Privacy Policy

This Privacy Policy describes how Elle R Cosmétiques inc. (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from lookyboutique.com (the “Site”) or otherwise communicate with us (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

PERSONAL DATA COLLECTED

We use a variety of methods to collect personal information about you, including the following:

1. Directly;
You can provide us with information about your identity and contact details by filling in communication forms or by corresponding with us by mail, telephone, e-mail or other means.

2. Indirectly;
We may receive personal information about you from third parties to whom you have already provided such information in accordance with their respective privacy policies (e.g., from Facebook and Google Adwords for marketing purposes, from a background check provider for recruitment purposes, or from our payment processor for fraud prevention purposes).

3. Via automated technologies or interactions.
As you interact with our website, we collect, with your consent, certain information through log files and cookies about your device, including information about your web browser, operating system, IP address, time zone and geolocation, type of device used, times and days logged on, and some of the cookies that are installed on your device. In addition, when you browse the Site, we collect information about the individual web pages or products you visit, the websites or search terms that brought you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as "Device Information".

We collect Device Information using the following technologies:

COOKIES

Here is a list of the cookies we use. We have listed them here so that you can choose whether or not to allow them.

session_id, unique session identifier, allows Shopify to store information about your session (referrer, landing page, etc.).

_shopify_visit, no data retained, persists for 30 minutes since last visit. Used by our website provider's internal statistics tracking system to record the number of visits.

_shopify_uniq, no data retained, expires at midnight (depending on visitor location) the following day. Calculates the number of visits to a store per unique customer.

cart, unique identifier, persists for 2 weeks, stores your shopping cart information.

_secure_session_id, unique session identifier

storefront_digest, unique identifier, undefined if the store has a password, it is used to know if the current visitor has access.

  - "Log files" track Site activity and collect data such as your IP address, the type of browser you use, your Internet service provider, your referring and exit pages, and your timestamp data (date and time).

  - "Web beacons", "tags" and "pixels" are electronic files that record information about how you browse the Site.

In addition, when you make or attempt to make a purchase through the Site, we collect certain information about you, including your first and last name, your billing address, your shipping address, your payment information (including the payment method used and your credit card numbers), the items purchased, your e-mail address and your telephone number. This automatically collected information is referred to as "Order Information".

We also use third-party tools ("Hotjar") to better understand our users' needs and optimize our service and your experience. These technology services help us to better understand our users' experience (for example, how long they spend on which pages, which links they choose to click, what users do and don't like, etc.) and this enables us to build and maintain our service with user feedback. They use cookies and other technologies to collect data on our users' behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only) and preferred language used to display our website. They store this information on our behalf in a pseudonymized user profile. These tools are contractually prohibited from selling the data collected on our behalf.

For more details about Hotjar, please visit the "About Hotjar" section of the Hotjar support site.

When we use the term "Personal Information" in this Privacy Policy, we are referring to both Device Information and Order Information.

HOW DO WE USE YOUR PERSONAL INFORMATION?

Generally, we use the Order Information we collect to process any order placed through the Site (including processing your payment information, arranging shipment of your order and providing you with invoices and/or order confirmations). In addition, we use Order Information to:

• to communicate with you;
• for statistical purposes;
• assess potential frauds or risks; and
• when it corresponds to the preferences you have communicated to us, provide you with information or advertisements concerning our products or services.

We use the Device Information (in particular your IP address) we collect to evaluate potential fraud or risks and, more generally, to improve and optimize our Site (for example, by generating analyses of how our customers browse and interact with the Site, and to evaluate the success of our advertising and marketing campaigns).

If we collect, use, store or transfer your personal information, we will only do so for one of the following purposes:

1. To allow you to make a purchase, return a purchase or exchange an item;

You do not have to provide us with personal information when you purchase products and services for cash in one of our stores. If you use a debit or credit card for one of your purchases, we collect your debit or credit card information and signature (in-store only) to process and administer your payment. For purchases made on our Website, we collect your billing and shipping address, telephone number, e-mail address and gift certificate message (if applicable) in order to deliver the products you have ordered. We may also collect optional information such as your date of birth, which we use to send you promotional offers for your birthday.

When you return or exchange products, we may ask you to provide your name, address and telephone number. We collect this information to administer our loss prevention program, including to help detect and prevent fraud. For returns involving a refund to a customer's debit or credit card, we will ask you to provide your debit or credit card information in order to process and administer the refund transaction.

Type of personal information collected: contact, financial and identity information.

2. To support our marketing and advertising efforts;
When you subscribe to our mailing list to receive our newsletter or other promotional communications by mail or e-mail, we may collect personal information such as your first name, last name, e-mail address or mailing address (depending on the delivery method) and information about your interests in order to provide you with the service you have requested.

We will contact you only if you wish to be contacted. You are free to choose, at any time, not to receive our promotional communications by clicking on the "Unsubscribe" button at the bottom of our e-mails or by contacting our representatives as indicated in the "Contact" section below.

When you enter a contest, participate in a promotion or complete one of our surveys, we may collect your name, address, telephone number and e-mail address. We use this information to manage your participation in the contest or promotion and, in the case of surveys, to understand our customers and improve our product and service offering, promotions and events. When you register for a contest, promotion or survey, we may ask for your consent to receive future marketing information from us and our business partners. To withdraw your consent to such communications, please contact us as indicated in the "Contact" section below.

Type of personal information collected: contact information, identity and communications information and marketing information.
3.  To register on our Websites;
To take advantage of some of our Website features (such as the Wish List and Address Book), you may need to register. When you register, we ask you to provide your first name, last name and e-mail address so that we can provide and administer the service you request. When you register online, we may ask for your consent to receive future marketing information from us or our business partners. To withdraw your consent to such communications, please contact us as indicated in the "Contact" section below.

The "Share" and other similar features on our Website allow you to send e-mails to others. This feature requires you to provide your name and e-mail address, as well as the name and e-mail address of the recipient. We do not use the information provided in these circumstances for any other purpose without your consent or that of the e-mail recipient.

Type of personal information collected: contact and identity information.

4. To respond to your requests and communicate information with you at your request;
When you submit a comment or question to customer service by e-mail or chat, or when you visit a customer service counter at one of our stores, we may collect personal information such as your name, postal or e-mail address and telephone number in order to respond to your comment or question. We also collect various types of information that you provide to us to enable us to respond to your inquiry.

Type of personal information collected: contact information, identity and communications information and business information.

5. To improve the service level performance and content of our Website;
We may collect information about you and your use of our Website through technical means, such as cookies, Web page counters and other analytical tools. This may include your IP address, login information, browser type and version, time zone and location, browser plug-in type and version, operating system and platform, and other technologies on the devices you use to access this website. We use this information as necessary to administer and improve our website and its content, to ensure that it operates efficiently and securely, to develop our business and to inform our marketing strategy. We may also create aggregate statistical data from this information (for example, total number of website visitors), which is not personal information about you.

We, or other advertisers, may also use this information to serve advertisements to you. Where these advertisements are targeted, this may involve the use of website information and information that we (or our advertisers working on our behalf) have obtained from other entities. This will not include information such as your name or contact details. When our advertisements are served to you using your information, it is used as necessary, based on our legitimate business interests in you.

The Services may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of the Services, this content will be public and accessible by anyone.

We do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.

Type of personal information collected: aggregate data; contact information; identity and communications information; business and technical information; purchase history; review text and photo; content shared with us on social media.

6. To recruit employees;
We may advertise employment opportunities on our Website. When you apply for a job or submit a related application, you may provide us with certain personal information about yourself (such as information contained in a résumé, cover letter or similar document). We use this information to process and respond to your job application or other request.
Type of personal information collected: contact, employment and identity information.

7. To prevent or detect crime and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and data hosting).
We may process your personal information, including your purchase history, financial information, video surveillance footage and police reports, in order to investigate any suspected crime in relation to any of our properties.

This includes making decisions based solely on the automated processing of your personal information in the context of credit card payment. To help prevent crime and minimize losses to our company, we use services provided by third parties to automatically notify us or block any purchase or return transaction suspected of being fraudulent or abusive.

Type of personal information collected: contact, financial, technical and identity information; purchase history and security footage.

SHARING YOUR PERSONAL INFORMATION

Unless otherwise specified herein, we will not disclose, rent, sell or transfer to third parties any personal information about our customers without their prior consent.

We share your Personal Information with third parties who assist us in using it for the purposes described above. For example, we use Shopify to host our online store - to find out more about how Shopify uses your Personal Information, please visit: https://www.shopify.com/legal/privacy. We also use Google Analytics to better understand how our customers use the Site - to learn more about how Google uses your Personal Information, please visit: https://policies.google.com/privacy. You can also disable Google Analytics here: https://tools.google.com/dlpage/gaoptout.

1. Service providers and advertising cookies;
We may transfer your personal information to third parties who perform services on our behalf, such as third-party marketplaces, processing payments, manufacturing, storing, shipping and distributing products, hosting our website, sending e-mails or other communications on our behalf, running contests and promotions or analyzing the effectiveness of our advertising strategy. Your personal information may be stored and processed in the United States by our affiliates and other service providers.

We use follow-up marketing cookies, including Google Ads, Facebook and TikTok pixels, Bing, Klaviyo, StackAdapt, Amazon DSP and Pinterest. This means that we will continue to show you ads on the Internet, especially on the Google content network, Facebook, TikTok, Pinterest and affiliate partners. As always, we respect your privacy and do not collect any identifiable information through Google or any other remarketing system. Service providers, including Google, whose services we use, will place cookies on web browsers to serve ads based on past visits to our website. This allows us to make special offers and continue to market our services to those who have shown interest in them. You may opt out of the automated collection of information by service providers' advertising networks for the purpose of serving interest-based ads by visiting the consumer opt-out page under the self-regulatory principles for interest-based online advertising at https://optout.aboutads.info/?c=3&lang=fr. There you can modify or deactivate your Google Display Network advertising preferences at https://myadcenter.google.com/.

These service providers are subject to non-disclosure agreements and legal restrictions governing their use of the information we provide to them, and they are not permitted to use or disclose personal information for any purpose other than to perform services on our behalf or as otherwise required by applicable law.

2. Disclosure in commercial transactions;
We may be involved in the sale or transfer of part or all of our business (including transfers made as part of insolvency or bankruptcy proceedings). In connection with such sale or transfer, we may disclose your personal information to the acquiring organization, but will require the acquiring organization to agree to protect the confidentiality of your personal information in a manner consistent with this Privacy Policy.

3. Law Enforcement and Legal Disclosure.
Finally, we may disclose your personal information to a government institution that has asserted its lawful authority to obtain the information, or where we have reasonable grounds to believe the information could be useful in the investigation of unlawful activity, or to comply with a subpoena or warrant or an order made by a court, person or body with jurisdiction to compel the production of information, or to comply with court rules regarding the production of documents and information, or to our legal counsel.

BEHAVIORAL ADVERTISING

As mentioned above, we use your Personal Information to provide you with targeted advertising or marketing messages that we think may be of interest to you. To learn more about how targeted advertising works, you can visit the Network Advertising Initiative (NAI) information page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can refuse targeted advertising here :

FACEBOOK - https://www.facebook.com/settings/?tab=ads

GOOGLE - https://www.google.com/settings/ads/anonymous

BING - https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads

PINTEREST - https://help.pinterest.com/en/article/do-not-track

In addition, you can opt-out of some of these services by visiting the Digital Advertising Alliance opt-out portal at https://optout.aboutads.info/?c=3&lang=fr.

DO NOT TRACK

Please note that we do not modify our Site's data collection and usage practices when we detect a "Do Not Track" signal on your browser.

DATA TRANSFERS

Your personal information is stored in secure locations and on servers controlled by Elle R Cosmétiques inc. or its service providers, located in our offices or the offices of our service providers in Canada. If you are a resident of Quebec, please note that your personal information may be transferred to our offices or the offices of our service providers in other Canadian provinces and outside Canada.

Our service providers may be located outside your jurisdiction and may be required to disclose your personal information under the laws of their jurisdiction, including the United States. Where applicable, we have taken all reasonable steps to ensure that your information will not be used for purposes that are not relevant to the subject matter of your file, nor disclosed to service providers without your consent, except where authorized by law. You may contact us for information about our policies and practices regarding the service providers to whom we have disclosed your personal information and their location.

EUROPEAN UNION CUSTOMERS

YOUR RIGHTS

If you are a European resident, you have the right to access the personal information we hold about you and to request that it be corrected, updated or deleted. If you wish to exercise this right, please contact us using the details below.

Furthermore, if you are a European resident, please note that we process your information in order to fulfil our contractual obligations to you (for example if you place an order on the Site) or to pursue our legitimate business interests, listed above. Please also note that your information will be transferred outside Europe, including to Canada and the United States.

DATA RETENTION

When you place an order through the Site, we keep your Order Information on file, unless and until you ask us to delete it.

CHANGES

This Privacy Policy may be updated periodically to reflect changes in our privacy practices. The revised Privacy Policy will be posted on the Website. We will treat your personal information in accordance with the Privacy Policy in effect at the time of collection, or as otherwise agreed with you. If changes are made to this Privacy Policy, we will post a revised Privacy Policy on our website as soon as possible after the update.

RIGHT OF ACCESS AND RECTIFICATION

We are committed to recognizing the right of access and rectification of information concerning data subjects who wish to consult, modify or delete their personal data. Upon written request, subject to certain exceptions, we will inform you of the existence, use and disclosure of your personal information and provide you with a copy within the time limits set by law. Please send us any access request using the contact information below.

We try to respond to all legitimate requests within one month. Occasionally, it may take us longer than one month if your request is particularly complex or if you have made more than one request. In these cases, we will notify you and keep you informed. If you require additional copies, we may charge a reasonable fee.

If the personal information we hold about you is inaccurate or incomplete, you have the right to have it corrected. If you have the right to rectification and we have shared your personal information with third parties, we will inform them of the rectification where possible and where this does not require a disproportionate effort. Upon request, where possible and legal, we will also tell you to whom we have shared your personal information, so that you can contact them directly.

By mail: 200 Boulevard Saint-Jean-Baptiste, Mercier Quebec J6L 2R2, Canada

By email: contact@lookyboutique.com

RIGHT OF OBJECTION AND WITHDRAWAL

We are committed to offering you the right to object to and withdraw your personal information. The right to object means that Internet users may refuse to allow their personal information to be used for certain purposes mentioned at the time of collection. The right of withdrawal is defined as the possibility offered to Internet users to request that their personal information no longer appear, for example, on a mailing list.

You may contact us for assistance in changing, updating or deleting personal information you have already provided. Please note that we will process your request within a reasonable time.

By mail: 200 Boulevard Saint-Jean-Baptiste, Mercier Quebec J6L 2R2, Canada

By email: contact@lookyboutique.com

If we rely on your consent (or express consent) as the legal basis for processing your personal information, you have the right to withdraw that consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdrew your consent. If you withdraw your consent, we may not be able to provide you with certain products or services. We will advise you if this is the case when you withdraw your consent.

If you wish to deactivate your account, please submit a request electronically via the above addresses.

If you no longer wish to receive emails from us, please follow the steps outlined below. Please note that each time we send you an email, we will give you the option to unsubscribe from our mailing list, so you can stop receiving our emails at any time. You can also contact us as indicated in the "Contact" section below. Please allow 10 business days for your request to take effect. Thank you for your patience and understanding in processing your request.

To unsubscribe from our communications :

• Open one of our recent communications.
• Scroll down and click on "Unsubscribe".
• In the window that appears, click again on "Unsubscribe".

SAFETY

Our branches are equipped with surveillance camera systems in public areas, excluding private rooms and washrooms. These systems are in place solely for theft prevention measures and as a safety precaution for our customers.

The personal information we collect is kept in a secure environment. People working for us are required to respect the confidentiality of your information.

To ensure the security of your personal information, we use the following measures:

• SSL (Secure Sockets Layer) protocol
• SET (Secure Electronic Transaction) protocol
• Access management - authorized person
• Access management - person concerned
• Network monitoring software
• Computer backup
• Digital certificate development
• Username/password
• Firewalls

We are committed to maintaining a high degree of confidentiality by integrating the latest technological innovations to ensure the privacy of your transactions. However, since no mechanism offers maximum security, there is always an element of risk when using the Internet to transmit personal information.

Our privacy commitments meet the requirements of the IPC program.

THIRD-PARTY WEBSITES

Our site contains links to other websites that are not operated by us. This Privacy Policy does not address the privacy policy or other practices of third parties, including third parties operating a website or service accessible via a link on the Service. We advise you to consult the privacy policy of each site you visit. We have no control over, and assume no responsibility for, the content, privacy policies or practices of any third-party sites or services.

AGREEMENT

By browsing the Elle R Cosmétiques inc. website, you consent to the sharing of the above-mentioned information for the above-mentioned purposes. In store, when using a credit or debit card, credit card information is required to complete the purchase. However, payment in cash without membership in the rewards program and/or home delivery allows you to complete the purchase without data collection.

CONTACT

You may contact us at any time using the contact information below for the following reasons: you have questions or comments about this Privacy Policy; you wish to exercise any of your rights with respect to your personal information; you have a complaint about the way we handle your personal information.

Privacy Officer

200 Boulevard Saint-Jean-Baptiste, Mercier Quebec J6L 2R2, Canada

514-875-2151

contact@lookyboutique.com

Last update : November 1st, 2023