Privacy Policy
Last updated: 26 July 2026
This policy applies to the website www.artdeluxe-naturel.com, operated by BHM EXPORT, a SARL with capital of 60,000 euros, RCS Paris 819 429 200, 82 rue Manin, 75019 Paris.
Data controller: BHM EXPORT — contact@artdeluxe-naturel.com — +33 7 44 73 82 26
No data protection officer (DPO) has been appointed, as the nature and volume of our processing do not require one within the meaning of article 37 of the GDPR.
1. Data collected, purposes and legal bases
| Data | Purpose | Legal basis (art. 6 GDPR) | Storage |
|---|---|---|---|
| Surname, first name, postal address, email, telephone | Order processing, delivery, invoicing | Performance of the contract | 10 years (accounting obligation) |
| Payment information (tokenized) | Secure payment | Performance of the contract | 13 months (chargeback period) |
| Order history | Customer management, after-sales service, statutory warranties | Performance of the contract / legal obligation | 5 years |
| Email address (newsletter) | Sending offers and news | Consent (opt-in) | Until unsubscribed or after 3 years of inactivity |
| Browsing data (analytics cookies) | Audience measurement | Consent | 13 months maximum |
| Browsing data (advertising cookies) | Google Ads advertising | Consent | 13 months maximum |
| User account | Management of your personal account area | Performance of the contract | Life of the account + 3 years |
2. Recipients and processors
Your data is shared only with the providers strictly necessary to deliver the service:
- Stripe, Inc. — bank card payment — United States
- PayPal (Europe) S.à r.l. et Cie, S.C.A. — PayPal payment — Luxembourg
- Google LLC — audience measurement (Google Analytics), tag management and advertising (Google Ads) — United States
- Hostinger International Ltd — website hosting — Lithuania (European Union)
- Automattic Inc. (Jetpack) — security and backups — United States
- DHL Express — parcel delivery
Transfers outside the European Union are governed by the Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU-US Data Privacy Framework. Your data is neither sold, rented nor transferred to third parties for commercial purposes.
3. Your rights
In accordance with Regulation (EU) 2016/679 and the French Data Protection Act, you have the following rights:
- Right of access : obtain a copy of your data
- Right to rectification : correct inaccurate or incomplete data
- Right to erasure : request the deletion of your data
- Right to data portability : receive your data in a structured, readable format
- Right to object : object to processing, in particular for direct marketing
- Right to restriction of processing : request the restriction of processing
- Right to withdraw consent : at any time, without affecting the lawfulness of prior processing
- Right to set instructions concerning the fate of your data after your death
To exercise these rights: contact@artdeluxe-naturel.com or BHM EXPORT, 82 rue Manin, 75019 Paris. Proof of identity may be requested in the event of reasonable doubt as to your identity. Response time: one (1) month, extendable by two months for complex requests.
4. Complaint to the CNIL
If you believe your rights are not being respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés:
CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr — 01 53 73 22 22
5. Cookies
On your first visit, a banner allows you to accept or refuse non-essential cookies, category by category. No cookie subject to consent is placed before your agreement, and simply continuing to browse does not constitute consent. You may change your choices at any time via the ‘Manage consent’ link at the foot of every page.
Details of the cookies used, their purposes and their retention periods can be found in our Cookie Policy.
6. Security
BHM EXPORT implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or disclosure: end-to-end SSL/TLS encryption, HTTP security headers (HSTS, CSP), administrator access control and regular backups. Bank details never pass through our servers and are handled directly by our PCI-DSS certified payment providers.
7. Minors
Our products are intended for an adult clientele. We do not knowingly collect data concerning persons under the age of 15.
8. Amendments
This policy may be amended at any time. Any substantial change will be brought to your attention by email or by a banner on the website. The date of the last update appears at the top of this document.