Privacy policy

1. Data controller

The data controller is Dameva Business, trading as Ambiance Provence, 197 boulevard Léo Lagrange, 83300 Draguignan, France, SIRET 538 583 345 00029.

For any question: contact@ambiance-provence.com or +33 6 43 00 08 50.

2. Data collected

• Identity and contact details: surname, first name, e-mail, telephone, delivery and billing addresses.
• Customer account: login details (the password is stored in encrypted form), order history, Lavy loyalty points, alerts requested.
• Orders: products purchased, amounts, delivery method, pick-up point, tracking, exchanges with customer service.
• Payment: the method chosen and the result of the transaction. Card numbers are entered with our payment provider and are not communicated to us.
• Messages: content of the contact form and attached files.
• Browsing: IP address, technical data and, with your consent, audience measurement and advertising data.

Fields marked as mandatory are necessary to process your request or your order. Without them, we would not be able to follow up.

3. Purposes and legal bases

Purpose	Legal basis
Processing orders, payments, deliveries and returns	Performance of the contract
Managing the customer account and the Lavy programme	Performance of the contract
Answering your messages and providing customer service	Performance of the contract or legitimate interest in replying to you
Keeping the accounts and meeting legal obligations	Legal obligation
Securing the site and preventing fraud	Legitimate interest
Handling complaints and disputes	Legitimate interest
Receiving and proving online withdrawals	Legal obligation
Sending our newsletter	Consent, or legitimate interest for products similar to those already bought by a customer
Measuring audience and personalising advertising	Consent

You can unsubscribe from our e-mails at any time using the link in each of them. We make no fully automated decision producing legal effects concerning you.

4. Recipients

Your data is accessible to the shop operator and, to the extent necessary for them, to:

• Hosting: o2switch (France);
• Payment: myPOS, PayPal and our bank for bank transfers;
• Delivery: Boxtal, Mondial Relay and Colissimo (La Poste);
• Audience measurement and advertising, with your consent: Google and Meta;
• Authorities and regulated professions, where the law requires it.

We do not sell your data.

Some providers, in particular Google and Meta, may transfer data outside the European Economic Area, notably to the United States. These transfers rely on an adequacy decision, including the EU–US Data Privacy Framework, or on the European Commission’s standard contractual clauses.

5. Retention periods

Data	Duration
Customer account	Until it is deleted, or 3 years after the last activity
Orders and customer relationship	5 years after the last order
Invoices and accounting documents	10 years from the closing of the financial year
Orders of €120 or more	10 years after delivery
Marketing	3 years after the last contact or the end of the commercial relationship
Contact messages	3 years after the request has been handled, unless there is a dispute
Withdrawal declarations	5 years after the declaration
Cookies and trackers	See the cookies and preferences page

At the end of these periods, data is deleted or anonymised, unless keeping it remains necessary to prove a right.

6. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. You may withdraw your consent at any time, without affecting the processing already carried out, and set instructions on what happens to your data after your death.

To exercise these rights, write to contact@ambiance-provence.com or to the postal address above. We reply within one month, which may be extended by two months for a complex request. If there is reasonable doubt about your identity, proof may be requested.

If you consider that your rights are not being respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.

7. Security

We implement appropriate technical and organisational measures, including encryption of exchanges, access control, password protection and backups.

8. Minors

The shop is intended for adults. Orders and the creation of an account are not intended for minors.

9. Changes to this policy

We may update this policy to take account of changes to the site or to the regulations. The date of the version in force is shown at the top of this page. Any significant change will be notified to you on the site or by e-mail.