Last updated: 23 June 2020

The purpose of this privacy policy is to formalize our commitment to respecting the privacy of users of the Tarayi Paris website (https://tarayi.com) (also referred to as "Site", "our", "we", "us") operated by Ameya Group (registered in France).

We take the protection of your personal data very seriously.
Personal data means any information relating to an identified or identifiable natural person. We collect and process personal data in the context of the provision of our services or the communication about these services exclusively, in strict accordance with the General Data Protection Regulations 2016/679 of April 27, 2016 ("GDPR") and under the conditions set out below.

We only collect personal data that is adequate, relevant and limited to what is necessary with regard to the purposes for which it is processed. Thus, you will never be asked to fill in personal data considered to be “sensitive”, such as your racial or ethnic origins, your political, philosophical or religious opinions.

By continuing to browse this Site, you authorize us to collect and process your personal data in accordance with this privacy policy. If you do not accept the terms of this policy, please refrain from using the Site and it's services.

1. In what cases do we collect your personal data and what data is collected?
We may collect and store your personal data when you browse the Site, create an account, create an order, and contact us.
We use your personal data to enable the implementation and management of the Site, our services, and to respond to your specific requests. We also use your personal data for the purpose of operating and improving our services, the Site, and our approach.
If you have opted in to receive emails and messages from us, you will then receive emails or messages relating to our products and promotions.

1.1 Navigation on the Site
Connection data. Each time you connect to our Site, we collect personal data such as, your IP address and the MAC address of your computer, the date and time of connection, as well as information on the browser you are using.
We also collect information to identify how you access the Site, which pages are viewed and for how long. In this context, we use Cookies as specified in paragraph 6 below.

1.2 Creation of an account
Creation of an account is not mandatory to use our services, however it can provide many benefits like faster checkout, keeping track your past orders, etc. If you wish to create an account, you will be asked to enter a certain number of personal data such as your first and last names and your email address.

1.3 Payment
We use Stripe to facilitate payments processing on the Site. To this end, you agree that we may collect and share your personal data in order to allow the proper functioning of payment processing services provided by Stripe. We do not store your payment details.
To know more about Stripe's privacy policy, what data they collect and how they process it, please see Stripe's privacy policy here.

1.4 Subscription to our Newsletter
You can give your prior consent to the receipt of our newsletters concerning news, new products, services and promotions, as part of the services.
This consent can be provided during account creation, when placing an order, or by entering your email address in any of the places provided for this purpose on the Site.
In any event, you have the right to withdraw your consent to the receipt of such newsletters at any time and free of charge by clicking the 'unsubscribe' link at the bottom of the newsletters. You could also write to us at service@tarayi.com requesting us to stop sending you specific emails or messages. 

1.5 Contacts
In order to respond to requests you may make to our customer service via the contact us form on the website, chat feature on the website, email, or phone, we may use your first and last names, email address, and telephone number in order to serve you better.

2. How do we protect your personal data?
We have implemented technical and organizational security measures to guarantee the security, integrity and confidentiality of all your personal data, in order to prevent it from being distorted, damaged or that third parties have access. We ensure an appropriate level of security, taking into account the state of knowledge, the costs of implementation and the nature, scope, context and purposes of the processing as well as the risks and their probability.
However, it is specified that no security measure being infallible, we are not able to guarantee absolute security to your personal data.
In addition, it is your responsibility to ensure the confidentiality of the password allowing you to access your account. Do not share this information with anyone. If you share your computer, be sure to sign out before leaving a service.

3. In what cases do we share your personal data?
3.1 Sharing your personal data with third-party companies (sub-processors of the Site)
When you browse the Site, your personal data may be transmitted to external service providers (sub-processors). These third parties provide service on our behalf in order to allow the proper functioning of various services.
Since many of our sub-processors are multinational organisation, your personal data may be transferred to countries outside the EEA (such as Canada and USA) for further processing.
Data transferred to Canada is protected under Canadian law, which the European Commission has found will adequately protect your personal information. When data is transferred to the United States, our sub-processors do so under the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield programs, which sets out standards for how personal information should be processed in the United States for residents of the EEA.

Below is a list of sub-processors the Site uses and which may have access to your personal data. You can click on the name of the entity to view their privacy policy.

Shopify International Ltd. (Ireland)
Website hosting, software to build and maintain the platform and it's various services, automated transactional emails

Stripe Payments Europe Limited (Ireland)
Payment portal to make payments on the Site

Google Ireland Limited (Ireland)
Gsuite - email, file storage, etc.

Google LLC (USA)
Google Analytics - data tracking and analytics
Google ads - retargeting

Facebook Ireland Ltd. (Ireland)
Facebook and Instagram ads - retargeting

Cloudflare (USA)
Content distribution, security and DNS services for web traffic transmitted to and from the Site

Tree-Nation ASBL (Belgium)
Planting trees and offering them to the customer for every order

Chronopost (France)
Delivery of orders to customers

La Poste (France)
Delivery of orders to customers

AfterShip Ltd. (USA)
Delivery tracking services for current and past orders

Omnisend (UK)
Promotional and other emails

3.2 Sharing with the authorities
We may be required to disclose your personal data to the administrative or judicial authorities when their disclosure is necessary for the identification, arrest or prosecution of any individual likely to prejudice our rights, any other user or a third. Finally, we may be legally bound to disclose your personal data and cannot in this case oppose it.

4. How long do we keep your personal data?
We will only keep your personal data for the time of your registration on the Site in order to ensure your identification during your connection to your account and to allow the provision of the services.
Thus, if you unsubscribe from the Site, your personal data will be erased and only kept in the form of an archive for the purpose of establishing proof of a right or a contract.
In any event, we will keep your personal data for a period not exceeding that necessary with regard to the purposes for which they are processed in accordance with the uses set out in this privacy policy and in compliance with laws and regulations.

5. Cookies: how do we use them?
5.1 What is a cookie?
A cookie is a text file which is stored on your terminal (computer, smartphone, tablet or other devices) when you browse the internet. In particular, a cookie file allows its issuer (often a website), during its period of validity, to recognize the terminal concerned each time this terminal accesses digital content containing cookies from the same issuer.
How long a cookie is stored on your terminal can vary depending on the type of cookie.
You have full control to either accept or reject all cookies, cookies from certain sites, or at any time delete the cookies stored on your terminal. Please see section 5.3 on how to do this.

5.2 What are the cookies used on our Site for?
The cookies we issue allow us to do the following:
- Some cookies are functional and will allow us to facilitate your browsing such as saving the content of your shopping cart, memorizing log-in, etc.
- Some cookies collect information on your browsing behaviour such as pages visited, times of website visits. Such information will provide us a better understanding of the products and services you would prefer, and hence allow us to improve the Site and it's services. This also enabled us to offer you more personalized communications and/or more personalized content on the Site.
- Some cookies are made available by select third-party service providers (for analytical and advertising purposes) enabling them to collect browsing information on your terminals, including but not limited to measuring the efficiency of our advertising campaigns on the third-party websites. Third-party cookies are subject to said third party privacy policies.
- Some cookies may be generated by social networks when browsing the Site, in particular through the sharing buttons which collect personal data. These are subject to privacy policies of the individual social networks.

Please note that we do not control third-party cookies.

During your first visit to the Site, a cookie banner will appear on the home page. Continued navigation on another page of the site or selection of an element of the Site (image, text, link, etc.) materializes your acceptance of the deposit of targeted cookies on your computer.

5.3 How can you control the cookies used?
You can configure your browser software at any time so that cookies are saved on your terminal or, on the contrary, that they are rejected (either systematically or according to their issuer). You can also configure your browser software so that the acceptance or rejection of cookies is promptly offered to you, before a cookie can be saved in your terminal.

Please note: any configuration is likely to modify your browsing on the internet and your conditions of access to certain services requiring the use of cookies. We decline all responsibility for the consequences linked to the degraded functioning of our services resulting from the impossibility of saving or consulting the cookies necessary for their functioning.

In order to configure your choice of cookie management on your browser software, please see here instructions for some popular browsers - Chrome, Firefox, Safari, Internet Explorer. For other browsers please refer to the help section in the browser menu on how to modify cookie preferences.
For more information on how to limit the use of cookies, visit: https://optout.networkadvertising.org/?c=1

6. What are your rights?
You have rights to your personal data that you have shared with us via the Site. In accordance with the regulations on the protection of personal data, in particular Articles 15 to 22 of the GDPR, and after proving your identity, you have the right to request access to personal data concerning you, the modification or deletion thereof.
You can contact us at service@tarayi.com in order to exercise your rights.
In addition, you can unsubscribe from our newsletter at any time by clicking on the link which allows unsubscribing at the bottom of each email.

7. Can we modify the privacy policy?
We reserve the right to modify the privacy policy at any time. It is therefore recommended that you consult it regularly. If there are any changes, we will post those changes on this page and in places we deem appropriate based on the subject matter and the extent of the changes.
Your use of the Site after any modification means that you accept these modifications. If you do not accept certain changes to this policy, you must stop using the Site.

8. Data Protection Officer and contact
The designated data protection officer for the website can be contacted at service@tarayi.com.

9. The National Commission for Information Technology and Liberties ("CNIL")
We remind you that you can contact the CNIL directly on the CNIL website or by post to the following address: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX 07.