Privacy Policy

1. Introduction

TAMMY & BENJAMIN is committed to protecting personal data and respecting the privacy of its customers and website visitors.

This Privacy Policy explains how personal data is collected, used, shared, retained, and protected when you use www.tammyandbenjamin.com, purchase products from the Maison, or communicate with our Customer Service team.

It also explains the rights available to individuals under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data Controller

Unless otherwise specified, the data controller responsible for the processing activities described in this policy is:

TAMMY & BENJAMIN SAS
A French simplified joint-stock company with share capital of €65,000
Paris Trade and Companies Register: 514 813 880
305 rue du Faubourg Saint-Antoine
75011 Paris, France

Correspondence address:
33 rue de Poitou
75003 Paris, France

Email: cs@tammyandbenjamin.com

Phone: +33 (0)1 40 56 05 39

For questions regarding the protection of your personal data, please contact us using the details above.

3. Personal Data We Collect

Depending on how you interact with our services, we may collect the following categories of personal data:

  • Identification information: first name, last name, and related identity information.
  • Contact information: email address, telephone number, billing address, and shipping address.
  • Order information: purchased products, quantities, amounts, purchase history, returns, exchanges, and refunds.
  • Payment information: transaction details, payment methods, and payment status. Complete payment card information is processed by the relevant payment service providers.
  • Customer account information: account identifiers and associated information where customer accounts are used.
  • Communication information: messages sent to Customer Service, assistance requests, complaints, reviews, and order-related correspondence.
  • Technical information: IP address, browser type, device, operating system, pages viewed, and browsing information.
  • Preference information: communication preferences, consent records, cookie choices, and interactions with our communications.
  • Warranty and repair information: information about relevant products, descriptions of issues, and photographs voluntarily provided.

We do not request sensitive personal data for ordinary purchases. We encourage you not to include such information in your messages unless specifically necessary.

4. Sources of Personal Data

We primarily collect information directly from you when you:

  • Visit our website or create a customer account.
  • Place an order or request a return.
  • Subscribe to our newsletter.
  • Contact Customer Service by email, telephone, WhatsApp, or another available channel.
  • Request a repair or warranty service.
  • Participate in a commercial initiative or voluntarily communicate with the Maison.

Certain technical information is collected automatically during website browsing, including through cookies and similar technologies.

We may also receive information necessary to manage your orders from payment providers, shipping carriers, and technical service providers.

5. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

Order Management and Contract Performance

We process information necessary to confirm orders, arrange payment, prepare shipments, deliver products, manage returns and exchanges, and issue refunds.

Legal basis: performance of a contract or steps taken at your request before entering into a contract.

Customer Service, Warranties, and Repairs

We use relevant information to respond to enquiries, manage complaints, and arrange after-sales assistance.

Legal basis: performance of a contract, compliance with legal obligations, and, depending on the circumstances, legitimate interests in appropriately handling customer requests.

Accounting, Tax, and Regulatory Obligations

We retain certain information to comply with legal obligations, including invoicing, accounting, and consumer protection requirements.

Legal basis: compliance with a legal obligation.

Fraud Prevention and Security

We may process information to identify suspicious transactions, secure payments, protect accounts, and prevent misuse of our services.

Legal basis: legitimate interests in protecting our business, customers, and systems, or compliance with a legal obligation where applicable.

Marketing Communications and Newsletters

We may send information about TAMMY & BENJAMIN collections, launches, events, and offers where you have provided consent or where applicable regulations permit marketing communications to existing customers concerning similar products.

Legal basis: consent or legitimate interests in cases permitted by applicable regulations.

You may unsubscribe at any time using the link included in our emails or by contacting Customer Service.

Website Analytics and Improvement

We may analyze website usage to improve navigation, performance, functionality, and the shopping experience.

Legal basis: legitimate interests where processing is permitted without consent, or consent where required, particularly for certain tracking technologies.

Advertising and Campaign Measurement

Where relevant tools are used and legal requirements are met, certain information may help measure advertising campaign performance, limit repeated advertisements, or display communications adapted to users' interests.

Legal basis: consent where required, particularly for advertising cookies and related processing activities.

6. Information Required to Provide Our Services

Certain information is necessary to process orders, arrange delivery, issue refunds, or comply with legal obligations.

If this information is not provided, we may be unable to deliver the requested service.

Information used exclusively for optional marketing purposes is not required to complete a purchase.

7. Shopify and Technical Infrastructure

Our online store operates using the Shopify platform, which provides technical services necessary for website functionality, order management, and e-commerce operations.

In this context, Shopify may process certain personal data to provide its services to TAMMY & BENJAMIN and, depending on the features enabled and its own responsibilities, for purposes described in its documentation and privacy policy.

For further information about Shopify's privacy practices, please visit privacy.shopify.com.

Shopify features relating to analytics, enhanced services, and customer privacy depend on the settings actually enabled for our store.

8. Service Providers and Data Recipients

Personal data may be accessed by authorized TAMMY & BENJAMIN employees within the scope of their responsibilities.

Where necessary, information may also be shared with the following categories of recipients:

  • Website hosting and e-commerce providers, including Shopify.
  • Payment processing and fraud prevention providers.
  • Shipping carriers and logistics providers, including DHL Express, FedEx, Colissimo, and Mondial Relay, depending on the delivery method used.
  • Customer Service and support management providers.
  • Email marketing and communication management providers, including Klaviyo where its services are used.
  • Analytics and advertising providers, depending on the tools enabled and applicable consent choices.
  • Accounting, legal, IT, and security service providers.
  • Administrative or judicial authorities where disclosure is legally required.

We limit shared information to what is necessary for the relevant purpose and implement appropriate contractual safeguards where required by applicable law.

9. Marketing Communications

When you subscribe to our newsletter, we use your email address to send information about the Maison, its collections, creations, and offers.

We may also send communications about products similar to those you have previously purchased, where permitted by applicable regulations.

Our communications may contain technologies used to measure email openings or interactions with links, subject to applicable rules.

You may object to these communications or withdraw your consent at any time, including by clicking the unsubscribe link in each marketing email.

Unsubscribing from marketing communications does not prevent us from sending messages necessary to manage your orders or requests.

10. Cookies and Similar Technologies

Our website may use cookies, pixels, and similar technologies to ensure its functionality and, where relevant tools are enabled, measure website traffic, personalize certain content, and evaluate advertising campaigns.

These technologies may fall into the following categories:

  • Strictly necessary cookies: shopping cart functionality, website security, authentication, and essential features.
  • Analytics cookies: understanding website traffic and improving performance.
  • Personalization cookies: remembering certain preferences and adapting the browsing experience.
  • Advertising cookies: campaign measurement and, where permitted, advertising personalization.

Non-essential cookies and tracking technologies requiring consent must only be used after consent has been obtained.

You may accept, reject, or modify your choices through the cookie management tool available on our website.

You may also configure your browser to restrict certain cookies. However, disabling necessary cookies may affect some website features.

The detailed list of cookies, their providers, and their lifetimes depends on the technologies actually used by the store.

11. Advertising and Social Media

TAMMY & BENJAMIN may promote its collections through advertising platforms and social media.

Where advertising measurement tools are installed on our website, certain browsing or purchase information may be processed by the relevant partners in accordance with applicable privacy choices.

Processing carried out directly by social media platforms when you use their services is also governed by their respective privacy policies.

Targeting, data sharing, and advertising measurement features depend on the tools configured and any required consent.

12. International Data Transfers

As part of operating our international online store and working with service providers, personal data may be processed in or accessed from countries outside the European Economic Area.

Where such transfers are subject to the GDPR, they must rely on an appropriate legal mechanism, such as a European Commission adequacy decision, Standard Contractual Clauses, or another safeguard permitted by applicable regulations.

Additional protective measures may be implemented where necessary.

You may contact us for information about the safeguards applicable to transfers involving your personal data.

13. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected and, where required, for applicable statutory retention or limitation periods.

  • Order and invoicing information: throughout contract performance and for statutory accounting and recordkeeping periods, including ten years where that obligation applies.
  • Contractual evidence: for applicable retention and limitation periods.
  • Warranty, return, and repair information: throughout the handling of the request and for the period necessary to manage legal claims and obligations.
  • Marketing information: until consent is withdrawn or an objection is made, subject to applicable retention periods and direct marketing rules.
  • Customer account information: while the account is used and subsequently for periods necessary to manage the relationship and comply with legal obligations.
  • Technical data and cookies: according to their purposes and the retention periods applicable to the technologies used.

At the end of the applicable retention periods, information is deleted, anonymized, or archived with restricted access where continued retention is legally necessary.

14. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, disclosure, alteration, or destruction.

These measures include restricting access to authorized individuals, working with specialized service providers, and using security measures appropriate to the relevant risks.

As no information system can guarantee absolute security, we adapt our safeguards to changing risks and technological developments.

15. Your Privacy Rights

Under the GDPR and subject to applicable legal conditions, you may exercise the following rights:

  • Right of access: obtain confirmation of whether your personal data is being processed and access the relevant information.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of certain data where legal conditions are met.
  • Right to restriction: request restriction of certain processing activities.
  • Right to object: object to certain processing activities, particularly direct marketing.
  • Right to data portability: receive certain data in a structured, commonly used format where applicable.
  • Right to withdraw consent: withdraw previously granted consent at any time without affecting the lawfulness of processing carried out before withdrawal.
  • Rights relating to automated decision-making: benefit from the protections provided by law where a decision based solely on automated processing produces legal or similarly significant effects.

You may exercise these rights by contacting cs@tammyandbenjamin.com.

We may request additional information strictly necessary to verify your identity where justified.

We respond within the timeframes required by applicable law, generally within one month, subject to legally permitted extensions.

16. Right to Object to Direct Marketing

You may object at any time to the processing of your personal data for direct marketing purposes.

Where your data is processed for this purpose, we will stop the relevant processing after your request has been implemented, subject to retaining the minimum information necessary to respect your objection.

Each marketing newsletter includes an unsubscribe link.

17. Children's Personal Data

Our online store is primarily intended for adult customers.

We do not intentionally seek to collect personal data from minors in circumstances contrary to applicable regulations.

If you believe a minor has inappropriately provided us with personal data, please contact Customer Service so that we can review the situation.

18. Third-Party Links

Our website may contain links to websites or services operated by third parties.

Their personal data processing practices are governed by their own privacy policies.

We encourage you to review those policies when leaving our website.

19. Complaints to a Supervisory Authority

If you believe that the processing of your personal data does not comply with applicable regulations, you may contact us to seek a resolution.

You also have the right to lodge a complaint with the competent supervisory authority, including:

French Data Protection Authority (CNIL)
www.cnil.fr

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, technical, or organizational developments, as well as changes to our services.

The latest update date appears at the beginning of this document.

Where required by applicable regulations, individuals will be informed of material changes or renewed consent will be obtained.

21. Contact

For questions regarding this Privacy Policy or the exercise of your rights:

TAMMY & BENJAMIN SAS
33 rue de Poitou
75003 Paris, France

Email: cs@tammyandbenjamin.com

Phone: +33 (0)1 40 56 05 39