l'Endo): Sale of natural, food, non-food & cosmetic products for women
We may also share your personal data with third parties in the following situations:
- Your personal data may be communicated to police authorities (upon judicial requisition) or to any person legally entitled to receive such information (upon court order).
6- How will your personal data be hosted?
We ensure that personal data is adequately and appropriately secured, and have taken the necessary precautions to preserve the security and confidentiality of data and to prevent it from being distorted, damaged or communicated to unauthorized persons.
Your data is hosted by Google , headquartered at 1600 Amphitheatre Parkway Mountain View, CA 94043.
All personal data collected is hosted in Europe or in countries recognized by the European Commission as offering adequate protection of personal data.
https://www.shopify.fr/legal/mentions-legales
7- Retention period for personal data processing
All personal data will be destroyed immediately upon deletion of the user's account.
Your personal data will also be destroyed if you have not logged in to your user account for a period of more than six (6) months.
They will then be archived on separate databases in order to meet our legal obligations for a period not exceeding five (5) years from the date of archiving.
8- Exercise of legal rights
In accordance with European regulations on the protection of personal data, you have the following rights:
- A right of access enabling you at any time to find out whether or not your personal data is being processed by our services and, if so, to have access to said personal data and to the information required by law concerning the way in which said data is processed,
- A right of rectification allowing you to request that any inaccuracies concerning your personal data be corrected as soon as possible,
- A right to deletion, allowing you to request as soon as possible that your personal data be deleted, provided that this request for deletion complies with the conditions required by the applicable law,
- A right to limit the processing of your personal data, provided that this request for limitation complies with the conditions required by the applicable law,
- A right to portability enabling you to receive your personal data in a structured, commonly used and machine-readable format, or to request that such personal data be transmitted to another data controller, provided that such request for portability complies with the conditions required by applicable law,
- A right to object to the processing of your personal data for reasons relating to your particular situation, provided that such objection complies with the conditions required by the applicable law,
- The right to withdraw at any time the specific consent given to the collection of your personal data, in particular when the processing of your personal data is used for commercial prospecting purposes,
- The right to define directives concerning the conservation, deletion and communication of your personal data after your death.
These rights may be exercised by contacting us directly at the following email address: [email protected] or by using the following contact form: https://www.lelabdelendo.com/pages/contact . With regard to the withdrawal of your consent for commercial prospecting purposes, an unsubscribe link will also be provided in any commercial solicitation sent directly to you.
Complaints concerning the use of your personal data may also be addressed to the Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX, France.