Privacy policy

Definitions of terms used in this policy

In this policy, the following terms shall have the meanings set out below:

'Site' or 'service': the website https://www.fiilit.com and all of its pages.
'Publisher': Feel Diffusion, responsible for publishing and managing the content of the site.
'User': any person browsing the site and using its services.

Introduction and purpose of this policy

This policy is intended to inform you of the site’s commitments regarding respect for your privacy and the protection of your personal data, which is collected and processed when you use the service.

By registering on the site, you undertake to provide us with accurate information about yourself. Providing false information is contrary to the General Terms and Conditions available on the site.

You may at any time contact Feel Diffusion to find out what information concerning you is held by Feel Diffusion, to object to its processing, or to have it amended or deleted, by contacting the publication director at [EMAIL].

Data controller, legal bases and retention periods

FEEL DIFFUSION SAS, 8 rue de Paris, 91570 Bièvres, France, [EMAIL], is the data controller for processing related to the fiilit.com online store. We process your data to: manage your account, orders, payment, delivery, customer service and warranties (performance of the contract); comply with our accounting and tax obligations (legal obligation; accounting records retained for 10 years); send you offers and newsletters (your consent; retained until you withdraw your consent or for 3 years after our last contact); prevent fraud, secure the site and measure its audience (legitimate interest, or consent for non-essential trackers); manage customer reviews and communicate with Lia (see below). Data relating to a customer account is retained until the account is deleted. You may exercise your rights of access, rectification, erasure, restriction, objection and, where the legal conditions are met, data portability by writing to [EMAIL]. You may lodge a complaint with the CNIL.

Data collected on the site

The data collected and subsequently processed by the site is the data that you voluntarily provide to us by completing the various forms available on the site. For certain operations involving content, you may be required to provide data concerning you to third-party partners through their own services, specifically when making payments. We will not have access to that data, as its collection and processing are governed by the terms applicable to those third parties. We invite you to review those terms before providing your data in this context.

Your IP address is collected automatically. Trackers that are strictly necessary for the operation of the online store (shopping basket, connection security) may be used without consent where permitted by law. Other trackers, particularly those used for advertising or certain audience-measurement purposes, are used in accordance with the choices you make in our cookie management tool. You may accept, reject or change your choices at any time, with equal ease for accepting and rejecting. This tool sets out the purposes and the partners concerned. To find out more: https://www.cnil.fr/fr/cookies-et-autres-traceurs

The contact details of users who have registered on the site will be saved in accordance with the provisions of the French Data Protection Act of 6 January 1978. Under that Act, they have the right to access, withdraw, amend or rectify the data they have provided. To exercise these rights, they need only submit a request to the following email address: [EMAIL], or by post to Feel Diffusion, 8 rue de Paris, 91570 Bièvres, France.

Purposes of the data collected

Data identified as mandatory in the forms on the site is required in order to use the corresponding site features, and more specifically to carry out operations involving the content offered on the site. Data collected automatically by our service may be used to compile statistics on visits to its web pages.

Recipients and use of the data collected

The data we collect from you is processed for the purposes of carrying out operations involving the content of the service.

You may receive emails from our service, particularly in connection with newsletters. You may request that we stop sending you these emails by contacting us at [EMAIL] or by clicking the link provided for this purpose in each email sent to you.

For certain data only, identified in the relevant form, and subject to your voluntary and active acceptance via that form, you agree that your data may be transferred to our business partners for marketing or advertising purposes. Please note that any such transfer to third parties excludes all of your banking data. These business partners may send you information by email in connection with specific, one-off promotional campaigns. These partners are specially selected by https://www.fiilit.com based on the quality of their products and services. You may ask to stop receiving these emails at any time by contacting us at [EMAIL] or using the link provided for this purpose at the bottom of each email sent to you.

Data security

You are informed that your data may be disclosed pursuant to a law or regulation, or in accordance with a decision by a competent regulatory or judicial authority, or, where necessary, for the Publisher to safeguard its rights and interests.

Data retention period

The data are stored with the website hosting provider, whose contact details are set out in the Legal Notice on the website, and are retained for the period strictly necessary to achieve the purposes set out above. After this period, they will be retained solely for statistical purposes and will not be used in any way whatsoever.

Review management

FiiLiT.com Parfum du Voyage is committed to fairness and transparency towards online platforms, particularly in relation to reviews posted by internet users. We comply with Decree No. 2017-1436 of 29 September 2017 on information obligations relating to online consumer reviews. In other words, customer reviews are moderated and may be edited according to certain criteria, such as spelling or grammar, but we will never change the meaning of the text.

For each review, we specify its publication date, and reviews are listed in chronological order from newest to oldest. This enables you to assess the consumer experience with better information. In addition, if an incentive is offered in exchange for submitting a review, this is clearly and transparently stated when you submit your review.

We undertake to moderate your reviews within a maximum period of 21 days, although we generally publish them within 2 to 3 business days. Where applicable, we reserve the right to contact the consumer who submitted the review, and we specify whether or not a review may be edited and, where applicable, the procedure for editing it, as well as the reasons justifying a refusal to publish. Lastly, we retain reviews for a period of 5 years.

The aim is to ensure that comments are genuine and intelligible. This system helps you make an informed choice about a verified purchase (or equivalent) and enables internet users to distinguish genuine feedback based on experience. Help us share your consumer experiences by leaving a short comment.

Virtual assistant Lia

Lia is a virtual assistant that uses artificial intelligence. She informs you of this at the beginning of the conversation. She helps answer questions about perfumes, orders and business enquiries on the channels where she is currently available: WhatsApp at this time (Messenger, Instagram and the website chat will be added as they become available). You can ask to speak to a person. Decisions concerning a complaint, a refund or a business relationship are made by our team. The data controller is FEEL DIFFUSION SAS (see the Legal Notice).

Decisions and human involvement:

Lia does not make any automated decisions that produce legal effects or otherwise significantly affect you.
Sensitive responses (complaints, refunds, business enquiries, health-related topics) are reviewed and sent by a member of the team. You can ask to speak to a person at any time.

Data collected:

The content of your messages, the date and time, the channel used, your WhatsApp number or account ID, and the name displayed on your profile. In our conversation database, your number is retained only in hashed form (a fingerprint that does not make it possible to recover the number); the automation tool retains no technical trace of your number once your reply has been sent.
If you give us your order number and the email address used for the purchase, we check the status, items, delivery method and parcel tracking in our store so that we can respond to you. This information is disclosed only to you.
For a business enquiry: company name, country, identification number (SIRET or VAT), website, position, project and contact details. We may check these numbers against public registers (business directory, VIES).
Please do not send us a bank card number, password or detailed health information: if you do, we will delete it as soon as possible.

Purposes and legal bases:

Answering your questions, advising you, tracking your order, and handling your requests and complaints: performance of the contract or pre-contractual measures taken at your request.
Reviewing a business enquiry, verifying a company, preventing fraud and ensuring the security of the service: Feel Diffusion's legitimate interest.
Improving the quality of responses and our knowledge base using anonymised examples: Feel Diffusion's legitimate interest.
We do not use your messages for commercial prospecting without your consent: writing to Lia does not subscribe you to the newsletter.

Data retention period:

Conversations, business enquiry files and associated logs are retained for a maximum of 24 months from the last exchange, then automatically deleted.
Technical automation traces are not retained. The assistant's internal history is deleted within a maximum of 30 days. Examples used to improve Lia are anonymised and cannot be linked to an individual.
Your conversations also remain visible in your own application (WhatsApp, Messenger, Instagram), subject to your settings and those of Meta. Order data is subject to statutory and accounting retention periods.

Data sharing (processors):

Your information is not sold. Depending on the channel and the request, the necessary data may be accessible to our store, payment, delivery, messaging, hosting, automation and artificial intelligence service providers, with whom we have entered into a data processing agreement where required by law: Meta Platforms Ireland (WhatsApp Business, Messenger, Instagram), OpenRouter and the artificial intelligence model provider (currently an OpenAI model), Hostinger (hosting of our automation tools and conversation database), Telegram (internal team notifications, which may contain conversation excerpts), Shopify (store and orders), our carriers (parcel tracking) and Judge.me (customer reviews).
Some of these providers, particularly those providing artificial intelligence services, may process data outside the European Economic Area. Where a transfer takes place, it relies on a mechanism provided for under the GDPR (adequacy decision, standard contractual clauses); you can obtain information about these safeguards by writing to [EMAIL].

Your rights:

You have the right to request access to, rectification or erasure of your personal data, restriction of processing or data portability, to object to processing based on our legitimate interest, and to withdraw your consent at any time.
To exercise these rights, please contact us at the following address: [EMAIL] or on WhatsApp at +33783987775. We will respond within one month. You may also lodge a complaint with the CNIL (www.cnil.fr).

Data security:

We implement appropriate technical and organisational security measures: restricted team access, encrypted exchanges between our tools, hashed numbers, access keys stored in dedicated vaults, verification of the authenticity of messages received from Meta, and rules preventing the assistant from disclosing one person's data to another.

Consent:

Writing to Lia does not constitute newsletter registration or general consent to all the processing activities described here. We process the information necessary to respond to your request and, where applicable, to fulfil your order or take steps at your request prior to entering into a contract. Some processing activities necessary for service security, fraud prevention and improving our responses are based on our legitimate interest; you may object to them under the conditions laid down in the GDPR. The identifier derived from your WhatsApp number remains personal data where it makes it possible to retrieve your conversation. The retention periods for conversations, technical logs and backups are described above.

If you have any questions about the use of your personal data or GDPR compliance, please do not hesitate to contact us directly.