The purpose of this Privacy Policy is to inform users of the Aubiose website about how their personal data is collected, used, stored and protected.

It applies to the website www.aubiose.org and to all services provided through it.

1. Data Controller

The data controller responsible for the personal data collected on the website is:

La Chanvrière
Route de Grange l’Evêque
10180 SAINT LYE
France

E-mail: info@aubiose.co.uk

For any questions regarding the processing of your personal data or to exercise your rights, you can contact us at this address.

2. What personal data do we collect?

Depending on how you use the website, different types of personal data may be collected.

Account creation

When creating a customer account, the following information may be requested:

• first and last name;

• e-mail address;

• password;

• billing address;

• delivery address;

• telephone number;

• order history.

Orders

When you place an order, we collect the information necessary to process it, including:

• first and last name;

• contact details;

• billing address;

• delivery address;

• e-mail address;

• telephone number;

• products ordered;

• order amount;

• information required for billing and delivery.

Payment information is processed by the payment service provider used during the order process. Aubiose does not retain complete banking details when they are processed directly by the payment service provider.

Contact form

When you contact us through the website, we may collect:

• your name;

• your e-mail address;

• your telephone number, if provided;

• the content of your message;

• any information you choose to provide.

This data is used to respond to your enquiry.

Product reviews

When you publish a product review, we may collect:

• your name or username;

• your e-mail address;

• your rating;

• the content of your review;

• the product concerned.

Your e-mail address is not published with your review.

Reviews may be displayed on the website to present feedback and experiences from customers and users.

Newsletter

When you subscribe to our newsletter, we collect your e-mail address and, where applicable, the information required to manage your subscription.

This data is used to send you the communications you have chosen to receive.

You can unsubscribe at any time using the unsubscribe link included in the e-mails you receive.

3. Why do we use your data?

Your personal data may be used to:

• create and manage your customer account;

• process and track your orders;

• arrange delivery of products;

• issue invoices;

• respond to your enquiries;

• manage product reviews;

• send the newsletters you have subscribed to;

• ensure website security;

• improve the operation of the website;

• manage your cookie preferences;

• detect and prevent fraud or misuse;

• comply with our legal and regulatory obligations.

We do not use your personal data for purposes that are incompatible with those described in this Privacy Policy.

4. What is the legal basis for processing your data?

Depending on the circumstances, the processing of your personal data is based on different legal grounds.

Performance of a contract

Data required to create an account, process an order, arrange delivery and issue invoices is processed where necessary for the performance of the contract.

Compliance with a legal obligation

Certain data must be retained in order to comply with our legal obligations, particularly accounting and tax requirements.

Consent

Where your consent is required, it will be obtained before the relevant processing takes place.

This may include subscribing to certain marketing communications or the use of certain cookies and tracking technologies.

You can withdraw your consent at any time.

Legitimate interests

Certain data may be processed on the basis of our legitimate interests, including to ensure website security, prevent fraud, improve our services or respond to enquiries submitted to us.

5. Who can access your data?

Your personal data is only accessible to people who need it to operate the website and provide the services offered.

It may also be shared with technical service providers involved in areas including:

• website hosting;

• IT maintenance and security;

• payment processing;

• order delivery;

• e-mail and newsletter distribution;

• review management;

• cookie and preference management;

• audience measurement, where you have given your consent.

These service providers may only use the data provided to them for the purpose of delivering the services they provide.

6. Newsletter and e-mail service provider

When you subscribe to our newsletter, your e-mail address may be transferred to our e-mail service provider to manage subscriptions and send communications.

Each newsletter contains an unsubscribe link.

After you unsubscribe, your e-mail address will no longer be used to send the communications to which you previously subscribed.

7. Cookies and other tracking technologies

The website uses cookies that are necessary for its operation and, depending on your choices, cookies and other tracking technologies used in particular to measure audience statistics or provide certain features.

Strictly necessary cookies may be placed without consent where this is permitted by applicable regulations.

Other cookies and tracking technologies are subject to your consent where required.

When you first visit the website, a banner allows you to accept or refuse the relevant cookies.

You can also change your choices at any time through the cookie management tool available on the website.

8. How long do we keep your data?

We retain your personal data only for as long as necessary for the purposes for which it is used, unless a longer retention period is required by law.

Indicative retention periods include:

• Customer account: until the account is deleted or for as long as necessary to manage the customer relationship;

• Orders and invoices: for the statutory period applicable to accounting and tax records;

• Contact enquiries: for the time necessary to process the enquiry and manage subsequent correspondence;

• Product reviews: for as long as the review remains published, unless deletion is requested or otherwise required by law;

• Newsletter: until the user unsubscribes;

• Cookies: according to the lifespan of each cookie and the applicable rules.

Certain data may be retained for longer where required by law or where necessary to establish, exercise or defend our legal rights.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against:

• unauthorised access;

• loss or destruction;

• unauthorised modification;

• disclosure;

• misuse.

Access to data is restricted to the people and service providers who need it to perform their duties.

10. Your rights

In accordance with applicable data protection regulations, you have the following rights, in particular:

Right of access

You can request a copy of the personal data we hold about you.

Right to rectification

You can request the correction of inaccurate or incomplete personal data.

Right to erasure

You can request the deletion of your personal data where the conditions provided for by applicable regulations are met.

Right to restriction of processing

You can request that the processing of your data be restricted in certain circumstances.

Right to object

You can object to certain processing of your data, particularly where the processing is based on our legitimate interests.

Right to data portability

Where this right applies, you can request to receive the personal data you have provided to us in a structured and commonly used format.

Right to withdraw consent

Where processing is based on your consent, you can withdraw your consent at any time.

Withdrawing your consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

11. How can you exercise your rights?

To exercise your rights or for any questions regarding the protection of your personal data, you can contact us:

E-mail: contact@lachanvriere.com

or by post:

La Chanvrière
Route de Grange l’Evêque
10180 SAINT LYE
France

We may ask you to provide certain information to verify your identity where necessary to protect your data against fraudulent requests.

12. Complaints to the CNIL

If you believe that your personal data is not being processed in accordance with applicable regulations, you can contact us so that we can review your request.

You may also lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French data protection authority.

Website: www.cnil.fr

13. Children’s data

The website is not intended to knowingly collect personal data from children.

Where the collection of data concerning a child requires the consent of their legal representative, such consent must be obtained in accordance with applicable regulations.

14. Links to external websites

The website may contain links to websites or services operated by third parties.

Aubiose is not responsible for the content, practices or privacy policies of these external websites.

We recommend that you review their own privacy policies before providing them with any personal data.

15. Changes to this Privacy Policy

This Privacy Policy may be amended to reflect changes in legal, regulatory, technical or functional requirements affecting the website.

The version published on this page is the version applicable at the time of your visit.

Last updated: 18 September 2026