Privacy policy

The responsible party within the meaning of the Protection of Personal Information Act 4 of 2013 (“POPIA”) is:

LATELIER DBN (PTY) LTD trading as L’Atelier Paris
Platinum Walk, Oceans Mall
7 Lagoon Drive
Umhlanga, Durban, 4320
South Africa
contact@latelierparis.co.za
+27 031 001 7076
Registration number: 2022/430512/07
VAT number: 45 903 07 270

1. Data protection

We welcome you to our Website and thank you for your interest in our Products and services. The protection of your personal information is important to us.

In this Privacy Policy, we explain how we collect, use, store, disclose and protect your personal information, the purposes for which it is processed, the grounds on which such processing is carried out, and the rights and remedies available to you under POPIA and other applicable South African laws.

This Privacy Policy applies to personal information processed through www.latelierparis.co.za, including information collected when you browse the Website, create an account, contact us, subscribe to communications or purchase Products.

This Privacy Policy does not apply to your activities on social media platforms, payment services or other third-party websites that may be accessed through links available on our Website. These providers process personal information in accordance with their own privacy policies. We recommend that you review the relevant provider’s privacy policy before using its services or providing personal information.

2. Collection and processing of personal information

a. When you visit our Website, we or our service providers may automatically collect certain technical and usage information, including:

the browser and operating system you use;
the type of device used;
your IP address;
the date and time of your visit;
the pages accessed;
the access status, including whether a page was successfully displayed or an error occurred;
the functions used on the Website;
search terms entered;
the frequency with which pages are visited;
the names of files accessed;
the amount of data transmitted;
the Website from which you accessed our Website;
the Website you visit after leaving ours;
approximate geographic location;
and cookie or device identifiers.

This information may be collected through server logs, cookies, analytics services and similar technologies.

b. We collect additional personal information where you provide it to us, including when you:

create or use a customer account;
complete a contact or return form;
place an online order;
participate in a survey, competition or promotional campaign;
subscribe to a newsletter;
request customer support;
submit a review or comment;
or otherwise communicate with us.

The personal information collected may include your name, email address, telephone number, billing and delivery addresses, account details, order information, transaction references and communications.

We process this information only where permitted by POPIA, including where you have consented, where processing is necessary to conclude or perform a contract, where it is required by law, or where it protects a legitimate interest.

c. You are not generally legally obliged to provide personal information to us. However, certain information is required in order to:

create an account;
process an order;
receive payment;
arrange delivery or collection;
issue an invoice;
process a return or refund;
respond to a request;
or comply with applicable legal obligations.

Where information is required, failure to provide it may prevent us from providing the relevant function, service or completing the transaction. Where reasonably practicable, you will be informed whether the requested information is mandatory or optional.

3. Purpose of use

a. We use information collected during your visit to the Website for purposes including:

operating and maintaining the Website;
improving its usability and performance;
understanding how visitors use the Website;
identifying technical errors;
remembering preferences;
preventing fraud and abuse;
protecting customer accounts;
and securing our information technology systems against attacks, unauthorised access and other unlawful activities.

b. Where you provide additional personal information through an account, contact form, survey, competition or transaction, we may use that information for purposes including:

managing customer accounts;
processing and fulfilling orders;
processing payments;
issuing invoices and receipts;
arranging delivery or collection;
managing exchanges, returns and refunds;
responding to enquiries;
providing customer support;
administering competitions or surveys;
managing warranties or repairs;
preventing fraudulent transactions;
maintaining accounting and transaction records;
and complying with legal or regulatory obligations.

Where permitted by law, we may also use your information to send newsletters, Product information and promotional communications. You may object to or unsubscribe from such communications at any time.

4. Transfer of personal information to third parties

We may share personal information with third parties where reasonably necessary to operate the Website, complete transactions, provide services or comply with applicable law. These third parties may include:

Website hosting providers;
e-commerce platform providers;
payment service providers;
banks and payment networks;
courier and delivery companies;
email and communications providers;
analytics providers;
fraud-prevention and security providers;
IT service providers;
professional advisers;
auditors;
insurers;
regulators;
public authorities;
and law-enforcement bodies.

Third-party service providers processing personal information on our behalf are required to apply appropriate confidentiality and security safeguards and to process the information only for authorised purposes.

Our Website may contain links, content or services provided by third parties. If you select such a link or offer, information may be transmitted to the relevant provider, including information about the page from which you accessed the third-party service.

Where you link, connect or access our Website through a third-party service, such as Google, Facebook or another social media platform, that service may send us information in accordance with the permissions you grant and the privacy settings applicable to your account.

You may be able to view, update or disconnect certain third-party integrations through your customer account or directly through the relevant third-party service.

We are not responsible for the independent privacy practices of third parties. You should review their privacy policies before using their services.

Some third-party providers may be located outside South Africa. Where personal information is transferred internationally, we take reasonable steps to ensure that the transfer complies with section 72 of POPIA, including through appropriate contractual, legal or organisational safeguards.

The Website is hosted by a service provider established in France. The hosting provider may therefore store or process personal and technical information outside South Africa for the purposes of hosting, maintaining and securing the Website.

5. Use of usage data; analytics tools

a. We aim to tailor the content and operation of the Website to the needs of its users and to improve our Products and services. Subject to your cookie preferences and applicable law, we may use Google Analytics or another analytics service to understand user preferences, identify popular sections of the Website, measure Website traffic and detect technical or navigation issues. The information processed by analytics services may include:

pages visited;
interactions with Website functions;
date and duration of visits;
browser and device information;
referral source;
approximate location;
and technical identifiers.

b. When analytics services are used, information may be processed or stored by the relevant provider in countries outside South Africa, including the United States. International transfers of personal information are carried out in accordance with section 72 of POPIA and subject to appropriate safeguards, where required. Google Analytics may use an IP address during collection to determine approximate geographic information. The information collected and retained by Google is processed in accordance with Google’s own privacy terms and contractual safeguards.

c. Where analytics cookies are not strictly necessary for the operation of the Website, you may accept, refuse or manage them through the cookie preference tool available on the Website. You may change your cookie preferences at any time. You may also configure your browser to block or delete cookies. Cookie preferences are generally specific to the browser and device used. If you delete your cookies, use another browser or use another device, you may need to configure your preferences again.

d. Information about the analytics providers used and the available opt-out options:

i. Google LLC (“Google”)

Where Google Analytics is enabled, you may manage the relevant cookies through the Website’s cookie settings. Google also provides a browser add-on that may be used to prevent Google Analytics from collecting information about Website visits: https://tools.google.com/dlpage/gaoptout?hl=en

Further information about Google’s processing practices is available in Google’s privacy documentation.

6. Security

We implement reasonable technical and organisational security measures designed to protect personal information under our control against:

loss;
damage;
unauthorised destruction;
unlawful access;
unauthorised disclosure;
alteration;
misuse;
and other unlawful processing.

These measures may include encrypted connections, access controls, password protection, monitoring, backup procedures, confidentiality obligations and contractual security requirements imposed on service providers.

Our security measures are reviewed and improved where reasonably appropriate in light of technological developments and identified risks.

No Internet transmission or electronic storage system can be guaranteed to be completely secure. If we become aware of a security compromise involving personal information, we will take the steps required by POPIA, including notifying the Information Regulator and affected persons where legally required.

7. Grounds for processing

a. Where you have consented to the processing of your personal information, your consent provides a lawful ground for processing under POPIA. You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.

b. We may process personal information where it is necessary to take steps at your request before entering into a contract, or to conclude or perform a contract with you. This includes processing necessary to:

create an account;
process an order;
receive payment;
arrange delivery;
provide customer support;
and manage returns or refunds.

c. We may process personal information where processing is necessary to comply with an obligation imposed by law. This may include obligations relating to:

tax;
VAT;
accounting;
consumer protection;
fraud prevention;
court orders;
and regulatory requests.

d. We may also process personal information where this protects:

your legitimate interests;
our legitimate interests;
or the legitimate interests of a third party to whom the information is supplied.

Such interests may include:

maintaining the operation and security of our systems;
preventing fraud;
protecting customer accounts;
managing and improving our business;
maintaining appropriate records;
establishing, exercising or defending legal rights;
and marketing our Products and services where permitted by law.

Where we rely on a legitimate interest, we consider the nature of the information, the purpose of the processing and the rights and reasonable expectations of the person concerned.

8. Deletion of your personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or subsequently processed. Personal information may be retained for longer where:

retention is required or authorised by law;
it is necessary for a lawful purpose relating to our functions or activities;
it is required by a contract;
you have consented to its continued retention;
it is necessary to resolve a dispute;
or it is required to establish, exercise or defend legal rights.

Order, invoice, payment and accounting information may be retained for the periods required by South African tax, VAT and accounting laws.

When personal information is no longer required, we will delete, destroy, de-identify or securely archive it, subject to applicable law.

9. Rights of data subjects

a. Subject to POPIA and other applicable law, you may have the right to:

ask whether we hold personal information about you;
request access to your personal information;
request correction of inaccurate, irrelevant, excessive, outdated, incomplete or misleading information;
request deletion or destruction of information that we are no longer authorised to retain;
object to certain processing;
object to direct marketing;
withdraw consent where processing is based on consent;
and request information about third parties that have had access to your personal information.

Certain requests may be refused or limited where permitted or required by law.

b. Where you have consented to the processing of your personal information, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal or processing based on another lawful ground.

c. You may object at any time to the use of your personal information for direct marketing. You may exercise this right by:

using the unsubscribe function included in an electronic communication;
changing your communication preferences where available;
or contacting us.

We may retain limited information necessary to record and respect your objection.

d. You may exercise your rights by contacting:

We may request reasonable proof of identity before responding to a request in order to protect personal information against unauthorised access or disclosure.

e. If you believe that your personal information has been processed in breach of POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa. Complaints may be submitted through the Information Regulator’s official complaint channels.

Information Regulator of South Africa
Website: https://inforegulator.org.za/
Complaints page: https://inforegulator.org.za/complaints/
Email: popiacomplaints@inforegulator.org.za

You may contact us before submitting a complaint so that we have an opportunity to investigate and resolve your concern.

10. Newsletter

If you subscribe to the newsletter offered on our Website, the information collected during registration will be used to send you the requested newsletter and related marketing communications.

We may process information such as:

your name;
email address;
subscription date;
communication preferences;
and information relating to the delivery or opening of communications, where applicable.

We will send electronic direct marketing communications only where permitted by POPIA and other applicable law.

You may unsubscribe at any time by using the unsubscribe function provided in the newsletter or by contacting us at contact@latelierparis.co.za.

Unsubscribing from the newsletter does not prevent us from sending communications that are necessary for an existing transaction or customer relationship, such as order confirmations, payment notifications, delivery updates or responses to customer service requests.

11. Cookies

Below you will find information about the cookies and similar technologies that may be used on the Website.

We use cookies and similar technologies, including local storage, pixels and tags, to operate the Website, remember preferences, understand how the Website is used and improve its usability.

Google Analytics and other authorised service providers may also use cookies, subject to your preferences and applicable law.

a. Function and use of cookies

i. Cookies are small files stored on your computer, laptop, mobile device or browser by a Website you visit. They may allow us to:

recognise a device or browser;
maintain a shopping cart;
operate checkout and payment functions;
secure customer accounts;
remember language and other preferences;
understand how visitors use the Website;
measure Website performance;
and record cookie preferences.
Cookies may contain or be linked to personal information.

ii. Strictly necessary cookies may be placed where required for the operation, security and functionality of the Website. Non-essential cookies, including certain analytics or marketing cookies, will be used in accordance with your choices and applicable law. You may manage cookies as follows:

I. You may accept, refuse or customize non-essential cookies through the cookie preference tool available on the Website.

II. Most browsers automatically accept cookies. You may change your browser settings to block or restrict cookies.

III. You may delete cookies already stored on your device at any time. Please refer to the instructions provided by your browser or device manufacturer.

IV. Cookie preferences and browser settings are device- and browser-specific. You may therefore need to repeat the process for each device and browser used.

iii. If you reject or disable certain cookies, some Website functions may not be available or may operate only to a limited extent.

b. Types of cookies used

Strictly necessary cookies: These cookies are required for essential Website functions, including security, session management, shopping cart, checkout, payment processing, customer accounts and the storage of cookie preferences.
Functional cookies: These cookies remember choices such as language, location, account settings and other preferences in order to provide improved and more personalized functions.
Statistical and analytics cookies: These cookies allow us to compile visitor statistics, understand how the Website is used and detect navigation or technical issues in order to improve the quality of the Website.
Advertising and marketing cookies: Where used, these cookies may measure advertising performance, build advertising audiences and display content or advertising based on Website interactions.

c. Configure your cookie consent

Configure cookie consent

You may configure or change your cookie preferences at any time through the cookie management tool available on the Website.

i. Where enabled, we use Google Analytics to understand Website usage, tailor content to user interests and improve our offering.

ii. Information collected through Google Analytics may be processed on servers located outside South Africa, including in the United States. Any transfer of personal information outside South Africa is subject to section 72 of POPIA and appropriate legal, contractual or organisational safeguards.

iii. You may object to or prevent the use of Google Analytics cookies by refusing the relevant cookie category through the Website’s cookie settings. If cookies are deleted or another browser or device is used, your preferences may need to be configured again.

iv. Provider information

I. Google LLC (“Google”)

Where Google Analytics is enabled, you may manage its cookies through the Website’s cookie preference tool. Google also provides an opt-out browser add-on at: https://tools.google.com/dlpage/gaoptout?hl=en

Further information about Google’s privacy and data-processing practices is available in Google’s privacy documentation.