PRIVACY INFORMATION

Privacy Policy

This Privacy Policy explains how SCI BOWL VAR collects, uses, stores, shares, and protects personal data when you visit kindmear.com, browse our products, create an account, place an order, contact customer service, subscribe to communications, or otherwise use our services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679, commonly known as the GDPR, the French Data Protection Act, and other applicable privacy and data-protection laws.

1. Data Controller

The data controller responsible for the processing described in this Privacy Policy is:

The data controller determines why and how personal data is processed. Questions about this Privacy Policy or the use of your personal data may be sent to the contact details above.

2. Personal Data We Collect

Depending on how you use our website and services, we may collect the following categories of personal data:

• Identity information, including your name, account name, and customer reference details.
• Contact information, including your billing address, delivery address, email address, and telephone number.
• Order information, including products purchased, quantities, prices, discounts, delivery details, order status, returns, and refunds.
• Payment-related information, including payment method, payment status, transaction reference, and limited billing information.
• Account information, including login details, saved addresses, preferences, and order history.
• Customer-service information, including messages, enquiries, complaints, reviews, photographs, and other information you provide.
• Technical information, including IP address, browser type, device type, operating system, language, time zone, and website activity.
• Marketing information, including communication preferences, newsletter subscriptions, and interactions with promotional messages.

We do not request that customers send complete card numbers, card security codes, online banking passwords, or other confidential payment credentials through email or contact forms.

3. How We Collect Personal Data

We may collect personal data directly from you when you create an account, complete checkout, submit a form, subscribe to communications, request a return, contact customer service, or otherwise provide information to us.

We may also collect information automatically through cookies, server logs, security technologies, and similar tools when you use our website. More information is available in our Cookie Policy.

In limited circumstances, we may receive personal data from payment providers, delivery companies, fraud-prevention providers, analytics providers, advertising partners, or publicly available sources where permitted by law.

4. Purposes of Processing

We may process personal data for the following purposes:

• To receive, confirm, process, and fulfil orders.
• To arrange shipping, delivery, returns, exchanges, and refunds.
• To process payments and verify transaction status.
• To create and administer customer accounts.
• To provide customer service and respond to enquiries.
• To detect, investigate, and prevent fraud or misuse.
• To maintain the security and functionality of our website.
• To comply with accounting, tax, consumer, and legal obligations.
• To improve our products, services, and website experience.
• To send marketing communications where you have consented or where otherwise permitted by law.
• To establish, exercise, or defend legal claims.

5. Legal Bases Under the GDPR

We rely on one or more of the following legal bases when processing personal data:

• Performance of a contract: processing required to accept, fulfil, deliver, return, or refund your order, or to provide services requested by you.
• Legal obligation: processing required to comply with tax, accounting, consumer-protection, fraud-prevention, regulatory, or other legal requirements.
• Legitimate interests: processing necessary to operate and improve our business, protect our website, prevent fraud, manage customer relationships, and defend legal rights, provided that those interests are not overridden by your rights and freedoms.
• Consent: processing based on your freely given permission, such as certain marketing communications or non-essential cookies.
• Vital interests: processing that may exceptionally be necessary to protect a person's life or physical safety.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

6. Order and Account Information

When you place an order, we use the information provided to confirm the purchase, collect payment, prepare the products, arrange delivery, communicate order updates, provide invoices, manage returns, and offer after-sales support.

If you create an account, we may store your contact details, saved addresses, preferences, and order history so that you can manage your account and use website features more conveniently.

Certain information is required to enter into or perform a purchase contract. If required information is not provided, we may be unable to accept or fulfil the order.

7. Payment Information

Payments are processed by authorised third-party payment providers. These providers may collect and process payment information directly under their own privacy notices and security requirements.

We may receive limited transaction information, such as the payment method, transaction reference, payment status, card brand, card country, or the final digits of a payment card. We do not normally receive or store complete payment-card details or card security codes.

Payment information may be processed to complete transactions, prevent fraud, issue refunds, handle disputes, and comply with financial or legal obligations.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies for essential functions such as security, shopping-cart storage, account access, checkout, payment processing, language preferences, and remembering your privacy choices.

With your consent, we may also use optional analytics, preference, or advertising technologies. Where consent is legally required, these technologies should not be activated before you have made your choice.

You can learn more about the types of cookies used, their purposes, and how to manage your preferences by reading our Cookie Policy.

9. Marketing Communications

We may send newsletters, offers, product updates, or other promotional communications where you have provided consent or where another lawful basis permits such communication.

You may unsubscribe at any time by using the unsubscribe link included in the communication or by contacting us at [email protected]. Unsubscribing from marketing does not prevent us from sending transactional communications concerning your orders, payments, security, or customer-service requests.

We do not sell personal data to third parties for their independent direct-marketing purposes.

10. Sharing Personal Data

We may share personal data only where reasonably necessary with service providers and recipients such as:

• Website hosting and technical-service providers.
• Payment processors, banks, and fraud-prevention providers.
• Warehouses, fulfilment partners, and delivery carriers.
• Customer-service, email, and communication providers.
• Analytics, security, and website-performance providers.
• Professional advisers, including accountants and legal advisers.
• Public authorities, courts, regulators, or law-enforcement bodies where disclosure is legally required.
• A purchaser, successor, or adviser involved in a legitimate business restructuring, merger, financing, or transfer.

Service providers that process personal data on our behalf are expected to use it only for authorised purposes, maintain appropriate security, and comply with applicable data-protection obligations.

11. International Data Transfers

Some service providers may process personal data outside France or the European Economic Area. Data-protection laws in those countries may differ from those applicable within the European Union.

Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we seek to use appropriate safeguards as required by the GDPR. These may include European Commission standard contractual clauses, supplementary security measures, or another legally recognised transfer mechanism.

You may contact us to request further information about the safeguards applicable to relevant international transfers.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including the performance of contracts and compliance with legal, accounting, tax, consumer, and dispute-resolution obligations.

Retention periods may differ depending on the type of information and the reason it is processed. When determining an appropriate period, we may consider:

• The duration of the customer relationship.
• The time needed to fulfil an order or provide support.
• Applicable statutory limitation periods.
• Tax, accounting, and record-keeping requirements.
• The sensitivity and amount of the information.
• Security, fraud-prevention, and dispute risks.

When personal data is no longer required, it may be securely deleted, anonymised, or retained only where continued storage is legally required.

13. Data Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, misuse, or access.

Measures may include encrypted website connections, access controls, account authentication, monitoring, software maintenance, data minimisation, backups, staff or contractor restrictions, and the use of specialised payment and hosting providers.

No online service or storage system can be guaranteed to be completely secure. Customers should protect their passwords, avoid reusing account credentials, and contact us promptly if they suspect unauthorised account activity.

14. Your GDPR Rights

Subject to applicable conditions and exceptions, you may have the following rights regarding your personal data:

• Right of access: to obtain confirmation of whether we process your personal data and receive a copy of that data.
• Right to rectification: to correct inaccurate or incomplete personal data.
• Right to erasure: to request deletion of personal data in circumstances provided by law.
• Right to restriction: to request that processing be limited in certain circumstances.
• Right to data portability: to receive certain data in a structured, commonly used, machine-readable format and transmit it to another controller where legally applicable.
• Right to object: to object to processing based on legitimate interests and to object at any time to direct marketing.
• Right to withdraw consent: to withdraw consent at any time where consent is the legal basis for processing.
• Rights concerning automated decisions: to request protection from decisions based solely on automated processing that produce legal or similarly significant effects, subject to applicable exceptions.

These rights are not absolute and may be limited where continued processing is required by law, necessary for a contract, or needed to establish, exercise, or defend legal claims.

15. Exercising Your Rights

To exercise a data-protection right, contact us at [email protected] and clearly describe your request. You may also write to us at 563 Chem. des Plantades, 83130 La Garde, FR.

We may request information reasonably necessary to verify your identity and protect personal data from unauthorised disclosure. We will not ask for more information than is necessary for verification.

We will respond within the period required by applicable law. Where a request is complex or several requests have been submitted, the response period may be extended where legally permitted, and we will inform you of the extension.

Exercising your rights is generally free of charge. A reasonable fee may be charged, or a request may be refused, where it is manifestly unfounded or excessive, as permitted by the GDPR.

16. Automated Decision-Making and Fraud Prevention

We and our service providers may use automated tools to identify unusual transactions, protect accounts, detect fraud, manage security risks, or determine whether additional payment verification is required.

These tools may consider transaction information, device details, location indicators, payment history, or patterns associated with fraudulent activity.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without providing the protections required under applicable law.

17. Children's Privacy

Our website and products are intended for a general adult audience and are not directed to children under the age of 16. We do not knowingly collect personal data directly from children under 16 for the purpose of creating customer accounts or completing purchases.

If we learn that personal data has been collected from a child without appropriate authorisation, we will take reasonable steps to delete or restrict that information where required. A parent or legal guardian who believes that a child has provided personal data may contact us at [email protected].

18. Complaints, Policy Updates, and Contact

If you have concerns about how we process personal data, please contact us first so that we can review and respond to the issue.

You also have the right to submit a complaint to the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), or to another competent data-protection authority in the European Union, particularly in the country where you live, work, or believe an infringement occurred.

We may update this Privacy Policy to reflect changes to our website, services, providers, legal requirements, or data-processing practices. The latest version will be published on this page. Where changes materially affect your rights or the way we use personal data, we may provide an additional notice where required.

Questions, requests, and complaints concerning this Privacy Policy may be sent using the following details:

For information about cookies and tracking technologies, please read our Cookie Policy.