PREAMBLE
This privacy policy informs you about how Enchanted Peach uses and protects the information you provide when you use the website accessible via the following URL: enchanted-peach.com (hereinafter referred to as the "Site").

Please note that this privacy policy may be modified or supplemented at any time by Enchanted Peach, particularly to comply with any legal or technological changes. In such cases, the date of the update will be clearly identified at the top of this policy. These modifications are binding on the user as soon as they are notified of the updated privacy policy and have accepted it.

ARTICLE 1. PARTIES
This privacy policy is applicable between the publisher of the Site, hereinafter referred to as the "Publisher," and any person connecting to the Site, hereinafter referred to as the "User."

ARTICLE 2. DEFINITIONS

• "Site Content": Elements of any kind published on the Site, whether protected by intellectual property rights or not, such as texts, images, designs, presentations, videos, diagrams, structures, databases, or software.
• "Publisher": Enchanted Peach, acting in its capacity as the publisher of the Site.
• "User": Any person connecting to the Site.
• "Site": The website accessible at the URL enchanted-peach.com, including any sub-sites, mirror sites, portals, and variations of the URL.

ARTICLE 3. SCOPE OF APPLICATION
This privacy policy applies to all Users of the Site. By clicking "I Accept" during your registration on the Site, you fully accept this policy. Similarly, by clicking "I Accept" in the cookie information banner displayed on the Site, you confirm your acceptance of this policy, while also allowing you to customize which cookies are applied. By accepting this policy, you acknowledge that you have read it in full and accept it without restriction.

The User acknowledges the evidential value of the Publisher's automated recording systems and, unless proven otherwise, agrees not to contest them in the event of a dispute.

The acceptance of this privacy policy implies that Users have the legal capacity to do so, or that they are at least 16 years old, or failing that, have the authorization of a guardian or curator if they are incapacitated, of their legal representative if they are under 16, or that they hold a mandate if they are acting on behalf of a legal entity.

ARTICLE 4. PERSONAL DATA
In accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on April 14, 2016, and applicable national legislation, the Publisher provides you with the following information:

4.1. IDENTITY OF THE DATA CONTROLLER
The data controller responsible for collecting and processing data on the Site is Enchanted Peach.

4.2. DATA COLLECTION BY THE PUBLISHER
4.2.1. DATA COLLECTED
4.2.1.1 DATA COLLECTED DURING SITE NAVIGATION
While browsing the Site, you consent to the Publisher collecting information related to the content you view and click on, demographic data, the device used and its software environment, your location, and your connection data (time, IP address, etc.).

4.2.1.2. DATA COLLECTED THROUGH THE CONTACT FORM OR CONTACT EMAIL
Using the contact form or contact email address implies the collection of the following personal data by the Publisher: name, first name, email address*, phone number.

Personal data marked with an asterisk is mandatory for using the contact form. Users who do not wish to provide the required information cannot send a message directly from the Site.

4.2.1.3. DATA COLLECTED DURING SITE REGISTRATION
Using the registration form implies the collection of the following personal data by the Publisher: name*, first name*, postal address*, email address*, date of birth, phone number.

Personal data marked with an asterisk is mandatory for registering on the Site. Users who do not wish to provide the required information cannot register directly on the Site.

4.2.1.4. DATA COLLECTED THROUGH THE NEWSLETTER FORM
In the context of using the newsletter form, the Publisher may collect and process your email address.

4.2.2. PURPOSES OF COLLECTING PERSONAL DATA
Data collected during browsing is subject to automated processing for the following purposes:

• Verify user identity;
• Ensure and improve service security;
• Develop, operate, improve, provide, and manage the Site;
• Contextualize and enhance the User experience;
• Send information and contact users, including by email;
• Target advertising content;
• Prevent any unlawful or illegal activity;
• Enforce the terms of Site use.

Data collected through the contact form or contact email address is subject to automated processing for the following purposes:

• Verify user identity;
• Ensure and improve service security;
• Contextualize and enhance the User experience;
• Send information and contact users, including by email;
• Target advertising content;
• Prevent any unlawful or illegal activity.

Data collected during registration is subject to automated processing for the following purposes:

• Fulfill contractual obligations;
• Verify user identity;
• Ensure and improve service security;
• Develop, operate, improve, provide, and manage the Site;
• Contextualize and enhance the User experience;
• Send information and contact users, including by email;
• Prevent any unlawful or illegal activity;
• Enforce the terms of Site use.

Data collected through the newsletter form is subject to automated processing for the purpose of:

• Sending newsletters to the User.

4.2.3. LEGAL BASES FOR PROCESSING
Data collected during browsing is legally processed based on the Publisher's legitimate interest, which is to analyze behavior on the Site and ensure improved security and functionality. Some of this data, such as those from certain cookies, may be legally processed based on the User's consent.

Data collected through the contact form or contact email address is legally processed based on the consent of the data subjects.

Data collected during registration is legally processed based on a contractual relationship.

Data collected through the newsletter form is legally processed based on the consent of the data subjects.

4.2.4. DATA RECIPIENTS
The data collected is only accessible to the Publisher's management team, staff in charge of preparing your order, and staff managing the Site, and is never freely viewable by any third party.

4.2.5. DURATION OF PERSONAL DATA RETENTION
Personal data collected during browsing is kept for a reasonable period necessary for proper Site administration and for a maximum of 12 months or until the consent of the data subjects is withdrawn.

Personal data collected through the contact form or contact email is kept for a reasonable period necessary for proper handling of the User's request, and for a maximum of 12 months.

Data collected during registration is kept for the duration of the contractual relationship between the Publisher and the User.

Data collected through the newsletter form is kept until the consent of the data subjects is withdrawn.

At the end of each of these periods, the Publisher will archive this data and retain it for the period during which its liability may be engaged.

After this retention period, the Publisher commits to permanently deleting the data of the individuals concerned.

4.2.6. SECURITY AND CONFIDENTIALITY OF PERSONAL DATA
Personal data is kept securely, according to current technical means, in compliance with the General Data Protection Regulation and applicable national legislation.

4.2.7. MINIMIZATION OF PERSONAL DATA
The Publisher may also collect and process any data voluntarily provided by a User, particularly through the free text field in the contact form.

The Publisher directs Users as much as possible when they provide unnecessary or superfluous personal data.

The Publisher commits to only keeping and processing data strictly necessary for its activities and will delete any unnecessary data as quickly as possible.

ARTICLE 4.3. RIGHTS RESPECT
You have the following rights concerning your personal data, which you can exercise by writing to our postal address or by sending an email to the following address: contact@enchanted-peach.com or by phone at 0756924901.

4.3.1. RIGHT TO INFORMATION, ACCESS, AND DATA COMMUNICATION
You have the right to access the personal data that concerns you.

Due to the obligation of security and confidentiality in the processing of personal data incumbent upon the Publisher, your request will only be processed if you provide proof of your identity, notably by producing a scan of your valid ID (in the case of a request by email) or a signed photocopy of your valid ID (in the case of a written request), both accompanied by the statement "I certify on my honor that the copy of this ID is consistent with the original. Done at ... on ...", followed by your signature.

To help you with your request, you will find a model letter developed by the CNIL here.

4.3.2. RIGHT TO RECTIFICATION, ERASURE, AND RIGHT TO BE FORGOTTEN
You have the right to request the rectification, updating, locking, or deletion of your personal data that may be inaccurate, erroneous, incomplete, or obsolete.

You can also set general and specific guidelines regarding the fate of your personal data after your death. Where applicable, the heirs of a deceased person may demand consideration of the death of their relative and/or the necessary updates.

To help you with your request, you will find a model letter developed by the CNIL here.

4.3.3. RIGHT TO OBJECT TO DATA PROCESSING
You have the right to object to the processing of your personal data.

To do so, you should send an email to the following address: contact@enchanted-peach.com. In this email, you must specify the data you wish to be deleted and the reasons justifying this request unless it is for direct marketing purposes.

4.3.4. RIGHT TO DATA PORTABILITY
You have the right to receive the personal data that you have provided us in a transferable, open, and readable format.

4.3.5. RIGHT TO RESTRICT PROCESSING
You have the right to request that the processing of your personal data by the Publisher be limited. Thus, your data can only be stored and no longer used by the Publisher.

4.3.6. WITHDRAWAL OF CONSENT
Your consent is essential for the processing of your data by the Publisher. However, you can withdraw it at any time. This withdrawal will lead to the deletion of your personal data.

Services requiring the processing of your data by the Publisher will, however, no longer be accessible.

4.3.7. RESPONSE TIMES
The Publisher undertakes to respond to your request for access, rectification, or objection or any other additional information request within a reasonable time, which shall not exceed 1 month from the receipt of your request.

4.3.8. COMPLAINT TO THE COMPETENT AUTHORITY
If you believe that the Publisher is not complying with its obligations regarding your personal information, you can lodge a complaint or request with the competent authority. In France, the competent authority is the CNIL, to which you can submit a request.

ARTICLE 4.4. TRANSFER OF COLLECTED DATA
4.4.1. TRANSFER TO PARTNERS
The Publisher informs you that we use authorized service providers to facilitate the collection and processing of the data you have provided us. These service providers may be located outside the European Union and have access to the data collected on the Site.

The Publisher has ensured that its service providers have implemented adequate guarantees and strict conditions regarding confidentiality, use, and data protection, for example, through the US Privacy Shield.

4.4.2. TRANSFER ON REQUEST OR JUDICIAL DECISION
The User also consents to the Publisher communicating the data collected to any person, upon request of a state authority or by judicial decision.

4.4.3. TRANSFER IN THE CONTEXT OF A MERGER OR ACQUISITION
If the Publisher is involved in a merger, asset sale, financing operation, liquidation, or bankruptcy or in an acquisition of all or part of its activity by another company, the User consents to the data collected being transmitted by the Publisher to this company, and that this company operates the personal data processing referred to in this privacy policy instead of the Publisher.

ARTICLE 5. POLICY ON TRACKERS/COOKIES
When you first connect to the Publisher’s Site, you are informed by a banner at the bottom of your screen that information relating to your browsing may be recorded in files called "cookies." Our cookie usage policy allows you to better understand the measures we implement in terms of navigation on our Site. It specifically informs you about all the cookies present on our Site, their purpose, and how to configure them.

5.1. USE OF TRACKERS/COOKIES
The Publisher of this Site may install a cookie or other tracker on the hard drive of your device (computer, tablet, mobile, etc.) to ensure smooth and optimal navigation on our website.

"Cookies" (or connection witnesses) are small text files of limited size that allow us to recognize your computer, tablet, or mobile to personalize the services we offer you.

To better inform you about the information cookies identify, you will find below a table listing the different types of cookies that may be used on the Publisher's Site, their name, purpose, and duration of storage.

5.2. PURPOSES OF TRACKERS
With the help of the information contained in the trackers and cookies used, the Publisher can analyze traffic and usage of the Site and, if applicable, facilitate and improve navigation, carry out prospecting operations, develop commercial statistics, or display targeted advertisements.

5.3. TRACKERS USED
Partner | Purpose of processing | Partner's conditions
Shopify | Access to secure areas, browsing history management | Shopify Cookies Policy

5.4. CONFIGURING YOUR COOKIE PREFERENCES

When you first connect to the Enchanted Peach Website, a banner briefly presenting information related to the placement of cookies and similar technologies appears at the bottom of your screen. This banner allows you to make a choice regarding the cookies you accept or refuse to be placed on your device. You will be deemed to have given your consent to the placement of cookies by clicking on the "I accept" icon, either globally or individually. Conversely, you will be deemed to have refused the placement of cookies by clicking on the "I refuse" icon, again, this choice may apply to all cookies or only some of them. If no choice is made, you will be deemed to have refused the placement of cookies. Your decision will be recorded for 6 months and can be modified at any time.

5.4.1 COOKIES EXEMPT FROM CONSENT

In accordance with the recommendations of the French Data Protection Authority (CNIL), certain cookies are exempt from the requirement to obtain your prior consent, as they are strictly necessary for the operation of the website or have the exclusive purpose of enabling or facilitating electronic communication. These include session identifier cookies, authentication cookies, load balancing session cookies, and interface customization cookies. These cookies are fully subject to this policy as they are issued and managed by Enchanted Peach.

5.4.2 COOKIES REQUIRING PRIOR CONSENT

This requirement applies to cookies issued by third parties and classified as "persistent" because they remain on your device until they are deleted or expire.

As these cookies are issued by third parties, their use and placement are subject to their own privacy policies. This category of cookies includes audience measurement cookies, advertising cookies, and social network sharing cookies (such as Facebook, Twitter, YouTube, and Instagram).

Audience measurement cookies compile statistics regarding visits and the use of various elements of the Website (such as the content/pages you have visited). These data contribute to improving the ergonomics of the Enchanted Peach Website.

5.5. MAXIMUM RETENTION PERIOD FOR TRACKERS

Trackers are intended to be retained on the User's computer for a period of up to 12 months. These data are stored under secure conditions, according to current technological means, in compliance with the provisions of the General Data Protection Regulation (GDPR) and applicable national legislation.

5.6. OPPOSITION TO THE USE OF TRACKERS

5.6.1. RIGHT TO OBJECT TO THE USE OF TRACKERS

You can accept or refuse the placement of cookies at any time.

The User may delete or disable the use of trackers whenever desired by adjusting their browser settings. The Website can be accessed without trackers; however, some additional functions of the Website may not work if the User has disabled the use of trackers, such as form auto-completion or navigation indicators.

5.6.2. SETTINGS

For more information on cookie control tools, you can visit the dedicated page on the CNIL's website.

5.6.2.1. BROWSER SETTINGS

Each internet browser offers its own settings for managing cookies. The User can configure their browser software so that cookies are rejected, either systematically or depending on their issuer. The User can also configure their browser software so that their acceptance or refusal of cookies is offered on a case-by-case basis, before a cookie is likely to be recorded on their device.

For managing cookies and User preferences, the configuration of each browser is different. It is described in the help menu of the browser, which will explain how to modify your preferences regarding cookies:

• For Internet Explorer
• For Safari
• For Chrome
• For Firefox
• For Opera

5.6.2.2. CONFIGURATION USING ADD-ONS

The User may also delete or oppose the implantation of cookies on their device by installing a browser extension.

ARTICLE 6. INTELLECTUAL PROPERTY