Free shipping on orders over €100! Shop Now

RAKOTONDRASOA ANDRY

Privacy Policy

Effective Date: September 25, 2026

Welcome to the privacy policy of RAKOTONDRASOA ANDRY, the operator of the home fragrance e-commerce website www.rakotondrasoa.com. We are deeply committed to protecting the personal data, privacy rights, and security of every visitor, registered user, and customer who interacts with our platform. This policy is designed to clearly explain how we collect, use, store, share, and safeguard your personal information when you browse our curated collection of indoor fragrances, reed diffusers, car fragrance products, and related accessories, as well as when you place an order, sign up for updates, or engage with any features on our website. Our practices are fully aligned with the General Data Protection Regulation (GDPR) and all applicable French data protection laws, reflecting the core values of Parisian art de vivre and the transparent, respectful heritage of Grasse’s perfume industry that define our brand.

1. Data Controller Information

The data controller responsible for your personal information under this policy is:
Full Legal Name: RAKOTONDRASOA ANDRY
Registered Physical Address: 62 Rue des Stations, 59800 Lille, France
Official Contact Email: pulsef@rakotondrasoa.com
Contact Telephone Number: +33 3 2057 0603
If you have any questions, concerns, or requests related to your personal data handling, you can reach our dedicated data protection team via any of the contact channels listed above, and we will respond to your inquiry within 7 business days.

2. Types of Personal Information We Collect

We only collect information that is necessary to deliver a seamless, secure, and personalized home fragrance shopping experience for you. The categories of personal information we may gather include:

  • ‌Account and Registration Information‌: When you create a My Account profile on our website, we collect your full name, valid email address, chosen password, and preferred contact language to help you manage your order history, save favorite scent products, and speed up future checkout processes.
  • ‌Order and Transaction Information‌: To process and ship your purchases of reed diffusers, car air fresheners, essential oil bottles, and other items from our catalog, we collect your complete shipping address, billing address, telephone number, selected payment method details, and order specifics including the products you add to your cart, purchase quantities, and order value. We never store full sensitive payment card details on our servers, as all payment processing is handled through certified, PCI DSS-compliant third-party payment service providers.
  • ‌Website Usage and Interaction Data‌: As you browse www.rakotondrasoa.com, we automatically collect standard technical data including your IP address, browser type and version, device operating system, pages you viewed, time spent on product pages, click paths across our New Arrivals, Best Sellers, and Season Sale sections, referring website URLs, and search terms you entered on our platform. This data helps us optimize website performance, fix technical glitches, and present the most relevant fragrance recommendations tailored to your browsing habits.
  • ‌Voluntarily Provided Communication Data‌: When you contact our customer care team via email, submit a feedback form, leave a product review, or reach out with questions about our scent formulations or shipping policies, we collect the content of your messages, your associated contact details, and our response records to deliver consistent, helpful support.
  • ‌Marketing Preference Data‌: If you opt in to receive our newsletters, exclusive discount notifications, and updates about new limited-edition home fragrance collections, we store your email address, your stated scent preferences, and your engagement records with our marketing communications (such as whether you open our emails or click through to view new reed diffuser products).
  • ‌Cookies and Similar Tracking Technologies Data‌: We use first-party and authorized third-party cookies to enhance your browsing experience on our website. These small data files store your cart contents, your preferred currency display, your session login status, and anonymized analytics data that helps us understand how visitors interact with our shop pages. You can adjust your browser settings to refuse non-essential cookies at any time, though this may limit some personalized features on our platform.

3. Legal Basis for Processing Your Personal Data

In full compliance with GDPR requirements, all our personal data processing activities are supported by clear, valid legal bases:

  1. ‌Contract Performance‌: Processing your order, shipping details, and payment information is necessary to fulfill the purchase agreement you enter into with us when you complete a checkout on our website, ensuring that your selected home fragrance products are delivered to you accurately and on time.
  2. ‌Legitimate Interests‌: We process usage analytics data, website performance information, and anonymized browsing data to optimize our e-commerce platform, improve our product offerings, prevent fraudulent transaction activities, and maintain the overall security of our shop — all actions that align with our legitimate business interest in delivering a reliable, high-quality shopping experience to our customers, without overriding your fundamental privacy rights.
  3. ‌Explicit Consent‌: We only send you promotional marketing emails, collect non-essential cookies, and process any special categories of personal data you voluntarily share with us (such as your specific scent allergies or custom fragrance requests) after you provide clear, revocable explicit consent. You can withdraw this consent at any time, without affecting the lawfulness of processing carried out before your withdrawal.
  4. ‌Legal Compliance‌: We may process and retain your personal data to meet our legal obligations under French commercial laws, tax regulations, consumer protection rules, and other applicable statutory requirements that apply to e-commerce businesses operating in the European Union.

4. How We Use Your Personal Information

Every piece of personal data we collect is utilized for clear, transparent purposes tied to enhancing your experience with RAKOTONDRASOA ANDRY:

  • To process, confirm, fulfill, track, and deliver every order you place on our website, including coordinating with our shipping partners to ensure your indoor fragrance products reach the correct address, and sending you real-time updates about your order status and delivery timeline.
  • To manage your registered user account, allowing you to view past order history, save multiple shipping addresses, create wishlists of your favorite reed diffuser or car fragrance products, and access exclusive member-only promotions.
  • To respond to your customer service inquiries, resolve issues related to damaged products, process return and refund requests per our published Refund and Returns Policy, and offer personalized guidance to help you select the ideal home fragrance that matches your space size and scent preferences.
  • To send you non-intrusive service-related notifications, including alerts about temporary website maintenance, updates to our Shipping Policy, or announcements of product recalls that may impact items you have purchased from us.
  • If you have given your explicit consent, to send you personalized marketing communications featuring new arrivals, extra discount offers during our seasonal sales, limited-edition luxury fragrance sets, and exclusive previews of upcoming product launches that align with the scent categories you have shown interest in.
  • To conduct anonymized data analysis and market research, which helps us refine our product catalog, identify gaps in our current home fragrance offerings, and improve the overall user interface and navigation flow of www.rakotondrasoa.com to make shopping for aromas more intuitive.
  • To protect our website, our customers, and our business from fraudulent transactions, unauthorized access, data breaches, and other illegal activities, by verifying user identities and monitoring for unusual account behavior.
  • To comply with all mandatory legal, regulatory, and court order requirements that apply to our operations, including retaining transaction records for tax auditing purposes for the legally required duration.

We will never use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you, without implementing appropriate safeguards to protect your rights and freedoms.

5. Information Sharing and Disclosure of Your Personal Data

We will never sell, rent, or trade your personal information to unrelated third parties for their own marketing purposes without your explicit written consent. We only share your data with strictly vetted, trusted third parties when it is absolutely necessary to run our e-commerce operations, as outlined below:

  • ‌Authorized Service Providers‌: We share limited necessary information with our pre-vetted business partners who support our website operations, including PCI-compliant payment processors to complete your transactions, reputable international and domestic shipping carriers to deliver your orders, cloud hosting providers who store our website data on secure encrypted servers, email service platforms that dispatch our order confirmations and newsletters, and website analytics tools that help us optimize our platform. All these service providers are bound by strict data processing agreements that require them to protect your personal data with the same level of security we maintain, and they are forbidden from using your information for any purposes outside of the services they are contracted to deliver for us.
  • ‌Legal and Regulatory Authorities‌: We may disclose your personal information if we are required to do so by a valid court order, government regulatory inquiry, or other legally binding legal process, or if disclosure is necessary to protect our legal rights, defend against ongoing legal claims, safeguard the safety of our staff, our customers, or members of the public, and comply with applicable French and EU laws.
  • ‌Business Transaction Successors‌: In the event that RAKOTONDRASOA ANDRY undergoes a merger, acquisition, full or partial asset sale, or other corporate restructuring, your personal data may be transferred to the succeeding business entity. We will require that the new entity continues to adhere to the terms of this Privacy Policy, and we will notify all registered users via email of any material changes to data handling practices before the transfer takes effect.

6. International Data Transfers

Our primary operations are based in Lille, France, and all core personal data servers are hosted within the European Economic Area (EEA). On rare occasions, some of our third-party service providers may process your data outside of the EEA. In these cases, we will ensure that the transfer meets all GDPR requirements: we will only transfer data to countries that the European Commission has confirmed provide an adequate level of data protection, or we will put in place legally approved standard contractual clauses to guarantee that your personal information receives the same level of strict protection as it would within the European Union. You may request a copy of these relevant safeguards from our data protection team at any time by contacting us at pulsef@rakotondrasoa.com.

7. Data Retention Periods

We do not keep your personal information for longer than is strictly necessary to fulfill the specific purposes for which it was originally collected:

  • For order and transaction-related data: We retain your order details, billing and shipping information, and payment records for a period of 10 years after your order is completed, to meet French tax and commercial record-keeping legal obligations.
  • For registered user account data: We keep your account profile information for as long as your account remains active on our website. You may request to permanently delete your account at any time, and we will erase all your associated personal data within 15 business days, except for the information we are required to retain to meet ongoing legal compliance requirements.
  • For marketing-related contact data: We keep your email address for marketing communications until you opt out of our newsletter list, withdraw your consent for marketing processing, or request that we delete your contact information from our mailing list.
  • For website usage and analytics data: We store anonymized browsing behavior data for a maximum of 24 months, after which this data is aggregated and fully de-identified so that it can no longer be linked back to any individual user.
    Once the retention period for a specific category of your personal data expires, we will securely delete, anonymize, or irreversibly destroy that information in line with our internal data security protocols.

8. Your Data Protection Rights

Under the GDPR and applicable French data protection laws, you hold a full set of enforceable rights over your personal information:

  1. ‌Right of Access‌: You have the right to request a complete copy of all the personal data we hold about you, free of charge, by submitting a request to our data protection team. We will provide you with the information in a structured, commonly used machine-readable format within one month of verifying your identity.
  2. ‌Right to Rectification‌: If you find that any of the personal information we hold about you (such as your shipping address, email contact, or saved payment details) is inaccurate or incomplete, you can submit a request to update and correct that data at any time, and we will process the correction without unnecessary delay.
  3. ‌Right to Erasure (Right to be Forgotten)‌: You may request that we permanently delete all your personal data from our systems, under circumstances including when the data is no longer needed for the original purposes we collected it for, when you withdraw your consent for processing and no other legal basis for processing exists, or when you object to processing and no overriding legitimate grounds for our processing remain. We will honor this request as soon as possible, unless we are legally required to retain certain records for compliance purposes.
  4. ‌Right to Restriction of Processing‌: You have the right to request that we temporarily suspend processing of your personal data, for example if you contest the accuracy of your data, our processing activities are unlawful, or you need us to retain the data to support a legal claim.
  5. ‌Right to Data Portability‌: You can request that we transfer the personal data you have provided to us, directly to you or to another designated data controller, in a structured, interoperable format, where the processing is based on your consent or on a contract with us.
  6. ‌Right to Object‌: You may object to our processing of your personal data that is based on our legitimate interests, at any time, on grounds relating to your specific personal situation. We will stop processing your data unless we can demonstrate compelling legitimate grounds for processing that override your privacy rights, or the processing is necessary to establish, exercise, or defend legal claims. You also have an absolute right to object to us using your personal data for direct marketing purposes, at any time, without providing any specific reason.
  7. ‌Right to Withdraw Consent‌: You can withdraw any previously given consent for us to process your personal data (including consent for marketing emails or non-essential cookie use) at any time, easily via the unsubscribe link in our marketing emails, or by adjusting your browser cookie settings. This withdrawal will not affect the lawfulness of any processing we carried out before your consent was revoked.
  8. ‌Right to Lodge a Complaint‌: If you believe that our handling of your personal data violates applicable data protection laws, you have the right to submit a formal complaint to the competent French data protection authority (CNIL), or to your local national data protection supervisory body within the EEA.

To exercise any of the rights listed above, you may send your request via email to pulsef@rakotondrasoa.com, or by post to our registered address at 62 Rue des Stations, 59800 Lille, France. We will first verify your identity to ensure the request is coming from the legitimate data subject, and we will respond to your request without undue delay, no later than 30 calendar days after receiving your valid, verified request. In rare cases of complex requests, we may extend the response period by a maximum of two months, and we will notify you of this extension and the reasons for the delay within the initial 30-day window.

9. Data Security Measures

We take the security of your personal data extremely seriously, and we have implemented a comprehensive set of technical, organizational, and physical security safeguards to protect your information against unauthorized access, accidental loss, destruction, alteration, misuse, or unlawful disclosure:

  • All data transmission between your browser and our www.rakotondrasoa.com website is protected by end-to-end 256-bit SSL/TLS encryption, ensuring that no third party can intercept your personal information during the checkout process or when you are logged into your user account.
  • Our core server infrastructure is hosted in ISO 27001 certified secure data centers located within the EEA, with 24/7 physical access controls, fire suppression systems, redundant power supplies, and continuous network security monitoring.
  • Access to your personal data within our company is strictly limited to a small number of authorized staff members who require access to process your orders, deliver customer support, or carry out necessary operational tasks, and all access activities are logged and audited on a regular basis.
  • We conduct regular vulnerability scans, security audits, and staff data protection training to ensure that all our team members follow the strictest data handling protocols aligned with French and EU privacy regulations.
  • We have a documented data breach response plan in place. In the unlikely event that a personal data breach poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.

While we go to great lengths to protect your personal information, no data transmission or internet storage system can be guaranteed to be 100% invulnerable. If you discover any unauthorized activity related to your account on our website, please contact us immediately at pulsef@rakotondrasoa.com so we can take immediate remedial action.

10. Protection of Minors

Our RAKOTONDRASOA ANDRY home fragrance website is intended for use by adults aged 18 years and older. We do not knowingly collect personal information from children under the age of 16. If you are a parent or legal guardian and you discover that your child has provided us with their personal data without your consent, please contact us immediately. We will promptly delete all of that minor’s personal information from our servers, in full compliance with applicable data protection rules for children.

11. Links to Third-Party Websites

Our website may contain hyperlinks to external third-party websites, such as links to our payment processors, social media pages, or recommended complementary lifestyle content. Please note that once you click these links and navigate away from www.rakotondrasoa.com, this Privacy Policy no longer applies. We do not have any control over the data handling practices, privacy policies, or content of those external third-party sites. We strongly recommend that you review the full privacy policy of every website you visit after leaving our platform, to understand how they will collect and process your personal information. RAKOTONDRASOA ANDRY assumes no responsibility or liability for the practices of these unaffiliated third-party platforms.

12. Updates to This Privacy Policy

We reserve the right to revise and update this Privacy Policy periodically to reflect changes in our business operations, new regulatory requirements, or updates to our website features. When we make material changes to this policy, we will update the “Effective Date” at the top of this page, and post a clear notification on the homepage of www.rakotondrasoa.com, as well as send a notification to all registered users via their saved email address. Any revised version of the policy will take effect 15 calendar days after it is published on our website. We encourage you to review this Privacy Policy on a regular basis to stay informed about how we protect your personal information. Your continued use of our website and placement of orders after the revised policy takes effect will constitute your acknowledgement and agreement to the updated terms of the policy.

13. Contact Information for Privacy Inquiries

If you have any questions, comments, concerns, or requests related to this Privacy Policy, our personal data handling practices, or wish to exercise any of your data subject rights outlined above, you can reach our dedicated data protection team via any of the following channels:

  • Email: pulsef@rakotondrasoa.com
  • Telephone: +33 3 2057 0603
  • Postal Address: RAKOTONDRASOA ANDRY, 62 Rue des Stations, 59800 Lille, France