Privacy Policy. 

ARTICLE 1 – PERSONAL INFORMATION COLLECTED

Ordering & Navigation on Our Site

When you make a purchase or create a customer account on our website, as part of our buying and selling process, we collect the personal information you provide that is necessary to prepare and deliver your package, such as your name, your address and email address, your postal address, and your phone number.

Your order information is passed along to our logistics provider, who carefully prepares and transports your package right to your doorstep. They are strictly prohibited from using your data for anything other than processing your order, and they must remove this data from their system once your order is completed. If you decide to have your order delivered outside Europe, your data, including your mailing address, will automatically be shared with the carrier’s logistics team responsible for delivering your package in that country.

When you browse our site, we automatically receive your computer’s Internet Protocol (IP) address, which helps us gather more details about the browser and operating system you’re using. In addition, some data may be stored in or retrieved from your browser, typically in the form of cookies. These cookies collect information about you, your preferences, or your device and browser. They are usually set in response to actions you’ve taken that amount to a service request (e.g., placing an order).

Emails

If you have decided to follow the news from Laboratoires üma by email (either through the form on our website or by ticking the appropriate box during your purchase journey), we use your email address to send you the latest updates from Laboratoires üma (new products, sporting events, gatherings organized by Laboratoires üma, and more), or to provide you with information related to your purchase or browsing history on our site. Please know that if you no longer wish to receive these emails, you can unsubscribe at any time by clicking the 'se désabonner' unsubscribe link located at the bottom of our emails or by contacting us at bonjour@umawell.com. The change takes effect immediately.

The emailing tool we use is American. It complies with the principles of the Europe-US and Switzerland-US Privacy Shield. Plus, as a processor, this emailing tool is required to meet the legal requirements of the General Data Protection Regulation (GDPR).

Audience Measurement

We use audience analysis tools (like Google Analytics) to help us better understand the activity on our site, see how you react, and improve our site’s performance so that it fits your needs as closely as possible. In this spirit, we provide these tools with data about your browsing history on our site and information on the products you’ve ordered. All data processed for statistical purposes outside Europe is completely anonymized. 

Product reviews

Your email address, your last name, first name, and your order reference are shared with our partner, who will send you a feedback form via email. Rest assured, your email address isn’t published on our website when your review goes live. This information isn’t shared with any other company and is used solely to gauge your experience with our products.

Advertisement

Like many of our friends, advertising cookies are placed when you visit our site, and later used to show you targeted ads when you browse other sites. The data collected is anonymous and is used only for advertising purposes.

How long will my personal data be kept?

The length of time we keep personal data depends on our business needs and legal obligations.

When you purchase our products, we keep your data only for as long as it’s needed for the purpose it was collected—like managing our business relationship with you—and for other related purposes such as keeping track of our inventory, all while ensuring we follow the applicable data security and retention laws.

If you agree to receive emails from Laboratoires üma to keep up with our latest news, your data will be kept until you ask to unsubscribe or have your personal data deleted, or after a period of inactivity (up to a maximum of 3 years from the last contact, for example, if you clicked one of our emails).

If you create a customer account, your data will be kept until you ask us to delete it or after a period of inactivity on your part (up to a maximum of 3 years from the end of the business relationship—for example, your last order—or your most recent contact, such as clicking one of our emails).

When you contact us for information about our products or our brand, or when you apply for a job opening, your data is kept for only 3 years from the date it was collected or from your last contact.

ARTICLE 2 – CONSENT

How do you obtain my consent?

When you provide us with your personal information to complete a transaction, verify your credit card, place an order, schedule a delivery, or return a purchase, we assume you consent to having your information collected and used solely for that purpose.

If we ever ask you to share your personal information for another reason, like marketing, we'll be sure to ask for your explicit consent first or give you the option to say no. 

How can I withdraw my consent?

If after giving us your consent you have a change of heart and no longer want us to contact you, collect your information, or share it, just let us know by emailing us at bonjour@umawell.com or by sending a letter to: Laboratoires üma, 31 Rue de Brest 69002 Lyon, France.

ARTICLE 3 – COOKIES

When you browse our website or place an order, data might be stored in your browser or retrieved from it, usually in the form of cookies. A cookie is like a tiny text file, saved by the browser on your computer, tablet, or smartphone, that helps store user information to make browsing easier and enable certain other features.

We use first-party cookies set by Laboratoires üma to ensure our website runs smoothly. Most of these cookies cannot be disabled in our systems. They allow us to remember the information you enter in our forms so that you don't have to re-enter it during your visit, and they also help manage and secure access to your account or shopping cart.

Here's a non-exhaustive list of sample files related to how our site works:

  • session_id: unique session identifier that lets Shopify store details about your session (like the referrer, landing page, etc.).
  • shopify_visit: no data retained, persists for 30 minutes after the last visit. It is used by our website provider's internal statistics tracking system to record the number of visits.
  • shopify_uniq: no data retained, expires at midnight (according to the visitor's location) the following day. It calculates the number of store visits per unique customer.
  • cart: unique identifier, persists for 2 weeks, stores information related to your shopping cart.
  • secure_session_id: unique session identifier
  • storefront_digest: unique identifier, undefined if the store has a password, it is used to determine if the current visitor has access.

More information here: https://fr.shopify.com/legal/cookies

We also use third-party cookies (or "third party cookies") placed by our partners. These cookies are directly managed by the companies that issue them, and they must also comply with data protection regulations.

  • Audience measurement cookies: used to assess site traffic (number of visits, page views, cart abandonment, etc.) and enhance our performance.
  • Advertising cookies: to provide you with advertising content related to your interest in the brand, its products, and the latest updates from Laboratoires üma.

Opt out of cookies:

You can configure your browser to be notified about, or to block, these cookies. If you choose to block them, some features of our site might be affected (like keeping items in your shopping cart). If you'd like to delete cookies from your web browser, you can follow these instructions:

Chrome

http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647

Firefox

https://support.mozilla.org/fr/kb/protection-renforcee-contre-pistage-firefox-ordinateur?redirectlocale=fr&redirectslug=Activer+et+d%C3%A9sactiver+les+cookies

Internet Explorer

http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies

Safari

https://support.apple.com/fr-fr/guide/safari/sfri11471/mac

Most of these cookies expire when you finish visiting our sites. Others have a longer lifespan, lasting up to 12 months, in accordance with current regulations. However, some trackers are exempt from this consent requirement (this applies to trackers that last more than 12 months).

You can also block third-party cookies:
  • If you’d rather not see our ads on social media anymore, we suggest heading over to the “settings” section and then to “ad preferences.”
  • There are also cookie opt-out platforms for advertising, such as http://optout.networkadvertising.org/ or http://www.youronlinechoices.com/ or via the blue AdChoices icon.

ARTICLE 4 – DISCLOSURE

We’ll disclose your personal information if the law requires us to do so, if you violate our terms and conditions of sale and use, or to protect our rights, property, or safety, as well as that of others.

We have taken the necessary precautions to comply with the General Data Protection Regulation (GDPR). Therefore, we won’t share your personal information with any third parties without your prior consent (except as noted above). As mentioned earlier, your information may be provided to trusted third parties who help us manage and maintain our site, as long as these partners agree to keep it confidential. And only data that does not directly identify you (e.g., cookies) may be shared with our partners for marketing or advertising purposes. Of course, you have the option to opt out.

Article 5 – Shopify

Our shop is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell you our services and products.

Your data is stored in Shopify’s data storage system and databases, as well as in Shopify’s overall application. Your data is kept safe on a secure server protected by a firewall.

Payment

If you make your purchase through a direct payment gateway, Shopify will store your credit card information. This information is encrypted using the security standard established by the payment card industry (PCI-DSS standard). Details related to your purchase transaction are kept only as long as necessary to complete your order. Once your order is complete, the transaction details are deleted.

All direct payment gateways comply with the PCI-DSS standard, managed by the PCI Security Standards Council, which is the result of a joint effort by companies such as Visa, MasterCard, American Express, and Discover.

The PCI-DSS standard requirements ensure that credit card data is handled securely by our store and its service providers.

For more information, please check out Shopify's Terms of Service here or the Privacy Policy here.

ARTICLE 6 – SERVICES PROVIDED BY THIRD PARTIES

In general, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to perform the services they provide for us.

However, some third-party service providers, like payment gateways and other payment transaction processors, have their own privacy policies regarding the information we’re required to provide them for your purchase transactions.

Regarding these providers, we recommend that you take a close look at their privacy policies so you can understand how your personal information will be handled.

Don't forget that some suppliers might be located or have facilities in a jurisdiction different from yours or ours. So if you decide to go ahead with a transaction that requires the services of a third-party provider, your information could then be governed by the laws of the jurisdiction where that provider is located or where their facilities are situated.

For example, if you're located in Canada and your transaction is processed by a payment gateway based in the United States, the information you provided to complete the transaction could be disclosed in accordance with U.S. law, including the Patriot Act.

Once you leave our store’s website or are redirected to a third-party website or app, you are no longer covered by this Privacy Policy or the Terms of Sale and Use of our website.

Links

You might be taken to another website when you click on some of the links on our site. We aren’t responsible for the privacy practices of those other sites, so we encourage you to take a close look at their privacy policies.

ARTICLE 7 – SAFETY

To protect your personal data, we take reasonable precautions and follow the industry’s best practices to ensure that it isn’t lost, misused, accessed, disclosed, altered, or improperly destroyed.

If you provide us with your credit card information, it will be encrypted using the SSL security protocol and stored with AES-256 encryption. While no method of transmitting data online or electronic storage is 100% safe, we adhere to all PCI-DSS standard requirements and implement additional security measures that are widely recognized in the industry.

Lastly, we recommend that you adopt the following security measures to improve your online safety:

  • When creating an account, be sure to choose a password that’s at least 8 characters long, mixing uppercase and lowercase letters along with numbers. Avoid using your name or any other easily accessible personal details.

 

  • Keep your passwords confidential and avoid using the same password for multiple accounts.

ARTICLE 8 – AGE OF CONSENT

By using this website, you confirm that you are at least the legal age in your state or province of residence, and that you have given us permission to allow any minor under your care to use this website.

ARTICLE 9 – Updates to Our Privacy Policy

We reserve the right to modify this privacy policy at any time, so please check it often. Any changes and clarifications take effect immediately once they are posted on our website. If we update anything in this policy, we’ll let you know right here so you can stay informed about what information we collect, how we use it, and under what circumstances we disclose it, if needed.

If our store is acquired by or merges with another company, your information might be transferred to the new owners so that we can continue providing you with our products.

Questions and Contact Details

In accordance with the General Data Protection Regulation (GDPR), if you wish to access, correct, modify, restrict, challenge the accuracy of, or delete any personal information we hold about you, file a complaint, object to processing, unsubscribe from our emails, exercise your right to transparency and data portability regarding your personal data, or if you just want more information on these topics, please contact our Privacy Standards Officer at bonjour@umawell.com or by mail at Laboratoires üma. To exercise these rights, simply provide us with your first name, last name, address, email, and a proof of identity.