Privacy policy

The site available at the following address: https://www.terre-de-bougies.com/ (hereinafter referred to as the "Site") is published by the company LAB, a simplified joint-stock company with capital of 50,000 euros, registered with the Colmar Trade and Companies Register under number 752 516 930, whose registered office is located at 1 rue de la Clef des Champs, 68600 VOLGELSHEIM (France), represented by Mr Bruno HOSSENLOPP, its president, (hereinafter referred to as "LAB SAS"), which, in its capacity as data controller, attaches great importance to the protection and respect of privacy.

The Site offers for sale to a clientele of private individuals and professionals a wide range of fragrances, perfumes, oils, waxes, wicks, containers, dyes, accessories and raw materials intended for the artisanal and industrial manufacture of candles, diffusers, soaps, wax melts and other scented ambient products.

This privacy policy aims to inform, when browsing the Site, any person using the Site (hereinafter referred to as the "Users" or the "User") of LAB SAS's practices regarding the conditions for the collection, use and sharing of the information that Users are required to provide, as well as their rights.

The Site complies with French and European standards relating to the protection of privacy and personal data, in particular French Act No. 78-17 of 6 January 1978, known as the "Informatique et Libertés" Act (French Data Protection Act), as amended in particular by Act No. 2018-493 of 20 June 2018, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the "GDPR", on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

IMPORTANT: NOTE TO USERS

This privacy policy describes the data processing carried out by LAB SAS. It does not constitute a separate contract: use of the Site implies that the User has read it.

Where certain features rely on consent (in particular certain tracking cookies/trackers or marketing communications), the User may withdraw this consent at any time, without justification. The withdrawal of consent does not affect the lawfulness of the processing carried out before such withdrawal.

For any question relating to this policy, you may contact LAB SAS at the following address: team@terre-de-bougies.com/

Controller of the personal data collected

The controller of the personal data is LAB SAS.

Nature of the data collected

The data collected on the Site as part of the use of the Site are those enabling LAB SAS to identify Users directly or indirectly.

The following categories of data concerning Users may be involved:

  • Identification data: surname, first name, email address, telephone, date of birth;
  • Order-related data;
  • Delivery location data: delivery addresses;
  • Payment-related data;
  • Geolocation data;
  • Communication-related data: requests and exchanges with LAB SAS (support, complaints, administrative requests), including messages sent via the contact channels provided;
  • Technical and connection data: IP addresses, connection logs, data relating to the device and browser, security and fraud-prevention data, and data necessary for the continuity, performance and security of the Site.

Whether the personal data collected is mandatory or optional, and any consequences of a failure to respond, are indicated at the time of collection.

Purpose and legal basis of processing activities

Purpose of the personal data collected

The personal data collected on the Site are used only for and during the performance of the services for the following purposes:

  • creation and management of Accounts, authentication and security;
  • order management;
  • after-sales service;
  • payment management via the Payment Service Provider;
  • management of cancellations and refunds;
  • fraud prevention and profile verification, in particular via automated checks;
  • security of the Site;
  • legal obligations linked to the intermediation activity;
  • prospecting and marketing communications (in particular newsletters, information about offers or services).

Furthermore, LAB SAS may use the data to fulfil, where applicable, its legal and/or regulatory obligations.

Legal basis of processing activities

The processing activities and the collection of personal data are authorised on the basis of the following legal grounds:

  • The performance of pre-contractual and contractual obligations, for:
  • the creation and management of Accounts;
  • order management;
  • payment management, including the execution of transactions via a payment service provider and the prevention of payment-related fraud.
  • The User's consent, for:
  • prospecting and marketing communications.
  • Legitimate interest, for:
  • the proper operation and continuous improvement of the Site;
  • fraud prevention and the security of the Site;
  • automated checks.
  • Legal obligations, for:
  • the retention of accounting data;
  • combating fraud;
  • tax obligations.

Statistical data

LAB SAS may produce aggregated statistics and non-identifying indicators for the purposes of management, improvement of the Products and Services, and analysis of use. These statistics do not allow a User to be identified.

Time of collection

The data collected by LAB SAS are freely provided by Users during the registration and order process on the Site.

Certain data may be collected automatically during use of the Site, in particular when the User browses the pages of the Site.

This automatically collected data does not reveal the identity of the User but concerns the use of the services. This collection is necessary for the maintenance and operation of the services of LAB SAS as well as for its internal analyses and reports.

This information includes:

  • information on how the services are used (frequency, traffic data, the way in which the User reached the Site);
  • information concerning the device used to access the services (device name, country, location, browser and device characteristics, operating system, language preferences, referring URL).

In any event, the personal data collected:

  • shall be obtained and processed fairly and lawfully;
  • shall be recorded for specified and legitimate purposes;
  • shall be used in accordance with those purposes;
  • are adequate, relevant and not excessive in relation to those purposes; and
  • shall be subject to precautions designed to ensure the security and confidentiality of the data, with a view to preventing them from being damaged, modified, destroyed or disclosed to unauthorised third parties.

Recipients of personal data

The primary recipient of the personal data collected on the Site is LAB SAS.

Personal data may be disclosed, to the extent strictly necessary, to the following categories of recipients:

  • payment service providers and related services (transaction management, fraud prevention);
  • identity verification service providers;
  • hosting, outsourcing, maintenance and security service providers;
  • technical service providers necessary for the operation of the Site and the provision of the Products and Services;
  • providers of audience-measurement and operational tools (depending on the configuration of the tracking cookies/trackers).

LAB SAS takes care to contractually frame its sub-processors and to limit access to data to what is strictly necessary. Sub-processors undertake to comply scrupulously with the provisions of the Informatique et Libertés Act, the GDPR, and any future new provisions.

In the event of a change of control of LAB SAS or of a merger, acquisition, insolvency proceedings or any other form of transfer of assets, the data collected by LAB SAS may be transferred to third parties. Nevertheless, LAB SAS undertakes to guarantee the confidentiality of the personal data collected and to inform Users before such data is transferred or made subject to new confidentiality rules.

Where required by law, the User's consent will be obtained, or an opportunity to refuse will be provided, before any transmission of data.

The data collected may also be transferred if LAB SAS considers it necessary to investigate, prevent or take measures to prevent a potential breach of its policies and more broadly in situations involving suspicions of fraud, potential threats to security and illegal activities, or may be used as evidence in a dispute involving LAB SAS.

Personal data may also be disclosed to the competent authorities where required by law, or in the context of the defence of LAB SAS's rights, in particular in the event of a breach of the applicable General Terms and Conditions.

Users' rights

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the "GDPR", on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and French Act No. 78-17 of 6 January 1978, known as the "Informatique et Libertés" Act (French Data Protection Act), as amended by Act No. 2004-801 of 6 August 2004 relating to information technology, files and freedoms, the User has:

  • a right of access to their personal data;
  • a right of rectification of their personal data;
  • a right of deletion and erasure of their personal data;
  • a right to object to the processing of their personal data;
  • a right to restrict the processing of their data;
  • a right to data portability, where the data are subject to automated processing based on consent or on a contract;
  • a right to withdraw consent at any time; and
  • a right to determine the fate of their data after their death.

A User wishing to exercise one of their rights may send their request by email or postal mail to the following addresses:

  • Postal mail: LAB SAS, 1 rue de la Clef des Champs, 68600 VOLGELSHEIM, France
  • Email: team@terre-de-bougies.com

When exercising one of these rights, the User must provide LAB SAS with the elements necessary for their identification: surname, first name, email address and, where applicable, postal address.

In addition, in accordance with the regulations in force, the User's request must be clear and specify in detail the right they wish to exercise as well as the address to which they wish to receive the response in the event of the exercise of one of the rights listed above. LAB SAS may ask them to provide a photocopy of an identity document bearing their signature in order to be able to verify their identity.

LAB SAS then undertakes to respond within a maximum period of one (1) month from receipt of the User's complete request.

Due to the complexity of the request and/or the number of requests, this period may be extended by two (2) months, provided that LAB SAS informs the User within one (1) month of receipt of their request of the reasons for the extension.

LAB SAS informs Users of their right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (the French Data Protection Authority, hereinafter referred to as the "CNIL") in one of the ways indicated below:

  • Via the CNIL website: www.cnil.fr/fr/plaintes or www.cnil.fr
  • By postal mail:

Commission Nationale de l'Informatique et des Libertés - CNIL

3 Place de Fontenoy, TSA 80715 - 75334 PARIS CEDEX 07

Data retention period

LAB SAS retains personal data for periods proportionate to the purposes pursued, in accordance with the principle of storage limitation provided for by the GDPR.

Identification data and Account-related data

The Customer's identification data (surname, first name, email address, telephone number, date of birth), as well as data relating to the Customer Account (username, encrypted password, order history, delivery addresses and information associated with the Account) are retained for the entire duration that the Account is active.

In the event of deletion or closure of the Account, this data is retained for a maximum period of five (5) years from its closure, for evidential purposes, complaints handling, monitoring of the commercial relationship and defence of LAB SAS's rights, unless a legal obligation requires a longer retention period.

Payment data and accounting obligations

Data relating to payments and invoicing (amounts paid, transaction identifiers, invoices, payment vouchers and information necessary for accounting and tax management) are retained for a period of ten (10) years, in accordance with the applicable legal obligations in accounting and tax matters.

Data relating to exchanges with customer service

Data relating to requests addressed to LAB SAS, in particular exchanges with customer service, complaints, administrative requests and messages sent via the forms or contact channels of the Site, are retained for the time necessary to process the request concerned, then archived for a maximum period of five (5) years for evidential and dispute-management purposes.

Data processed for fraud-prevention and security purposes

Data used in connection with fraud prevention, security checks, the fight against fraudulent payments and the securing of the Site may be retained for a maximum period of five (5) years from the detection of an incident, attempted fraud or suspicious behaviour, depending on the seriousness of the facts and evidential needs.

Geolocation data

Any geolocation data is retained only for the period strictly necessary for the provision of the features concerned and is not retained beyond the usage session, except in the case of technical or security necessity or a specific legal obligation.

Technical data and connection logs

Technical and connection data (IP addresses, connection logs, information relating to the device and browser, security logs and data necessary for the continuity, performance and security of the Site) are retained for a maximum period of twelve (12) months, except in the case of specific need related to system security, fraud prevention or ongoing judicial or administrative proceedings.

Deletion or anonymisation

At the end of the aforementioned retention periods, personal data are securely deleted or anonymised, except in the case of a legal or regulatory obligation or evidential need requiring longer retention.

Transfer of personal data abroad

To the extent possible, LAB SAS processes Users' data only within the European Union and does not transfer such data outside this area.

However, in the event of an international transfer of Users' data outside the European Union, a distinction should be made between:

  • countries that have been the subject of an adequacy decision by the European Commission: in this case, the data is transferred to a country that ensures a level of protection deemed sufficient and adequate to the provisions of the European data protection regulation; and
  • countries whose level of data protection has not been recognised as adequate: in this case, to guarantee a transfer in compliance with the European regulation, and in particular to ensure the security of the data, LAB SAS will base its transfer on protection mechanisms adapted to each service provider and sub-processor, such as the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules or by virtue of an approved certification mechanism.

The User may request further information on the safeguards implemented by contacting LAB SAS at the following address: team@terre-de-bougies.com.

Security

LAB SAS undertakes to implement the appropriate technical and organisational measures reasonably necessary with regard to the applicable regulations on the protection of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, in order to ensure a level of security appropriate to the risks involved for the rights and freedoms of natural persons in the context of the processing covered by this privacy policy.

When personal data is transferred to third parties for processing, LAB SAS ensures that these third parties implement all appropriate technical and organisational measures to ensure the protection of personal data in accordance with applicable laws.

These measures are defined taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks identified.

Depending on the needs, risks, costs and purpose of the processing, these measures may include the pseudonymisation and encryption of data.

Finally, in the event of a breach of personal data rights likely to result in a high risk to the User's rights and freedoms, LAB SAS undertakes to inform the User of such breach as soon as possible.

Tracking cookies/trackers

Tracking cookies/trackers are small files that are placed on the User's device by the sites and/or applications that the User visits. They are used to make the sites and/or applications work and improve their use.

When consulting the Site, Users are informed that tracking cookies/trackers or other means of recording browsing data are used by the Site or by third parties, service providers for the Site, and placed on the User's device (computer, mobile phone or tablet).

LAB SAS or its partners may install, subject to the User's acceptance, various tracking cookies/trackers, in particular:

  • session trackers, which disappear as soon as the User leaves the Site;
  • persistent trackers, which remain on the User's device until the end of their lifetime or until the User deletes them; and
  • statistical trackers (used to measure the audience of the Site).

Only the issuer of a tracker can read or modify the information contained therein.

In accordance with CNIL recommendations, when first connecting to the Site, the User will be expressly asked to accept the Site's tracking cookies/trackers.

Purpose of the tracking cookies/trackers

The tracking cookies/trackers used by LAB SAS or its partners enable Users to be identified, their browser to be recognised when they connect to the Site, their access frequency (traffic measurement) and display preferences of the Users' device to be recorded, the presentation of the Site to be adapted and/or personalised to improve the Users' experience, and the Site to be optimised for the sole purpose of providing the services requested by the User.

Furthermore, the tracking cookies/trackers used on the Site are based on the guide of the International Chamber of Commerce by categories:

  • strictly necessary trackers;
  • performance trackers;
  • functionality trackers;
  • advertising-targeting trackers.

Strictly necessary trackers

Strictly necessary trackers enable the User to browse the Site.

These trackers do not collect any information about the User that could be used for marketing purposes.

LAB SAS uses these trackers to:

  • ensure the operation of the Site;
  • secure the forms and protect them against malicious scripts.

LAB SAS does not use these trackers to:

  • collect information that could be used to promote products or services to Users; or
  • remember the User's preferences or username after their visit.

Performance trackers

These trackers improve the performance of the Site, such as error management, response-rate monitoring or improvement of the Site's design.

Functionality trackers

These trackers are used to provide services or to remember the User's settings in order to improve their visit to the Site.

Advertising-targeting trackers

These trackers are used to promote products or services to the User on other sites. They may also be used to limit the number of times the User sees a particular advertisement on the Site and to measure the effectiveness of a particular campaign.

Retention period of tracking cookies/trackers

In accordance with CNIL recommendations, the maximum retention period of tracking cookies/trackers is thirteen (13) months at most after their first placement on the User's device, as is the duration of the validity of the User's consent to the use of these trackers. The lifetime of trackers is not extended with each visit. The User's consent must therefore be renewed at the end of this period.

User's right to refuse tracking cookies/trackers

When first browsing the Site, an explanatory banner on the use of tracking cookies/trackers appears, detailing the trackers used, their purpose and their retention period. It enables the User to activate or deactivate certain trackers. It will only disappear once the User has accepted, or not, the use of trackers to continue browsing.

The recording of a tracker remains subject to the will of the Users. In accordance with legislative and regulatory provisions, LAB SAS obtains prior consent for the placement of non-essential trackers.

Users also have the possibility of configuring their device so as to oppose, in whole or in part (in particular according to the issuer), the recording of trackers. The configuration also offers the possibility of accepting or refusing trackers on an ad hoc basis, before their recording on the Users' device.

However, in the event of opposition to the recording of trackers or uninstallation of a tracker, Users are informed that certain services may no longer function properly.

Amendment of the privacy policy

LAB SAS reserves the right to amend and update, at any time, this privacy policy, in particular to take into account any legal and/or jurisprudential developments and to meet the requirements of the regulations applicable to the protection of personal data.

The version that prevails is the one accessible online on the day the Site is consulted.

Any consultation of the Site after publication of the amended privacy policy shall constitute unreserved acceptance by the latter of the new privacy policy.

Contacts

For any request for information or to find out more about the processing of their personal data, including the exercise of their rights indicated above, the User may contact LAB SAS by email or postal mail at the following address:

  • Postal mail: LAB SAS, 1 rue de la Clef des Champs, 68600 VOLGELSHEIM, France
  • Email: team@terre-de-bougies.com

For any complaint or dissatisfaction in connection with the use of their personal data by LAB SAS, the User may contact LAB SAS by email or postal mail at the following address:

  • Postal mail: LAB SAS, 1 rue de la Clef des Champs, 68600 VOLGELSHEIM, France
  • Email: team@terre-de-bougies.com

When the User contacts LAB SAS, they will be asked to identify themselves.

Last updated: 23 July 2026