Privacy Policy
1. Purpose of the privacy policy
This Privacy Policy is intended to inform Elora website visitors and clients about how their personal data is used.
2. What is Elora's role?
As part of managing our website, we act as the data controller. In this case, we decide why (purposes) and how (means) your data is used.
3. How is your personal data collected?
- We collect the personal data you provide directly through forms.
- Some data is collected automatically via cookies. To learn more, see our cookie policys.
4. For what purpose and for how long do we use your personal data?
| Name of processing | Purposes | Legal basis | Data concerned | Retention period |
|---|---|---|---|---|
| Site forms (contact with Fashion Consultants/visitors, resource downloads, etc.) | Process your request and provide you with the requested information or services. | Consent | Identity and contact data (name, first name, email address, phone, etc.) | 3 years from the last contact in the active database |
| Newsletter management | Regularly send the newsletter to subscribers. | Consent to create a customer account | Email address | Until consent is withdrawn and up to 3 years from the last contact |
| Recruitment | Review and manage applications to become a Fashion Consultant. | Consent | Identity and contact data | 3 months after last contact or up to 2 years with consent |
| Cookie placement | Ensure the site's operation and security; gather statistics; offer personalized advertising. | Functional cookies: legitimate interest. Optional cookies: consent. | Browsing data; identification data of the device used. | Tracker lifespan: 13 months; data retention: up to 25 months |
| Online sales management | Creating customer accounts; managing orders; processing payments; handling returns and customer service. | Performance of a contract | Identity and contact data (last name, first name, email, phone, delivery address, etc.); purchase history and wishlist | Online customer account: until the account is deleted or 2 years after the last login. Business relationship: duration of the contract; legal archiving for 10 years. |
| Management of rights requests | Receive, respond to, and document rights requests. | Legal obligation (GDPR) | Identity and contact data | Time required for processing; legal archiving for 5 years |
5. Who is your personal data intended for?
Within Elora (internal recipients)
Your personal data is processed by authorized Elora staff members.
Outside Elora (external recipients)
- Our partners who ensure the proper functioning of the site:
- Site maintenance and development
- Hosting with OVH
- Our marketing partners (marketing agency, SEO) and cookie management tools.
- Our customer management tool and messaging solution, to communicate with you.
- Exceptionally, when your account is linked to one of our Fashion Consultants, she may access your contact details and purchase history.
We ensure that these subcontractors are contractually committed to implementing a level of protection equivalent to ours and in compliance with regulations.
Elora is committed to not sharing your data with third parties except in the following cases:
- You have given your prior consent;
- Sharing is necessary to provide the requested products or services;
- A competent judicial or administrative authority requires it.
6. Transfer outside the EU
We strive to keep your data within the European Union. When transfers outside the EU are necessary, they are carried out:
- To a country recognized by the European Commission as providing an adequate level of protection; or
- To a country that does not offer adequate protection but is governed by standard contractual clauses of the European Commission.
7. What are your rights regarding your personal data?
a) Right of access
You can request and obtain information about the personal data we hold about you.
b) Right to rectification
You can request the correction of your inaccurate or incomplete personal data.
c) Right to erasure
Also known as the "right to be forgotten." You can request the deletion of your data, unless it must be retained:
- To comply with a legal obligation;
- For the establishment, exercise, or defense of legal claims.
d) Right to restriction of processing
You can request to limit the use of your data when:
- You have requested their correction (while we verify the information);
- The processing is unlawful and you object to erasure;
- We no longer need them, but you require them for legal proceedings;
- You have objected to the processing and we are reviewing our legitimate grounds.
e) Right to data portability
You can receive your data in a structured, machine-readable format and transfer it to another organization.
f) Right to object
You may object to processing for legitimate reasons, except where we have compelling legitimate grounds. Processing based on your consent can be stopped at any time by withdrawing your consent.
g) Right to lodge a complaint with the CNIL
You can contact the CNIL (supervisory authority): www.cnil.fr.
8. How to exercise your rights?
a) How to exercise your rights
- By postal mail:
Marketing Department
Elora
590 Allée des Hêtres,
69760 Limonest - Or by completing the form by clicking here.
b) Response time
Elora has one month to respond to your request from the date it is received. This period may be extended by two months due to the complexity or number of requests; you will be informed if this is the case.
9. Policy Changes
This privacy policy may be updated.
Last updated: September 30, 2025.
