PRIVACY POLICY

I'll create a detailed privacy policy for MONTALE:

MONTALE PARFUMS PRIVACY POLICY

Article 1. Introduction

Montale Parfums Paris ("Montale", "we", "us" or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, share and protect your data when you interact with our website, purchase our products or engage with our services. By using Montale services you consent to the data practices described in this policy.

Article 2. Data Controller

Montale Parfums Paris acts as the data controller for personal information collected through our services. We are responsible for ensuring your data is processed lawfully, fairly and transparently. Our registered office is located in Paris, France. Contact details provided at end of this policy.

Article 3. Information We Collect

We collect the following categories of personal information:

Identity Data:

  • Full name
  • Date of birth
  • Gender
  • Title
  • Username or unique identifier

Contact Data:

  • Billing address
  • Delivery address
  • Email address
  • Telephone number
  • Mobile number

Financial Data:

  • Payment card details
  • Bank account information
  • Billing information
  • Transaction history

Transaction Data:

  • Purchase history
  • Products ordered
  • Order dates and values
  • Payment amounts
  • Delivery preferences

Fragrance Profile Data:

  • Scent preferences
  • Favorite collections
  • Notes preferences (floral, woody, oriental, fresh)
  • Previously purchased fragrances
  • Wish list items
  • Product reviews and ratings

Technical Data:

  • IP address
  • Browser type and version
  • Operating system
  • Device type and ID
  • Time zone settings
  • Location data
  • Cookie data
  • Page response times
  • Download errors
  • Visit duration

Usage Data:

  • Website navigation patterns
  • Products viewed
  • Search queries
  • Email open rates
  • Click-through rates
  • Shopping cart activity

Marketing and Communications Data:

  • Marketing preferences
  • Communication preferences
  • Newsletter subscription status
  • Survey responses
  • Contest entries

Article 4. How We Collect Information

We collect information through various methods:

Direct Interactions:

  • Account registration and profile creation
  • Purchase transactions online and in-store
  • Customer service inquiries
  • Newsletter subscriptions
  • Contest and promotion participation
  • Product reviews and feedback
  • Survey completion
  • Social media engagement

Automated Technologies:

  • Cookies and similar tracking technologies
  • Website analytics tools
  • Email tracking pixels
  • Mobile app usage data
  • Server logs

Third-Party Sources:

  • Social media platforms (Facebook, Instagram)
  • Payment processors
  • Delivery service providers
  • Data analytics providers
  • Marketing partners
  • Authorized retailers and distributors

Article 5. Legal Basis for Processing

We process your personal data under the following legal grounds:

Consent:

  • Marketing communications
  • Optional cookies
  • Fragrance profiling
  • Newsletter subscriptions

Contract Performance:

  • Order processing and fulfillment
  • Payment processing
  • Delivery arrangements
  • Customer service

Legal Obligation:

  • Tax and accounting records
  • Fraud prevention
  • Age verification
  • Consumer protection compliance

Legitimate Interests:

  • Website functionality improvement
  • Security and fraud detection
  • Business analytics
  • Product development
  • Network and information security

Article 6. How We Use Your Information

We use your personal data for the following purposes:

Order Fulfillment:

  • Process and deliver orders
  • Manage payments and refunds
  • Provide order confirmations and updates
  • Handle returns and exchanges

Customer Service:

  • Respond to inquiries and requests
  • Resolve complaints and issues
  • Provide product information
  • Offer personalized assistance

Marketing and Communications:

  • Send promotional emails and newsletters
  • Inform about new product launches
  • Share exclusive offers and discounts
  • Conduct market research
  • Personalize marketing messages

Personalization:

  • Recommend products based on preferences
  • Create customized shopping experiences
  • Save fragrance profiles
  • Remember delivery preferences
  • Suggest complementary products

Website Improvement:

  • Analyze user behavior and trends
  • Optimize website performance
  • Test new features
  • Enhance user interface
  • Fix technical issues

Security and Fraud Prevention:

  • Verify identity and age
  • Detect fraudulent transactions
  • Prevent unauthorized access
  • Monitor suspicious activity
  • Protect against cyber threats

Legal Compliance:

  • Maintain accurate records
  • Respond to legal requests
  • Comply with tax obligations
  • Honor consumer rights
  • Meet regulatory requirements

Article 7. Marketing Communications

We send marketing communications about products, offers, events and news. Communication channels include email, SMS, push notifications and postal mail. You can opt out anytime through:

  • Unsubscribe link in emails
  • Account preference settings
  • Reply "STOP" to SMS messages
  • Contacting customer service
  • Updating app notification settings

Opt-out does not affect transactional communications such as order confirmations, shipping updates and customer service messages. Preferences honored within 48 hours. Marketing frequency varies based on subscription type.

Article 8. Cookies and Tracking Technologies

Montale uses cookies, web beacons, pixels and similar technologies. These tools help us:

  • Remember login credentials
  • Keep items in shopping cart
  • Analyze website traffic
  • Personalize content
  • Measure advertising effectiveness
  • Improve user experience

Cookie Categories:

Essential Cookies:

  • Enable core website functionality
  • Support security features
  • Remember language preferences
  • Maintain session state

Performance Cookies:

  • Collect analytics data
  • Monitor page loading times
  • Track error messages
  • Measure user engagement

Functional Cookies:

  • Remember user preferences
  • Enable personalization
  • Support chat features
  • Facilitate social sharing

Advertising Cookies:

  • Deliver targeted ads
  • Measure campaign performance
  • Prevent ad repetition
  • Track conversions

You can manage cookie preferences through browser settings. Blocking certain cookies may limit website functionality. Cookie consent banner appears on first visit. Settings can be updated anytime.

Article 9. Third-Party Services

We share information with trusted third parties who assist in business operations:

Service Providers:

  • Payment processors (Stripe, PayPal)
  • Shipping carriers (DHL, FedEx, UPS)
  • Cloud hosting services
  • Email service providers
  • Customer service platforms
  • IT support and maintenance

Business Partners:

  • Authorized retailers and distributors
  • Co-marketing partners
  • Affiliate programs
  • Influencer collaborations

Analytics Providers:

  • Google Analytics
  • Adobe Analytics
  • Hotjar
  • Mixpanel

Advertising Networks:

  • Google Ads
  • Facebook Ads
  • Instagram Ads
  • Programmatic advertising platforms

Social Media Platforms:

  • Facebook
  • Instagram
  • YouTube
  • Pinterest
  • TikTok

Professional Advisors:

  • Legal counsel
  • Accountants
  • Auditors
  • Consultants

Corporate Transactions:

  • Potential buyers in merger or acquisition
  • Investors and stakeholders
  • Parent company and affiliates

All third parties contractually obligated to protect your data. They process information only as instructed. We conduct due diligence on partners. Data sharing agreements comply with applicable laws.

Article 10. International Data Transfers

Your information may be transferred to countries outside your residence. Transfers occur when:

  • Using cloud services in different regions
  • Processing payments internationally
  • Coordinating with global partners
  • Serving international customers

We ensure adequate protection through:

  • EU Standard Contractual Clauses
  • Adequacy decisions by authorities
  • Privacy Shield frameworks where applicable
  • Binding corporate rules
  • Explicit consent when required

Data protection levels may differ across jurisdictions. We implement safeguards to maintain security. Transfers comply with GDPR and local regulations.

Article 11. Data Security

We implement comprehensive security measures to protect your information:

Technical Safeguards:

  • SSL/TLS encryption for data transmission
  • AES-256 encryption for stored data
  • Firewalls and intrusion detection
  • Regular security updates and patches
  • Secure server infrastructure
  • Multi-factor authentication
  • Data backup and recovery systems

Administrative Safeguards:

  • Employee training on data protection
  • Confidentiality agreements
  • Access controls and authorization
  • Regular security audits
  • Incident response procedures
  • Vendor management protocols

Physical Safeguards:

  • Secure data centers
  • Restricted facility access
  • Surveillance systems
  • Environmental controls
  • Disaster recovery plans

Despite precautions, no system is completely secure. We cannot guarantee absolute protection. You should protect account credentials and report suspicious activity immediately.

Article 12. Data Retention

We retain personal information only as long as necessary:

Active Account Data:

  • Retained while account active
  • Plus 3 years after last activity
  • Longer if legal obligation exists

Transaction Records:

  • Minimum 7 years for tax purposes
  • Payment data deleted after processing
  • Delivery information kept 2 years

Marketing Data:

  • Until opt-out or unsubscribe
  • Plus 1 year to honor preferences
  • Suppression lists maintained indefinitely

Website Analytics:

  • Aggregated data retained indefinitely
  • Individual user data 26 months maximum

Customer Service Records:

  • 3 years after last interaction
  • Longer for legal claims

Retention periods vary by data type and legal requirements. We periodically review and delete outdated information. You can request deletion subject to legal exceptions.

Article 13. Your Privacy Rights

You have the following rights regarding your personal data:

Right to Access:

  • Request copy of data we hold
  • Receive information in portable format
  • Understand how data is used

Right to Rectification:

  • Correct inaccurate information
  • Complete incomplete data
  • Update outdated details

Right to Erasure:

  • Request deletion of data
  • "Right to be forgotten"
  • Subject to legal exceptions

Right to Restrict Processing:

  • Limit how we use data
  • Maintain data without processing
  • Temporary suspension of activities

Right to Data Portability:

  • Receive data in structured format
  • Transfer data to another controller
  • Electronic format provided

Right to Object:

  • Opt out of marketing
  • Challenge legitimate interest processing
  • Stop automated decision-making

Right to Withdraw Consent:

  • Revoke consent anytime
  • Does not affect prior processing
  • No penalties for withdrawal

Right to Lodge Complaint:

  • Contact supervisory authority
  • File complaint with data protection agency
  • Seek judicial remedy

Exercise rights by contacting privacy@montale.com or through account settings. We respond within 30 days. Identity verification required. Some requests may have legal limitations.

Article 14. Children's Privacy

Our services not intended for individuals under 18. We do not knowingly collect children's data. Age verification required for purchases. Parents discovering unauthorized data collection should contact us immediately. Information will be deleted upon verification. Legal guardians can purchase on behalf of minors.

Article 15. California Privacy Rights

California residents have additional rights under CCPA and CPRA:

Right to Know:

  • Categories of data collected
  • Sources of data
  • Purpose of collection
  • Third parties receiving data

Right to Delete:

  • Request deletion of personal information
  • Subject to legal exceptions

Right to Opt-Out:

  • Sale or sharing of personal information
  • Targeted advertising
  • Profiling

Right to Correct:

  • Inaccurate personal information

Right to Limit:

  • Use of sensitive personal information

Non-Discrimination:

  • Equal service regardless of rights exercise
  • No penalties for CCPA requests

Shine the Light:

  • Annual information sharing disclosure
  • Categories shared with third parties

We do not sell personal information as traditionally defined. Targeted advertising may constitute "sale" under CCPA. Opt-out available at Do Not Sell My Personal Information link. Authorized agents can submit requests with proper documentation.

Article 16. European Privacy Rights

GDPR provides comprehensive rights to EU/EEA residents:

Lawful Processing:

  • Clear legal basis for all processing
  • Transparent data practices
  • Purpose limitation

Data Protection Officer:

  • DPO available for inquiries
  • Contact: dpo@montale.com
  • Independent oversight

Cross-Border Transfers:

  • Adequate safeguards in place
  • Standard contractual clauses
  • Adequacy decisions respected

Automated Decision-Making:

  • Right to human review
  • Explanation of logic
  • Challenge automated decisions

Supervisory Authority:

  • Lodge complaint with local authority
  • EU Data Protection Board coordination
  • Right to effective remedy

Brexit Considerations:

  • UK GDPR compliance
  • Adequacy decision status
  • Separate UK representative

EU customers can contact French data protection authority (CNIL) or local supervisory body. We cooperate fully with regulatory investigations.

Article 17. Fragrance Profile and Preferences

We create fragrance profiles to personalize recommendations. Profile includes:

  • Scent family preferences
  • Note preferences
  • Purchase history
  • Browsing behavior
  • Review data
  • Wish list items

Profiling helps suggest suitable products and exclusive offers. You can view, edit or delete profile anytime. Profiling based on consent and legitimate interest. Opt-out available without affecting account.

Article 18. Email and SMS Marketing

Marketing messages include product launches, promotions, events and personalized offers. Frequency varies by subscription tier:

  • VIP subscribers: up to 4 emails weekly
  • Standard: 2 emails weekly
  • Occasional: monthly updates only

SMS messages for time-sensitive offers and delivery updates. Standard messaging rates apply. Reply STOP to opt out. Email preferences managed in account settings. Transactional messages cannot be disabled.

Article 19. Social Media Integration

Our website integrates with social platforms. Features include:

  • Social login (Facebook, Google)
  • Share buttons
  • Embedded content
  • Social plugins

Social media companies collect data through these features. Their privacy policies apply to collected information. We receive limited data from social logins. You control social sharing settings. Social integration optional for account creation.

Article 20. Mobile Application

Our mobile app collects additional data:

  • Device identifiers
  • Location services (with permission)
  • Camera access for virtual try-on
  • Photo library for sharing
  • Push notification tokens
  • App usage analytics

Permissions managed through device settings. App functions may be limited without certain permissions. Uninstalling app does not delete account data. In-app purchases follow platform policies.

Article 21. Loyalty and Rewards Program

Participation in Montale Prestige program involves additional data processing:

  • Points balance and history
  • Tier status and benefits
  • Exclusive offer eligibility
  • Birthday and anniversary dates
  • Referral activity
  • Event attendance

Program data enhances personalization and rewards. Separate terms govern program participation. Points and status calculated from verified purchases. Account activity monitored for fraud prevention. Program subject to modification or termination.

Article 22. Product Reviews

Submitted reviews become public and may include:

  • Display name or initials
  • Review text and rating
  • Purchase verification badge
  • Date of submission
  • Helpful votes

You control what information appears in reviews. Reviews moderated for inappropriate content. We may share reviews with retail partners. Reviews remain visible after account deletion unless removal requested. False reviews prohibited and may result in account suspension.

Article 23. Contests and Promotions

Special terms apply to contests, sweepstakes and promotions. Additional data collected may include:

  • Entry submissions
  • Eligibility verification
  • Prize preferences
  • Tax information for winners
  • Publicity consent

Participation optional and governed by official rules. Winner information may be publicly disclosed. Promotional data not used for other marketing without consent. Contest sponsors may have separate privacy policies.

Article 24. Customer Service Interactions

Customer service communications recorded and analyzed:

  • Email correspondence
  • Live chat transcripts
  • Phone call recordings
  • Social media messages
  • Survey responses

Recordings used for quality assurance, training and dispute resolution. You will be notified before call recording. Transcripts retained according to retention policy. Sensitive information handled with extra care.

Article 25. Automated Decision-Making

We use automated systems for:

  • Fraud detection
  • Personalized recommendations
  • Dynamic pricing
  • Inventory management
  • Marketing segmentation

Automated decisions do not significantly affect legal rights. Human review available upon request. You can challenge automated decisions. Logic and significance explained upon inquiry. Opt-out may limit personalization.

Article 26. Biometric Data

Virtual try-on features may process facial data. All processing occurs locally on device. Biometric information not uploaded to servers. Feature requires explicit consent. Can be disabled anytime. Facial mapping data immediately deleted after use. No biometric databases maintained.

Article 27. Sensitive Personal Information

We generally do not collect sensitive data. Exceptions include:

  • Health information voluntarily provided for allergen alerts
  • Racial or ethnic data inferred from fragrance preferences (not stored)

Sensitive data processed only with explicit consent. Extra security measures applied. Limited access to authorized personnel. You can request deletion anytime.

Article 28. Third-Party Websites

Our website contains links to external sites. Montale not responsible for third-party privacy practices. External sites have separate privacy policies. We recommend reviewing policies before providing information. Links do not imply endorsement. Exercise caution with third-party services.

Article 29. Data Breach Notification

In event of data breach we will:

  • Assess scope and impact
  • Contain and remediate breach
  • Notify affected individuals within 72 hours
  • Report to supervisory authorities as required
  • Provide guidance on protective measures
  • Offer credit monitoring if appropriate

Notification includes nature of breach, categories of data affected, likely consequences and remedial actions. We maintain incident response plan and conduct regular drills.

Article 30. Changes to Privacy Policy

We may update this policy to reflect:

  • Legal or regulatory changes
  • New technologies or practices
  • Business evolution
  • Customer feedback

Material changes communicated via:

  • Email to registered users
  • Website banner notification
  • In-app alerts
  • Updated effective date

Continued use after changes constitutes acceptance. Significant changes may require renewed consent. Previous versions archived and available upon request. Policy review recommended periodically.

Article 31. Contact Information

For privacy questions, requests or complaints:

Email: privacy@montale.com Phone: +33 1 47 53 05 05 Mail: Montale Parfums Privacy Office, Paris, France

Data Protection Officer: dpo@montale.com

EU Representative: Montale Europe GDPR Compliance Team UK Representative: Montale UK Data Protection Office

California Inquiries: california.privacy@montale.com

Response time: 30 days maximum for rights requests, 5 business days for general inquiries.

Supervisory Authorities:

  • France: CNIL (Commission Nationale de l'Informatique et des Libertés)
  • UK: ICO (Information Commissioner's Office)
  • California: California Attorney General