1. WHAT IS THE PURPOSE OF OUR PERSONAL DATA PROTECTION POLICY?
1.1 Our company Sam & Louloute reminds you of its commitment to respect the trust you place in it and to apply the regulations in force in England and in the European Union regarding personal data protection.
This Personal Data Protection Policy informs you of the conditions under which Sam & Louloute, in its capacity as a Data Controller, collects and uses your personal data. The policy, as brought to your attention when you provide us with your data on completing a form, provides you with full information on our use of your personal data.
1.2 This Policy applies to data collected in-store, by mail or by telephone when you contact our customer service department, as well as when you use our website or mobile app. These rules relate to the personal data collected directly from our customers and prospects, regardless of the data collection channel.
It is accessible by all and permanently at www.samandlouloute.com. Please read it carefully and refer to it regularly. Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. This Policy is independent of any other document that may apply in the contractual relationship between Sam & Louloute and our customers and prospects, including our general conditions of sale and our Cookies Policy.

2. WHO IS THE CONTROLLER OF YOUR DATA?
Sam & Louloute is Sam & Louloute, a company registered in England and Wales under company number 11019518 and its registered 71-75 Shelton Street, London WC2H 9JQ, United Kingdom.

3. WHAT PERSONAL DATA DO WE COLLECT AND USE?
This is your:
– Data relating to your identity: title, surname, first name, address, date of birth, etc.
– Contact details: delivery and billing address, telephone number, e-mail address, etc.
– Financial data: information related to payment, etc.
– Commercial data: customer number, purchase history, information relating to your customer account and loyalty account, product reviews, customer segment, etc.
– Technical data: connection data, IP address, operating system, browser type, browsing history, login and password, etc.
– Geolocation data
– User and account data: including your username, password and unique user ID
– Personal preference data: including your wish list, marketing preferences and cookie preferences
This data depends on your interactions with our company: subscribing to a loyalty card in store, creating a customer account on our website, ordering online, subscribing to the Newsletter, contacting customer service, etc., and on your use of our services, our website and our mobile app.
When the data is collected, for the purposes of entering into or performing a contract with you or as a statutory requirement, you are made aware of whether the disclosure of your data is compulsory or optional. Failure to provide information marked as compulsory will prevent us from fulfilling your order request. For example, your delivery address is required to deliver your order.

4. HOW AND WHEN DO WE COLLECT YOUR DATA?
We collect the personal data that you provide to us, for example:
– In the “Create an account” section online
– On signing up to our Newsletter
– When you place an order (requiring prior account creation to ensure delivery)
– Details of transactions carried out through our website and fulfilment of orders
– Any correspondence between you and us
– Details of your visits to our website

5. WHY DO WE PROCESS YOUR DATA?
We only collect and use the data that is relevant and necessary for the purpose of each processing operation.
– We process your data for the purpose of fulfilling a contract with you: Recording and completing your orders, providing you with the services to which you have subscribed, handling your requests and complaints, providing after-sales service, collecting unpaid amounts.
– We also use your data for other purposes, allowing us to pursue our legitimate interests, ensuring that we always respect your rights and interests:
Managing and improving customer relations, improving your experience when using our website and mobile app from details of your visits, managing and administering our system from details of your visit, sending statistical aggregate report data (not identifying you) to our advertisers, carrying out marketing campaigns and suggesting offers tailored to your needs (see the ‘Will you receive marketing offers?’ section below), managing your subscription to the Newsletter for sending related commercial electronic communications (emails and/or text messages), locating your nearest Sam & Louloute store, correspondence with you including from answering your questions in the online chat and contact form, running games and competitions related to our brand, carrying out statistical analysis, carrying out satisfaction surveys, preventing abuse and fraud, informing you of new services or changes to our products, services, website and our app.
– Your data is also used to enable us to comply with our legal or regulatory obligations.
– Consent – We do not generally process your personal information based on your consent (as we can usually rely on another legal basis). Where we do process your personal information based on your consent, you have the right to withdraw your consent at any time. To withdraw your consent please email us at contact@samandlouloute.com or, to stop receiving our marketing emails, please click on the unsubscribe link in the relevant email you receive from us.

6. HOW DO WE ENSURE YOUR DATA IS SECURE?
Sam & Louloute takes all the necessary technical and organisational steps to ensure the security and confidentiality of your personal data, in compliance with the legal and regulatory provisions in force.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot and do not guarantee the security of your information transmitted to our website and accordingly any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

7. WHO ARE THE RECIPIENTS OF THE DATA?
In the context of the purposes set out above, the recipients of personal data are the duly authorised personnel of Sam & Louloute, its partners, and its service providers and subcontractors.
The data may also be transferred to the relevant authorities, at their request, or in order to comply with other legal obligations.

8. HOW LONG IS YOUR PERSONAL DATA KEPT FOR?
We do not keep your personal data forever.
We keep your personal data in accordance with our internal data retention policy which categorises all of the information held by us and specifies the appropriate retention period for each category of information. Those periods are based on the requirements of relevant data protection laws and the purpose for which the information is collected and used, taking into account legal and regulatory requirements to retain the information for a minimum period, limitation periods for taking legal action, good practice and our business purposes.

9. WHAT ARE YOUR RIGHTS? HOW DO YOU EXERCISE YOUR RIGHTS?
In accordance with the Data Protection Act 2018 and the provisions of the General Data Protection Regulation of 27 April 2016, you have various rights, subject to certain conditions being met, which you may exercise at any time:
– You have a right to access, rectify, restrict and erase data concerning you, as well as the right to request the portability of the data you have provided to Sam & Louloute.
– You also have the right to object to processing concerning your data where we process your data on the basis of our legitimate interests unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights.
We are obliged to keep your personal data accurate and up to date. Please help us to do this by advising us of any changes to your personal data. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.How do you exercise your rights?
You may exercise your rights by sending a request specifying your surname, first name, address and attaching a copy of an identification document (for example, passport or driving licence) by email at contact@samandlouloute.com.
Sam & Louloute has appointed a Data Protection Officer responsible for ensuring compliance with the applicable regulations and the rules set out in this Policy.
If you have any questions or comments regarding the processing of your personal data, you can also contact the Data Protection Officer at the following address: contact@samandlouloute.com
We undertake to do our utmost to respect your rights with regard to your personal data. If however you feel that these rights have not been respected, you may lodge a complaint with the Information Commissioner’s Office, the supervisory authority responsible for ensuring compliance in the United Kingdom with the regulations on personal data processing: https://ico.org.uk/.

10. WILL YOU RECEIVE MARKETING OFFERS?
In accordance with the choices you have made, we may use your details to send you marketing communications, in particular by post, e-mail or text message:
– Offers by post:
We may send you offers for our products and services by post. You may also receive offers by post from our partner companies (including our group companies and associated third parties that we work with).
If you don’t want this to happen, just let us know.
-Offers by e-mail or text message:
You may receive offers for our products and services by e-mail or text message, as well as offers for the products and services of our partner companies (including our group companies and associated third parties that we work with).
You may opt out of receiving marketing communications at any time. You may at any time object to receiving these offers.
– For email offers:
by clicking on the unsubscribe link that appears in each email or by contacting our customer service department.
-For text message offers:
by answering “STOP SMS” to the number that is shown in each text message or by contacting our customer service department.

11. IS YOUR DATA PROCESSED OUTSIDE THE EU?
We may transfer your data to a country outside of the European Union including, potentially, to countries that do not require organisations by law to look after your personal data in the way in which you have come to expect in your own country. In such cases, we ensure that we have put in place adequate safeguards so that the processing carried out complies with a level of personal data protection corresponding to the regulatory requirements.
If you would like further details of how your personal data is protected when transferred from one country to another, including a copy of safeguards in place, then please email us at contact@samandlouloute.com.

12. HOW DO WE ENSURE YOUR DATA IS SECURE?
Sam & Louloute takes all the necessary technical and organisational steps to ensure the security and confidentiality of your personal data, in compliance with the legal and regulatory provisions in force.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot and do not guarantee the security of your information transmitted to our website and accordingly any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

13. HOW DO WE USE COOKIES?
To find out more about our commitments regarding the use of information collected from cookies, please read our Cookies Policy.

14. HOW CAN YOU STAY INFORMED ABOUT CHANGES TO OUR DATA PROTECTION POLICY?
We undertake to update this Policy as necessary, and make it available on our Internet site, accessible to everyone and covering the relationship between customers and Sam & Louloute, whatsoever the context of this relationship: store, Internet, post, telephone.
Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.