When you make a purchase on our store, as part of our buying and selling process, we collect the personal information you provide to us, such as your name, address, and email address.
When you browse our store, we also automatically receive the Internet Protocol (IP) address of your computer, which allows us to get more details about the browser and operating system you are using.
Marketing: With your permission, we may send you emails about our store, new products, and other updates.
How do you obtain my consent?
When you provide us with your personal information to complete a transaction, verify your credit card, place an order, schedule a delivery, or return a purchase, we assume you consent to us collecting your information and using it for that purpose only.
If we ask you to provide your personal information for another reason, for marketing purposes for example, we will ask for your explicit consent directly, or we will give you the option to refuse.
How can I withdraw my consent?
If after giving us your consent, you change your mind and no longer consent to us contacting you, collecting your information, or disclosing it, you can notify us by contacting us via the contact page of the website.
When you browse our site or place an order, data may be stored in your browser or retrieved from it, usually in the form of cookies. A cookie is a small text file saved by your computer, tablet, or smartphone's browser that allows user data to be retained to facilitate navigation and enable certain other features.
We use first-party cookies, placed by La Bombilla for the proper functioning of our site, most of these cookies cannot be disabled in our systems. They allow us to remember the information you enter in forms on our site so that you do not have to re-enter it during your use, but also to manage and secure access to your account or your shopping cart.
Here is a non-exhaustive list of cookies related to the operation of our site:
- session_id : unique session identifier, allows Shopify to store information related to your session (referrer, landing page, etc.).
- shopify_visit : no data retained, persists for 30 minutes since the last visit. Used by the internal statistics tracking system of our website provider to record the number of visits.
- shopify_uniq : no data retained, expires at midnight (according to the visitor's location) the following day. Calculates the number of visits to a store by unique customer.
- cart: unique identifier, persists for 2 weeks, stores information related to your shopping cart.
- secure_session_id: unique session identifier
- More information here: https://fr.shopify.com/legal/cookies
We also use third-party cookies placed by our partners. These third-party cookies are directly managed by the companies that issue them and must also comply with data protection regulations.
- audience measurement cookies: to assess site traffic (number of visits, pages viewed, cart abandonment, etc.) and improve our performance
- advertising cookies: to provide you with advertising content related to your interest in La Bombilla
Opposing cookies:
You can configure your browser to be informed of the existence or block these cookies. If you choose to block these cookies, some features of our site may be affected (for example, keeping items in your cart). If you wish to delete cookies from your web browser, you can follow the instructions below:
- Chrome: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647
- Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
- Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac
Most of these cookies expire when you end your visit to our sites. Others have a longer lifespan, which does not exceed 12 months, in accordance with current regulations. However, some trackers are exempt from obtaining this consent (this is the case for trackers that last more than 12 months).
You can also block third-party cookies:
- More information here:https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser
- If you no longer wish to see our ads on social networks, we recommend that you go to the 'settings' section and then 'advertising preferences'.
- There are also opt-out platforms for advertising cookies such as http://optout.networkadvertising.org/ or http://www.youronlinechoices.com/ or via the blue AdChoices icon
- More information about Google cookies: https://policies.google.com/privacy
We will disclose your personal information if the law requires us to do so or if you violate our terms and conditions of sale and use, or to protect our rights, our property, or our security as well as that of third parties.
We have taken the necessary precautions to comply with the General Data Protection Regulation (GDPR). Therefore, we will not share your personal information with third parties without your prior consent (except as provided above). As explained above, your information may be shared with trusted third parties who assist us in managing and operating our site, as long as these partners commit to keeping this information confidential. And only data that does not allow you to be directly identified (e.g., cookies) may be shared with our partners for marketing or advertising purposes. You can, of course, choose to oppose this.
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell you our products.
Your data is stored in Shopify's data storage system and databases, and in Shopify's general application. Your data is kept on a secure server protected by a firewall.
Payment:
If you make your purchase through a direct payment gateway, then Shopify will store your credit card information. This information is encrypted according to the data security standard established by the payment card industry (PCI-DSS). The information related to your purchase transaction is kept as long as necessary to finalize your order. Once your order is finalized, the information related to the purchase transaction is deleted.
All direct payment gateways comply with the PCI-DSS standard, managed by the PCI Security Standards Council, which is the result of a joint effort by companies such as Visa, MasterCard, American Express, and Discover.
The PCI-DSS standard requirements ensure the secure processing of credit card data by our store and its service providers.
In general, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to perform the services they provide to us.
However, some third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we are required to provide them for your purchase transactions.
Regarding these providers, we recommend that you carefully read their privacy policies so that you can understand how they will handle your personal information.
It should not be forgotten that some providers may be located or have facilities located in a different jurisdiction than yours or ours. So if you decide to proceed with a transaction that requires the services of a third-party provider, your information may then be governed by the laws of the jurisdiction in which that provider is located or those of the jurisdiction in which its facilities are located.
Once you leave our store's site or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or the General Terms and Conditions of Sale of our website.
Links
You may be led to leave our website by clicking on certain links on our site. We assume no responsibility for the privacy practices of these other sites and recommend that you carefully read their privacy policies.
To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that it is not lost, misused, accessed, disclosed, altered, or destroyed inappropriately.
If you provide us with your credit card information, it will be encrypted using the SSL security protocol and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS standard requirements and implement additional industry-recognized standards.
By using this site, you declare that you are at least the age of majority in your country, and that you have given us your consent to allow any minor under your care to use this website.
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately after their publication on the website. If we make changes to the content of this policy, we will notify you here that it has been updated, so that you know what information we collect, how we use it, and under what circumstances we disclose it, if applicable.
If our store is subject to acquisition by or merger with another company, your information may be transferred to the new owners so that we can continue to sell you products.
QUESTIONS AND CONTACT INFORMATION
If you wish to: access, correct, modify, or delete any personal information we have about you, file a complaint, or if you simply want more information, please contact our privacy standards officer via the website's contact page.