Privacy policy

ELIXIR MIEL PRIVACY POLICY

Document updated on 12 August 2025

 

Elixir Miel, a simplified joint stock company with a share capital of €1,000 (‘Elixir Miel S.A.S.’, ‘our’, “we” and ‘us’) and our partners respect your privacy.

We kindly ask you to read this privacy policy carefully to understand how your personal data is collected, processed and stored when you use the Elixir Miel website, accessible via the URL https://www.elixirmiel.com.

All personal data collected on this website is processed under the responsibility of Elixir Miel S.A.S., registered in the Lyon Trade and Companies Register under number 980558159.

Under the regulations applicable to personal data, Elixir Miel S.A.S. is therefore the data controller.

This Privacy Policy describes:

1. How Elixir Miel S.A.S. uses your personal data
2. How Elixir Miel S.A.S. shares your personal data
3. How Elixir Miel S.A.S. protects your personal data
4. Where Elixir Miel S.A.S. hosts and transfers your personal data
5. How you can exercise your rights regarding your personal data
6. Updates to the Privacy Policy
7. How to contact us

 

__________

 

1. How Elixir Miel S.A.S. uses your personal data

Elixir Miel S.A.S. may use your personal data for the following purposes:

• To create your customer account on this website

• To manage orders for products and/or services

• To publish and manage reviews left on products and/or services ordered on this website

• To respond to your contact request made via our website

Most of the processing operations listed above are necessary for the performance of the contract entered into with Elixir Miel S.A.S. when you use our website to order the products and/or services available for sale on the site.

 

2. How Elixir Miel S.A.S. shares your personal data

3. How Elixir Miel S.A.S. protects your personal data

Elixir Miel S.A.S. places great importance on the security of your personal data and has adopted industry standard practices to protect your personal data and prevent unauthorised access, disclosure, use, modification, damage or loss of this information.

We have also taken the necessary precautions to ensure that our hosting provider preserves the security and confidentiality of the data, in particular to prevent it from being distorted, damaged or communicated to unauthorised persons.

Elixir Miel S.A.S. also adopts the following organisational measures:

(1) We take reasonable and feasible measures to ensure that the personal data collected is minimal and relevant to the purposes for which it is processed.

(2) We retain your personal data for the period strictly necessary for the purpose of the processing, unless the retention of your data is required or permitted by law. For example, we retain data related to the fulfilment of your orders for the period required by law for the retention of accounting records, i.e. a maximum of 10 years from the financial year concerned.

(3) We deploy access control mechanisms to ensure that only authorised personnel can access your personal data.

In the event of a personal data breach, Elixir Miel S.A.S. will comply with the legal and regulatory requirements applicable to the notification of personal data breaches to the competent supervisory authorities and/or data subjects.

4. Where Elixir Miel S.A.S. stores and transfers your personal data

Your personal data will be hosted within the hosting infrastructure of our host, Shopify, located in the United States.

Some third parties to whom we disclose your personal data are located in countries outside the European Union, notably Canada.

When products available for sale on the website are delivered by resources located in countries outside the European Union, we will be required to transfer your personal data to these countries. It may also happen that service providers access your data on our behalf in order to provide us with a specific service and are located in countries outside the European Union.

When such transfers occur, we ensure that these transfers of personal data are governed in accordance with applicable regulations in order to ensure an adequate level of data protection, either through an adequacy decision by the European Commission or through legal instruments such as data transfer agreements incorporating the European Commission's Standard Contractual Clauses.

For any enquiries regarding recipients and data transfers outside the European Union, please contact us at the addresses listed in the ‘How to contact us’ section below.

5. How you can manage your rights regarding your personal data

You have the right to access, rectify, erase, restrict, and object to the processing of your personal data, as well as the right to define guidelines regarding the fate of your data after your death and the right to the portability of your personal data.

You may contact us at any time at the addresses indicated in the ‘How to contact us’ section below in order to exercise your rights regarding personal data under the conditions set out in the applicable regulations. You must indicate which right you wish to exercise and provide all the necessary details so that we can respond to your request.

These rights are exercised under the conditions set out in the applicable regulations.

• The right of access means that you can ask us at any time to tell you whether we are processing personal data concerning you and, if so, to tell you what personal data is concerned and the characteristics of the processing operation(s) carried out.

• The right of rectification means that you can ask us to rectify your personal data when it is inaccurate. You can also request that your personal data, if incomplete, be completed to the extent that this is relevant to the purpose of the processing in question.

• The right to erasure means that you can request the erasure of your  personal data, in particular when:

• Their retention is no longer necessary for the purposes for which they were collected;
• Your personal data is processed on the basis of your consent, you wish to withdraw this consent, and there is no other legal basis that could justify the processing;
• You have objected to the processing of your personal data and you therefore wish it to be erased;
• Your personal data has been processed unlawfully;
• Your personal data must be erased in order to comply with a legal obligation under either European Union law or French law.

• The right to restriction means that you can ask us to restrict the processing of your personal data:
• When you contest the accuracy of your personal data for a period of time that allows us to verify its accuracy;
• When, following processing that has been found to be non-compliant, you prefer the restriction of processing to the complete erasure of your personal data;
• When we no longer need your personal data for the purposes of processing but you still need it for the establishment, exercise or defence of legal claims;
• When you have objected to the processing of your personal data and you wish to restrict processing for the period during which we verify whether the legitimate grounds you have invoked are justified.

Restriction of processing means that the processing of your personal data will then only involve the storage of your corresponding personal data. We will then no longer carry out any other operations on the personal data in question.

• The right to oppose means that you can object to the processing of your personal data when such processing is based on the pursuit of the legitimate interests of Elixir Miel S.A.S.. The right to object may be exercised subject to justification of a legitimate reason relating to your particular situation. We will then cease the processing in question unless there are legitimate and compelling reasons justifying its continuation in accordance with the applicable regulations.

• The right to define guidelines regarding the fate of your data after your death allows you to make known your instructions regarding the storage, erasure and communication of your personal data after your death.

• The right to portability means that you can ask us, under the conditions set out in the applicable regulations, to receive your personal data in a structured, commonly used and machine-readable format, and to send it to you, or to ask us to send it directly to a third party of your choice where this is legally and technically possible.

When we process your personal data based on your consent, you have the right to withdraw your consent at any time by contacting us at the addresses listed in the ‘How to contact us’ section or by clicking on the unsubscribe link in each of our communications.

However, withdrawing your consent does not affect the validity of the processing carried out prior to such withdrawal.

6. Updates to this privacy policy

Elixir Miel S.A.S. reserves the right to modify or update this privacy policy, in whole or in part, at any time, due to changes in applicable regulations regarding personal data protection or data processing.

Any substantial changes to the privacy policy will be notified to you by email if you have provided us with a valid email address and will be published on the website. We recommend that you review this privacy policy regularly to ensure that you are fully aware of our commitments regarding the security and protection of your personal data.

7. How to contact us

If you have any questions, comments or suggestions, please contact us by visiting the contact us page or by sending them to contact@elixirmiel.com.

Or by post to Elixir Miel, 129 rue Servient, 69326 Lyon Cedex 03, France.

If you are not satisfied with the response provided by Elixir Miel S.A.S. to a request to exercise your rights in accordance with Article V above, or if you wish to report a breach of applicable data protection regulations, you have the right to lodge a complaint with the CNIL by post (CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07) or on its website (www.cnil.fr), or to the data protection authority in the country in which you usually reside or work.