We have the pleasure and duty to provide the following information about the processing of personal data, in accordance with the Privacy Code and Regulation.

1. Type of personal data collected

The following personal data is collected and processed by Madame Louise. and the companies controlled by Madame Public Company Limited, as identified below (hereinafter referred to as "Madame Group Companies"), for the purposes outlined below:

a) personal and identifying data like your name, surname, date of birth, proof of identity, payment information in the event of purchases made online;

b) data from interactions including information collected while participating in events or making online purchases, when you sign up to loyalty programmes (e.g. birthday, age group, dates of family events, profession, hobbies, purchases, use of particular social media or social media ID, phone number, email address, photograph, nationality, gender, language, favourite product categories, details of products purchased, sizes, prices, discounts, statistical spending levels, abandoned shopping carts, ways in which services are used), preferences and interests disclosed by the user over the course of your interactions (including preferences, lifestyle or basic information about your family circle), responses to contact activities, data which may also include health-related information regarding potential side effects of our skincare products;

c) data collected when browsing or using media applications, including information about the behaviour of the user recorded with cookies or similar technology, as described in more detail in the Cookie Policy，or data contained in your “shopping cart”;

2. Processing purpose

Madame Louise processes the data provided by you for the following purposes:

• Contractual Purposes, namely (i) managing the sale of its products and providing sale and after-sale services (including, for example, fraud prevention, returns, product warranties and customer support); (ii) in the context of Madame Louise online activities, creating and maintaining your customer account and providing the services offered via its website, including clienteling services (which call for a personalised service from your trusted advisor), as well as the Madame Louise newsletter if subscribed; (iii) checking your information requests;

• Fulfilment of Legal Obligations to which Madame Louise is subject, including the requirements outlined by "Know Your Customer";

• Marketing and Profiling Purposes, i.e. sending you—with your prior consent—marketing communications regarding Madame Louise products, services and exclusive activities via electronic means (such as email, SMS, MMS, mobile, social media and chats) or in paper format (e.g. traditional post); offers for personalised sales services (including but not limited to personal shopping services, free assistance services and courtesy services); satisfaction questionnaires for products and/or services offered.

• Pursuit of Legitimate Interest, i.e. using data regarding amounts spent, product categories, store where the purchase was made, date of birth, status and number of family members to provide a service that is more in line with your requirements and send you marketing communications that are of most interest to you.

3. Provision of data

The provision of personal data in relation to the purposes outlined in paragraph 1, sub-section a) is obligatory and if it is not provided, Madame Louise Companies cannot proceed with the contractual services requested. For the purposes detailed in paragraph 1 sub-sections b) and c), provision of data is free and optional and the use of such data is subject to the consent of the interested party.

4. Conditions applicable to the consent of minors

Processing the personal data of minors is lawful provided they are at least 16 years of age. If a minor is younger than 16 years of age, processing this data is only lawful if, and where, consent is provided or authorised by the holder of parental responsibility. We do not knowingly collect personally identifiable information from minors without permission from a parent or guardian, unless permitted by law.

5. Processing methods

Personal data will be processed using IT-based tools and/or processed manually for the length of time needed to achieve the purpose for which it was collected. In particular, personal data collected for the purposes outlined in paragraph 1, sub-sections b) and c) will also be processed with the help of automated mechanisms, according to procedures and reasoning strictly related to the purposes specified above.

6. Scope of communication, transfers abroad and data publication

We do not disclose or share the personal data we collect, except with Madame Louise Companies., its parent companies, subsidiary companies, associate companies, companies under the same control, or companies that are part of the same group that Madame Louise.

The user's personal data may also be processed by companies performing services on our behalf (including companies that provide shipping/delivery services for catalogues and/or products; companies that deliver newsletters, marketing material and promotional communications; companies that provide customer care services; companies that carry out analyses and market research; companies that maintain IT systems; companies that manage web session replay tools to ensure the best end-user experience).

Data collected may also be processed by third parties acting as independent data controllers, for example:
• Banks or other payment management companies through credit card and tax-free services; 
• Individuals, companies, associations or professional studios that provide assistance or consultancy services (lawyers, accountants, auditors);
• When required to do so in order to comply with applicable law, to respond to a court order or—more generally—any request from a competent authority;
• Companies that assist in performing KYC procedures;

8. Data retention period

The user's personal data will not be stored in a way that allows them to be identified and for no longer than is deemed reasonably necessary by Madame Louise for achieving the purposes for which it was collected or processed, or as established by current legislation on data retention.