Privacy Policy
1. Purpose of the privacy policy
This Privacy Policy is intended to inform visitors to the Elora website and its clients about how their personal data is used.
2. What is Elora's role?
As part of managing our website, we act as the data controller. In this case, we decide why (purposes) and how (means) your data is used.
3. How is your personal data collected?
- We collect the personal data you provide directly to us through forms.
- Some data is collected automatically via cookies. To find out more, see our cookie policy.
4. For what purpose and for how long do we use your personal data?
| Name of the processing | Purposes | Legal basis/bases | Data concerned | Retention period |
|---|---|---|---|---|
| Site forms (Fashion Consultant/visitor contact, resource downloads, etc.) | Process your request and provide the information or services requested. | Consent | Identity and contact data (name, first name, email address, phone, etc.) | 3 years from the last contact in the active database |
| Newsletter management | Send the newsletter regularly to subscribers. | Consent to create a customer account | Email address | Until consent is withdrawn and up to 3 years from the last contact |
| Recruitment | Review and manage applications to become a Fashion Consultant. | Consent | Identity and contact details | 3 months after last contact or up to 2 years with consent |
| Cookie placement | Ensure the site's operation and security; gather statistics; offer personalized ads. | Functional cookies: legitimate interest. Optional cookies: consent. | Browsing data; identification data of the device used. | Tracker lifespan: 13 months; data retention: up to 25 months |
| Online sales management | Creating customer accounts; managing orders; processing payments; handling returns and customer service. | Contract performance | Identity and contact details (last name, first name, email, phone, delivery address, etc.); purchase history and wishlist | Online customer account: until the account is deleted or 2 years after the last login. Business relationship: duration of the contract; legal archiving for 10 years. |
| Management of rights requests | Receive, respond to, and document rights requests. | Legal obligation (GDPR) | Identity and contact details | Time required for processing; legal archiving for 5 years |
5. Who receives your personal data?
Within Elora (internal recipients)
Your personal data is processed by authorized Elora team members.
Outside Elora (external recipients)
- Our partners who ensure the smooth running of the site:
- Site maintenance and development
- Hosting with OVH
- Our marketing partners (marketing agency, SEO) and cookie management tools.
- Our customer management tool and messaging solution, to communicate with you.
- Exceptionally, when your account is linked to one of our Fashion Consultants, she may access your contact details and purchase history.
We ensure that these subcontractors are contractually committed to implementing a level of protection equivalent to ours and in compliance with regulations.
Elora is committed not to share your data with third parties unless:
- You have given your prior consent;
- Sharing is necessary to provide the requested products or services;
- A competent judicial or administrative authority requires it.
6. Transfer outside the EU
We strive to keep your data within the European Union. When transfers outside the EU are necessary, they are carried out:
- To a country recognized by the European Commission as providing an adequate level of protection; or
- To a country that does not offer adequate protection but is governed by standard contractual clauses of the European Commission.
7. What are your rights regarding your personal data?
a) Right of access
You can request and obtain information about the personal data we hold about you.
b) Right to rectification
You can request the correction of your inaccurate or incomplete personal data.
c) Right to erasure
Also known as the "right to be forgotten." You can request the deletion of your data, unless it must be retained:
- To comply with a legal obligation;
- For the establishment, exercise, or defense of legal claims.
d) Right to restriction of processing
You can request to limit the use of your data when:
- You have requested their correction (while we verify);
- The processing is unlawful and you object to erasure;
- We no longer need them but you require them for legal proceedings;
- You have objected to the processing and we are verifying our legitimate grounds.
e) Right to Data Portability
You can receive your data in a structured, machine-readable format and transfer it to another organization.
f) Right to Object
You may object to processing for legitimate reasons, except where we have compelling legitimate grounds. Processing based on your consent can be stopped at any time by withdrawing your consent.
g) Right to File a Complaint with the CNIL
You can contact the CNIL (supervisory authority): www.cnil.fr.
8. How to Exercise Your Rights?
a) How to Exercise Your Rights
You can exercise your rights by writing to us at contact@elora.com or by mail:
Elora – 3 rue de l’Industrie – 49280 La Séguinière – France.
These rights can also be exercised by completing the following form by clicking here.
b) Response Time
Elora has one month to respond to you from the date your request is received. This period may be extended by two months due to the complexity or number of requests; you will be informed if this is the case.
9. Policy Changes
This privacy policy may be updated.
Last updated: September 30, 2025.
