Privacy Policy

Fatou Yaffa LTD (as defined in Article 1 below), operating under SheRises trademark, offers high-end ready-to-wear items for sale on its website www.she-risesuk.com.

In order to do so, sell and deliver its products, Fatou Yaffa LTD collects personal data from users of its website.

The purpose of this privacy policy is to inform users of the means used to collect, access, process and store users' personal data.
Fatou Yaffa LTD, as controller, undertakes to comply with the provisions of Regulation (EU) No 2016/679 of 27 April 2016 on the protection of personal data.

The customer is informed that certain data must be collected by Fatou Yaffa LTD in order to perform its services. If the customer does not wish to disclose this data, Fatou Yaffa LTD will not be able to perform its services.

This Privacy Policy ("Policy") may be modified at any time by Fatou Yaffa LTD, in particular in order to comply with any regulatory, jurisprudential, editorial or technical changes. The user must refer to the latest version of the Policy before browsing.

1. Controller

The controller, who collects the personal data and implements the data processing operations, is:
Fatou Yaffa LTD, a limited company, registered at companies house under number 11052116, having its registered office at 3 Cedar Place 14 Bruce Grove N17 6YT London, United Kingdom.

2. Collection of personal data

Fatou Yaffa LTD collects users' personal data on the website www.she-risesuk.com.
The personal data that may be collected are as follows :

  - user account data: the data provided by the User when creating an account by filling in the registration form (name, surname, billing and delivery postal addresses, email address, mobile phone number, password for connecting to the customer account);
  - personal data of the user when he/she enters it in his/her customer account: date of birth, clothing size;
  - transaction data: means the data that the user provides when making purchases, information relating to orders placed and returned items such as telephone number, address, e-mail address and information relating to payment method;
  - exchanges with customer service;
  - browsing data: refers to the data collected by the Publisher while the User is browsing the Website, such as the date, time of connection and/or browsing, browser type, browser language, IP address, location data and geolocation.

The data relating to the payment method (credit card number, expiry date, authorization number, security code) are collected directly by our service provider Stripe.

Third-party providers of applications, tools, gadgets and plug-ins on our website, as well as the networks on which we publish editorial and promotional content (such as Facebook and Instagram) may also use automated, context-based and interest related means to collect user data (interactions with functions and profiling of the online activity). This data is collected directly by such providers and/or third parties and is subject to their policies. To the extent permitted by applicable law, Fatou Yaffa LTD is not responsible for the practices of such service providers and third parties.

Some of the services may be altered or inaccessible if consent to the collection of the data mentioned in this Privacy Policy is not granted.

3. Purposes of the collection of personal data

Data collected in connection with the use of the website, are processed for the purposes described below:

- fulfilling the orders;

- send promotional events, codes, offers.

The regulations in force protect the privacy of users and require any controller to be able to provide legitimate grounds for such processing. The regulations thus provide, among the legal bases for treatment, the following:

  - performance of an agreement to which the relevant person is a party, such as a sales contract. For example, certain personal data of the customer is necessary to deliver the item, manage the customer's account and process any returned items;
  - compliance with a legal obligation, in particular an accounting obligation by retaining invoices;
  - prior consent of the relevant person;
  - legitimate interest of the controller, while complying with users' rights and freedoms. For example, improving the customer experience or preventing fraud may justify data collection.

Fatou Yaffa LTD does not share any personal data for commercial purposes with third parties.

Users may edit their personal data and withdraw their consent at any time by connecting to their customer account.

4. Third parties with access to users personal data

The personal data collected is transmitted to Fatou Yaffa LTD’s service providers, who may process it on behalf of Fatou Yaffa LTD (processors) and/or on their own behalf (recipients of the data).
The recipients of the data are :
   - Stripe, payment provider
   - any police or administrative authority in connection with judicial requisitions concerning the fight against fraud
   - customs authorities and service providers in the event of delivery abroad.

Fatou Yaffa LTD's processors may have access to data collected for the purpose of:
   - preparing, shipping orders and returning products
   - improving the content of websites and mobile applications
   - technical maintenance and development of Fatou Yaffa LTD's website, including entities that perform orders and provide web hosting, information storage, email service providers, as well as analysis services, and tag management, such as Google Analytics. For further details on these analysis services and the opposition procedures, we invite you to refer to the following sites:
- https://support.google.com/analytics/answer/6004245
- Google Analytics: https://support.google.com/analytics/answer/6004245?hl=fr

5. Users' rights over their personal data

In accordance with Articles 14 to 22 of Regulation 2016/679 of April 27, 2016, any natural person using the SheRises website has the right to exercise the following rights:

   - a right of access, rectification and erasure of the data collected,
   - a right to object to the processing of their data
   - a right to the restriction of the processing,
   - a right to the portability of the data collected the option to formulate instructions relating to the retention, erasure and transmission of his/her personal data after his/her death in accordance with Article 40-1 of Law 78-17 of January 6, 1978

Lastly, if Fatou Yaffa LTD’s detects a violation of personal data likely to create a significant risk to the rights and freedoms of its users, it undertakes to inform the relevant users in the shortest possible time.

Users may exercise all these rights by connecting to their customer account, by contacting customer service at admin@she-risesuk.com or by ordinary mail to Fatou Yaffa LTD - Customer Service 3 Cedar Place 14 Bruce Grove N17 6YT London, United Kingdom.

Users must enclose proof of identity with their application.
In case of non-response or unsatisfactory response, users may contact the supervisory authority of their country of residence, for United Kingdom, the ICO: https://www.gov.uk/data-protection-register-notify-ico-personal-data
 
6. Data retention period

User data will not be retained beyond the period strictly necessary for the purposes set out herein and in accordance with applicable regulations and laws. In this respect, the data used for canvassing purposes may be retained for a maximum period of 3 years from the termination of the user's account or the last contact with the relevant prospect. User data is deleted upon expiry of storage periods. Nevertheless, the data may be archived beyond the specified periods for the purposes of investigating, establishing and prosecuting criminal offences for the sole purpose of making the data available to the judicial authority, where necessary.

Archiving implies that this data will be anonymised and will no longer be available online but will be extracted and stored on an autonomous and secure medium.

7. Security measures for the personal data collected

In its capacity as data controller, Fatou Yaffa LTD undertakes to take all necessary measures to preserve the security and confidentiality of the data and, in particular, to prevent it from being altered, distorted or accessed by unauthorised third parties.

8. Cookies, TAGS and trackers

When browsing our website, information relating to the navigation of the user's terminal (computer, tablet, smartphone, etc.) may be saved through files referred to as "Cookies".

A cookie allows tracking the browsing or analyzing user behavior, including:
   - measuring the number of visitors to our website and application, as well as their content;
   - saving customer account information when the user is logged in;
   - saving the shopping cart for 30 minutes;customizing the display of content accessible to the user.

Users can update their cookies’ settings via :

   - Safari: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html ,
   - Chrome : http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 ,
Firefox: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies 
   - Internet Explorer : http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies ,
   - iOS : https://support.apple.com/fr-fr/HT201265

Users may also refuse to accept cookies on the follo wing website: http://www.youronlinechoices.com/fr/controler-ses-cookies/.