LS SOCIETY determines the purposes and means of the processing described below, in accordance with Regulation (EU) 2016/679 (GDPR) and French Data Protection Act No. 78-17 of 6 January 1978 as amended.

We only collect the data needed to process your order and manage our customer relationship.

• Identity and contact — first name, last name, email address, phone number.
• Delivery — postal address, postcode, city, country.
• Order — products ordered, amount, date, order number.
• Payment — card details are entered directly with our provider Stripe. LS SOCIETY never has access to your card number and stores no record of it.
• Browsing — technical data strictly necessary for the site to function.

• Processing and delivering orders — performance of the contract.
• Handling customer service, returns and complaints — performance of the contract.
• Issuing and keeping invoices — legal obligation.
• Sending marketing communications — consent, which you can withdraw at any time.
• Securing the site and preventing fraud — legitimate interest.

Your data is never sold or rented. It is shared only with the providers required to deliver the service:

• HighLevel Inc. — website hosting and customer relationship management.
• Stripe — payment processing.
• The carrier responsible for delivering your order.

Our host HighLevel Inc. and our payment provider Stripe are based in the United States. These transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, by these providers' certification under the Data Privacy Framework.

• Order data — for the duration of the commercial relationship, then 5 years.
• Invoices and accounting records — 10 years, as required by the French Commercial Code.
• Non-customer prospects — 3 years from the last contact.
• Newsletter data — until consent is withdrawn, then 3 years.

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to give instructions on what happens to it after your death.

To exercise these rights, write to [email protected]. We will respond within one month. Proof of identity may be requested where there is reasonable doubt.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — or at www.cnil.fr.

The site currently uses only cookies strictly necessary for it to function: session management, cart storage, language preference and payment security. These cookies are exempt from prior consent under Article 82 of the French Data Protection Act.

No analytics or advertising trackers are active on the site. Should such tools be added, a consent banner would be implemented and this policy updated.

The site is served over HTTPS and payments are handled by Stripe, a PCI-DSS Level 1 certified provider. LS SOCIETY implements appropriate technical and organisational measures to protect your data against unauthorised access, alteration or disclosure.

This policy may be amended to reflect legal or technical developments. The date of the latest update appears at the top of this page.