Privacy policy

The website www.make-it-shine.com is published by the company Chaination (hereinafter "we", "Chaination" or the "Company"), whose registered office is at 35 rue Béranger, 59280 Armentières, France.

The Company is responsible for processing the data of its customers and, more generally, of internet users (hereinafter "you") browsing this site from a computer, tablet or any other device allowing access to the public part of the site and to any sub-sites dedicated to Chaination customers' member areas (hereinafter collectively referred to as the "Site").

We are committed to ensuring that personal data is collected and processed lawfully, fairly and transparently, in accordance with the General Data Protection Regulation ("GDPR") and the French Data Protection Act of 1978, as amended.

For any question or complaint, please feel free to contact us by post at Chaination, 35 rue Béranger, 59280 Armentières, France,
or by email
at contact@make-it-shine.com.

 

I. GENERAL

1. Definitions

"Personal data" means any information relating to an identified or identifiable natural person (the "data subject"); an "identifiable natural person" is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their identity.

"Processing" means any operation or set of operations, whether or not by automated means, performed on personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

A "controller" is the entity which, alone or jointly with others, determines the purposes and means of the processing, and a "processor" is the entity which processes personal data on behalf of the controller.

A "recipient" is the natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not a third party.

Mandatory nature of data collection and processing
On the Site, you are informed that an answer is mandatory by an asterisk next to the field concerned or by a statement to that effect. Where there is no asterisk or "mandatory field" statement, providing the information is optional. If the mandatory information is not provided, the Company reserves the right to request additional information or to prevent, by any technical means, the relevant form (e.g. online registration or order, request for information, etc.) from being submitted.

Warnings
We invite you to be careful about what you choose to make public on the internet, particularly with regard to personal data, including private or sensitive data, made public on your own initiative or inferred from your contributions, comments and opinions of any kind on the Site or on social networks.

Please note that the processing of personal data made public by the data subject is not subject to the general legal prohibition on processing sensitive data (Art. 6, II, 4° of the French Data Protection Act of 1978).

2. Customer and prospect database management and online sales

Via the Site, you provide us with the following categories of information when you fill in our form(s) and communicate with us:

  • Identity data (title/gender; last name; first name; optionally, your date of birth);
  • Contact data (email address; postal address (street, postcode, city); phone number);
  • If you are a professional, data relating to your professional life (identity and contact details of the legal representative, company name, registered office address, VAT number, business contact details);
  • If you contact customer service, the nature and content of your request;
  • The login details for your user account: username, password. These will only be saved automatically on the Site if you consent to this via your browser settings.

When you register on the Site, we may also collect information indirectly (see the "Social networks and third-party sites" section). We reserve the right to make the registration of your user account subject to the validation of your email address.

When you place an order, we will also process information relating to the contractual and commercial relationship (in particular details of the product ordered). As orders are paid for, we will also process payment and transaction information (transaction date, amount, payment method, order number).

Finally, we collect account login data and data on the use of the tools made available to users in their dedicated online area (IP address, login time, session duration, account settings, tool management).

Purposes of processing Data Legal bases
- Carrying out operations relating to the management of files concerning: contracts (registrations); orders; deliveries; legal and commercial warranties; invoices; accounting and the follow-up of the commercial relationship (after-sales service) All data may be processed for these purposes Pre-contractual measures or performance of a contract
Compliance with legal obligations
- Management of authentication procedures
- Management of procedures for lost login details or passwords		 Identity, contact, user account and account login data Performance of a contract
- Management, processing and follow-up of your requests and exchanges with the Company via the Site
- Management of the relationship with prospects and customers and of people's reviews of products, services or content		 Identity and contact data; content, date and nature of the request or review Legitimate interest
Pre-contractual measures
- Marketing and/or sending information (newsletter), including follow-ups with prospects (including abandoned orders), management of the technical aspects of marketing operations, selection of people for loyalty, marketing, survey, product testing and promotional actions, and carrying out solicitation operations
- Organisation of competitions, lotteries or any promotional operation		 Identity and contact data
Information relating to the contractual relationship		 Legitimate interest
Consent in accordance with Article L. 34-5 of the French Postal and Electronic Communications Code (CPCE)
- Preparation of commercial statistics and advertising, including on social networks
- Improvement of the Site and of our offers		 All data relevant to the analyses Legitimate interest
- Handling of questions and any complaints, and management of requests to exercise rights of access, rectification and objection
- Prevention of and fight against fraud, including payment fraud and in particular bank card fraud
- Management of unpaid amounts and disputes		 All information permitted by law Compliance with legal obligations

Accuracy of the information provided
You must not provide false personal information or create an account for another person without their permission. The details you provide to us must always be accurate and up to date.

Personal login details
Any holder of an account giving access to an online area for making purchases has access rights that are strictly personal, confidential and non-transferable. Any Chaination account holder must protect the integrity of their access rights (username, password) to prevent a third party from logging into their account, and must change their account details if in doubt.

The holder of the access rights will be liable for any fraudulent or improper use of their access codes resulting from their own negligence. In any event, the holder of the access rights must inform us without delay of the loss or theft of their login details.

3. Information about cookies

When you browse the Site, cookies and other trackers (hereinafter "cookies") may be placed on your device. A cookie is a small file saved by your browser which, in particular, allows your device to be recognised on your subsequent visits.

We use the following categories of cookies:

  • Strictly necessary cookies: essential for the Site to function (cart, login to your account, payment, security, remembering your cookie choices). They do not require your consent and cannot be disabled.
  • Functional cookies: they improve your experience and provide certain features (live chat, size guide, language preferences, etc.).
  • Performance cookies: they allow us to measure the Site's audience, analyse browsing and improve our services.
  • Targeting cookies: placed by our advertising and social media partners, they allow us to show you advertising tailored to your interests, on our Site and on other sites.

Your consent. On your first visit, a banner allows you to accept, refuse or customise the use of cookies that are not strictly necessary. None of these cookies is placed until you have given your consent. Refusing cookies is as easy as accepting them, and your refusal has no impact on your access to the Site.

Changing your choices. You can change or withdraw your consent at any time by clicking on the "Change your consent" icon on the Site.

Duration. Cookies subject to your consent have a maximum lifetime of 13 months. Your choice is kept for a limited period, after which you will be asked again.

Detailed list. The full list of cookies used on the Site, their provider, purpose and retention period is available on our Cookie Declaration page.

4. Social networks and third-party sites

Registration on the Site and indirect collection from third parties. When you register or log in to the Site using your Facebook or Google account, we will collect your Google or Facebook ID, as well as any information you authorise us to access before confirming your registration via this type of tool (profile picture, gender, likes, etc.) and/or depending on your privacy settings on those sites.

You are informed that the publishers of third-party services (Facebook, Google) may also collect information about your use of our Site, in accordance with their own privacy policies.

More information about registering on the Site with a third-party account:

Exchanges on social networks
We may contact you or answer your questions via social networks if you first contacted us that way.

Public information
The information you have provided to us may be enriched for commercial, marketing, communication or solicitation purposes using other sources of information such as social networks (so-called "public" information, or information we can access as a page administrator).

Links to third-party sites
The Site may provide links to other sites, applications and services, which may be operated by third-party companies. Clicking on these links may allow third parties to collect or share data about you. In this case, we are not responsible for the processing of personal data by these third-party sites, and users are invited to consult their data protection policies for more information.

Links to the Site
Conversely, if a third-party site links to our Site (URL link), this does not mean that the privacy policy of that third-party site applies to our business, nor that we guarantee that third party's compliance with its personal data protection obligations.

5. Exercising your rights

You have the right to access the data concerning you, to rectify or erase it, to query it, to restrict its processing and to data portability (more information here), within the limits set by the regulations and in particular the GDPR.

You also have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data based on our legitimate interest, as well as the right to object to marketing by clicking on the unsubscribe link in the newsletter.

You can always contact us for more information and to exercise your rights. Requests should be sent by email to contact@make-it-shine.com or by post to Chaination, 35 rue Béranger, 59280 Armentières, France. We reserve the right to ask you for proof of identity and to clarify your request. If you are not satisfied with our response, you may lodge a complaint with the personal data protection supervisory authority to which you are subject (in France, the CNIL).

For all intents and purposes, please note that once you exercise your right to erasure, object to processing or withdraw your consent, the proper functioning of the Site may be disrupted or even interrupted. For example, if these rights are exercised at the time of an order, that order cannot be confirmed.

6. Retention period

Data used for managing commercial prospecting is kept for a maximum of three years from the last contact initiated by the prospect or customer. If you have not logged in to the Site or been active (for example, by clicking on a link) for a period of three years, you may receive an email inviting you to log in as soon as possible, failing which your data will be deleted from our databases.

Effective means of deleting data are put in place once the retention or archiving period necessary to fulfil the determined or imposed purposes has been reached, in particular after your account with our company has been deleted.

In accordance with our legal obligations, certain documents relating to our internal operations and containing personal information (order forms, contracts, invoices, etc.) will be archived. Similarly, we may archive data until the expiry of the limitation periods applicable to legal actions, in order to properly defend our interests before the courts in the event of subsequent litigation.

In any event, personal data being processed is not kept beyond the time necessary to fulfil the obligations defined when the contract was concluded, or imposed by the legislation in force. Beyond that, it may be anonymised and kept for statistical purposes only.

7. Recipients

We do not sell any personal data files
The information you provide to us is for internal use by authorised persons only; it is strictly confidential and may not be disclosed to third parties, except with your express consent or if you have decided to make it public.

Our external service providers (e.g. IT service provider, suppliers, carriers, etc.) may, as part of the processing described above, receive personal data where this is necessary for them to carry out their tasks.

In this respect, we undertake (i) to ensure that every data recipient provides sufficient and appropriate contractual guarantees to respect your rights, so that the processing meets the requirements of the GDPR (in particular with regard to processors), and (ii) to comply with the GDPR provisions applicable to data transfers.

On the basis of our legal obligations, your personal data may be disclosed pursuant to a law or regulation, or by virtue of a decision of a competent regulatory or judicial authority.

Commercial partnerships
With regard to marketing, we will ask for your consent before passing on information about you to commercial partners. We also reserve the right to make offers in collaboration with third parties, of which you will be informed. If you order a product or service on the Site that is not delivered directly by the Company but by a commercial partner, we will pass on to that partner the information needed to fulfil the order.

Transfers outside the EU
We undertake to comply with the applicable regulations on data transfers to countries outside the European Union, in particular as follows:

  • We transfer the data of visitors, prospects and customers to countries recognised by the European Commission as offering an adequate level of protection. In the case of transfers to the United States, only to organisations certified under the EU-U.S. Data Privacy Framework, recognised by the European Commission's adequacy decision of 10 July 2023;
  • Where the destination country does not offer an adequate level of protection, or the recipient is not certified, we govern the transfers with appropriate safeguards in accordance with the GDPR, in particular the standard contractual clauses adopted by the European Commission.

8. IT security

We undertake to implement all appropriate technical and organisational measures, using physical and logistical security means, to ensure a level of security appropriate to the risks of accidental, unauthorised or unlawful access, disclosure, alteration, loss or destruction of your personal data.

Access – Passwords

Passwords are created manually. By default, when we ask a customer to create a password, it must be at least 6 characters long. For more information on password security, any user can consult the CNIL website.

Secure payment

All transactions carried out on our Site are secure. Bank card payments are handled by our payment service providers ("PSPs"), as indicated in our general terms and conditions or on the order page for our products and services. We use an SSL encryption system to protect your personal data and the payment methods used. Thanks to this process, we are never directly in possession of your bank details.

The address of the payment page starts with "https" and is accompanied by a closed padlock, or a key appears at the bottom right of your browser. This allows you to check that you are in a secure payment area when you are asked for your bank card number. The PSPs automatically check that the connection is secure before your bank and transaction data is sent. The highest security standards are therefore applied to data storage and comply with the applicable standards.

General – Data breaches

In the event that we become aware of an incident resulting in the materialisation of the risks identified above, we undertake to:

  • Investigate the causes of the incident
  • Take the necessary measures to limit the negative effects and harm that may result from the incident
  • Notify the incident to the CNIL or to the data subjects as soon as possible, where required by law.

Under no circumstances may the commitments set out above be construed as any admission of fault or liability for the occurrence of the incident.

If you notice any security flaw or incident likely to compromise the integrity of your personal data or that of other people, please inform us immediately by email at contact@make-it-shine.com.

9. Applicable law, language, changes to this policy

This Privacy Policy is governed by French law. It is drafted in French. If it is translated into one or more languages, only the French text shall prevail in the event of a dispute. The temporary or permanent non-application of one or more clauses herein shall not constitute a waiver of the other clauses herein, which shall continue to have effect.

We reserve the right to amend this Privacy Policy. Data subjects will be notified where required by the GDPR or any other regulation. The date of the last update is indicated at the top, and we invite you to consult it regularly.

 

II. SMS MARKETING

The mobile messaging service of SAS CHAINATION (the "Service") is operated by SAS CHAINATION ("we" or "us"). By subscribing, you accept these terms.

We may modify or discontinue the Service or any of its features at any time, without notice. To the extent permitted by applicable law, we may also amend these Terms; continued use of the Service after the effective date of the changes constitutes acceptance of them.

1. Nature of messages

By subscribing, you agree to receive recurring text messages from SAS CHAINATION, sent to the number you provided, even if your number is registered on a national do-not-call list.

Messages may be sent automatically using an automatic dialling system or equivalent technology.

  • Service-related messages: order updates, account alerts, important notifications.
  • Promotional messages: special offers, new arrivals, product launches, loyalty programmes, coupons, limited-time promotions, cart reminders and other marketing communications.

Your subscription is voluntary and is not a condition of purchase.

2. Frequency and charges

Message frequency may vary depending on your interactions and our campaigns.

SAS CHAINATION does not charge directly for this service, but messaging and data rates may be applied by your mobile carrier. You are solely responsible for these charges.

3. Unsubscribing

You can unsubscribe at any time by texting:

  • STOP, END, CANCEL, UNSUBSCRIBE or QUIT.
    You will receive a single confirmation text and no further messages will be sent, unless you voluntarily subscribe again.

If you are subscribed to several SAS CHAINATION SMS programmes, you will need to unsubscribe from each one separately.

⚠️ Any attempt to unsubscribe by any other means will not be considered valid.

4. Support

For help, you can:

  • text the keyword HELP to the number used by SAS CHAINATION
  • or contact our customer service at: contact@make-it-shine.com

5. Accuracy of your number

You undertake to provide a valid number and to inform us of any change. If you change your number, you will need to subscribe to the Service again.

We may change the number or short code used for the Service at any time. Messages (including STOP or HELP) sent to an old number will not be processed.

6. Liability

Mobile carriers supporting this Service are not liable for delayed or undelivered messages.

To the extent permitted by law, SAS CHAINATION is not liable for any failure, delay or error in the transmission of messages, nor for any action taken (or not taken) as a result.

7. Personal data and GDPR

Your phone number is collected and used exclusively to send you text messages as part of the Service.

  • Data controller: SAS CHAINATION, 35 rue Béranger, 59280 Armentières, France.
  • Legal basis: your explicit consent (Article 6(1)(a) GDPR).
  • Retention period: for as long as you are subscribed; deleted within 30 days of unsubscribing.
  • Processors: SAS CHAINATION may use technical service providers specialising in sending text messages, who are contractually bound to respect the confidentiality and security of your data.

You have the right to access, rectify, erase, restrict, object to and port your data.

To exercise your rights: contact@make-it-shine.com

In the event of a dispute, you may refer the matter to the CNIL (www.cnil.fr).

 

III. OTHER

KLARNA:

In order to offer you Klarna's payment options, we may pass on to Klarna your personal data, including your contact details and order details, so that Klarna can assess whether you are eligible for these options and tailor them to your needs. Your transferred personal data will be processed in accordance with Klarna's privacy policy.