PRIVACY POLICY

Last updated: July 29, 2026


ARTICLE 1 — Data Controller

The data controller for your personal data collected on the iluvmi.com website (hereinafter the "Site") is:

ILUVMI FRANCE

Simplified joint-stock company (Single-member company) with a capital of 1,000.00 euros

RCS Montpellier no. 103 639 886

European ID (EUID): FR3405.103639886

Registered office: Parc de Bellegarde, 1 Chemin de Borie, 34170 Castelnau-le-Lez, France

Email: hello@iluvmi.com

ILUVMI FRANCE, as the data controller, undertakes to comply with the provisions of Regulation (EU) No 2016/679 of 27 April 2016 on the protection of personal data (hereinafter the "GDPR" or the "Applicable Regulation").

ARTICLE 2 — Data We Collect

"Personal data" means any information that could reasonably identify you, either directly (such as your name) or indirectly (for example, using a unique customer number or order tracking).

As part of your use of the Site and our commercial relationship, ILUVMI FRANCE may collect the following categories of Personal Data:

Identification and contact data — Name, surname, postal address, billing address, delivery address, telephone number, email address.

Account data — Login credentials, password, preferences related to your subscription and orders.

Order data — Products viewed, added to cart or purchased, order and subscription history, returns.

Payment data — Payment method used, transaction status. Full bank details are never stored by ILUVMI FRANCE: they are processed exclusively by our secure payment provider.

Navigation data — IP address, browser type, device used, pages viewed, session duration, identifiers collected via cookies and similar technologies.

Data from your communications with us — Correspondence with our customer service, responses to satisfaction surveys.

If, in the context of using the Site, you communicate personal data that you have directly or indirectly collected from a person, it is your responsibility to ensure that this person has authorized you to share their personal data with ILUVMI FRANCE and that they are duly informed of this Privacy Policy.

ARTICLE 3 — Where Your Data Comes From

Your personal data is collected:

  • Directly from you, when creating your account, placing an order, subscribing to a subscription, contacting our customer service, or signing up for our communications.

  • Via your navigation on the Site (cookies and similar technologies).

  • From our service providers, who process data on our behalf: Site hosting, payment, logistics and delivery, marketing tools.

ARTICLE 4 — Why We Use Your Data

Depending on the context, we collect and use your personal data to:

  • Provide ILUVMI FRANCE products and services, including processing and tracking your orders, managing your subscriptions, managing your customer account, and processing your payments;
  • For transactional communications and interactions with ILUVMI FRANCE, and to provide customer support;
  • Provide a personalized customer experience: With your free, specific, informed, and unambiguous consent (when required), we use your personal data to send you personalized communications based on your interests (newsletters, invitations, social media campaigns, information on the Ambassador program, and satisfaction surveys). In these circumstances, you have the right to object, i.e., the right to withdraw your consent by unsubscribing or contacting us directly (see Article 12 below "Contact Us");
  • Measure audience and improve the Site;
  • Prevent fraud and ensure Site security;
  • Ensure compliance with our legal and accounting obligations.

If you wish to learn more about the categories of processing activities for which we collect and use your information, as well as the indicative legal bases on which we rely for such processing, please refer to the dedicated table below.

Indicative list of processing activities – ILUVMI FRANCE

Data Processing

Details of Personal Data

Purpose of Processing

Indicative Legal Basis

Order Management

Identification data: name, surname, phone number, email address, postal address, billing and delivery address, and purchase history.

To ensure the processing, validation, and tracking of product orders and subscriptions.

Contract performance.

Customer Account Management

Customer account data: login credentials, password, purchase history, and account preferences.

To allow the creation and administration of the user’s personal space.

Contract performance.

Payment Flow

Payment data: payment method used and transaction status (processed by a third-party provider).

To ensure secure receipt of payments and transaction management.

Contract performance.

Support and After-Sales Service

Contact details, history of exchanges with customer service.

To manage transactional exchanges (confirmation) and customer assistance requests.

Contract performance.

Customer Satisfaction Management

Survey responses.

To manage customer satisfaction (collection of customer reviews on products and customer service performance).

Legitimate interest of ILUVMI FRANCE.

Commercial Prospecting

Name, surname, email address or phone number, and marketing preferences.

To send promotional offers and news via email or SMS.

Consent.

Targeted Advertising

Navigation data, data collected via advertising and preference cookies.

To display personalized advertisements and perform retargeting operations.

Consent.

Site Improvement

Browsing data: IP address, device type, pages viewed and session duration via analytical cookies.

Analyze traffic to optimize the Site's technical performance and ergonomics.

Consent.

Security and Fraud

Connection data (IP, logs), browsing data and payment data.

Prevent fraudulent behavior and guarantee the integrity of the Website.

Legitimate interest ILUVMI FRANCE.

Processing of legal requests from customers and/or requests regarding personal data protection.

Identification and customer account management data, comments and information related to the request.

Ensure that complaints and legal requests are handled, including requests related to personal data protection.

Legal obligation.

Legal Compliance

Billing data (first name, last name, address) and proof of identity if required.

Fulfill accounting, tax obligations and any legal requisitions.

Legal obligation.

 

ARTICLE 5 — With whom we share your data

Your personal data may be communicated, strictly within the limits of their respective missions, to the following categories of recipients:

  • Our host: Site hosting: Shopify

  • Our development agency and online store manager: Goons.

  • Our payment provider: secure transaction processing: Shopify.

  • Our logistics center and carriers: preparation and delivery of your orders in France, the European Union, the United Kingdom and Switzerland: Boost.

  • Our marketing and advertising providers: advertising platforms, audience measurement tools, email marketing solutions, loyalty program, customer review platform — within the limits of your consent or the execution of your order (for reviews in particular). The precise and updated list of these tools is available via our cookie management tool, accessible from the "Cookie Preferences" link at the bottom of the page: Shopify, Klaviyo and Joy.

  • Our technical providers: maintenance, IT support: Goons. 

  • Competent judicial or administrative authorities, authorized by law, requesting the communication of this information in accordance with current legislative provisions. 

ILUVMI FRANCE never sells your personal data to third parties.

ARTICLE 6 — Data retention period

In accordance with the principle of proportionality, ILUVMI FRANCE retains your personal data only for the period strictly necessary to achieve the purposes for which it was collected, or to fulfill its legal obligations. For example, the retention periods below apply to the different categories of data collected and processed:  

  • Billing data and accounting documents : up to 10 years from the date of your last purchase, for only the personal data required for billing and accounting (e.g., first name, last name, transaction);
  • Active customer account data: for the entire duration of our business relationship (as long as your account remains active);
  • Inactive customer account data: up to 3 years after the last contact or your last interaction with us;
  • Prospect data (without purchase) : up to 3 years after the last contact for prospect data without purchase for marketing purposes. 

When we no longer need to use your personal data, it is deleted from our systems and records or anonymized so that you can no longer be identified.

ARTICLE 7 — Your rights

In accordance with the GDPR and the Data Protection Act, you have the following rights regarding your personal data:

  • Right of access: obtain a copy of the data we hold about you.
  • Right of rectification: correct inaccurate, outdated or incomplete data.
  • Right to erasure: request the deletion of your data. This right is not absolute, as we may have legal or legitimate grounds to retain your personal data. 
  • Right to data portability : receive your data in a structured and reusable format. 
  • Right to object: object to processing based on legitimate interest, particularly for commercial prospecting purposes.
  • Right to restriction of processing: request the temporary suspension of processing.
  • Right to withdraw consent: at any time, for any processing based on your consent, without affecting the lawfulness of processing already carried out.

You are also authorized to define your guidelines and directives regarding the protection of your personal data in the event of death or external circumstances.
To exercise these rights, contact us at hello@iluvmi.com. We respond to all requests within a maximum of one month from their receipt. In certain cases, related to the complexity of the request or the number of requests, this period may be extended by two months.
In case of an unsatisfactory response, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr

ARTICLE 8 — Data transfers outside the European Union

Some of our service providers may be located outside the European Union. In this case, ILUVMI FRANCE takes measures to ensure an adequate level of protection of your data regardless of their location, for example by using data transfer methods approved by the European Commission (in particular adequacy decisions or standard contractual clauses of the European Commission). We also require our third-party partners to fulfill applicable data transfer obligations regarding the personal data they receive on our behalf. 

ARTICLE 9 — Security of your data

ILUVMI FRANCE implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or disclosure. Payments are processed via secure connections (SSL/TLS). No complete banking data is stored by ILUVMI FRANCE.
As no data transmission over the internet can be guaranteed to be completely secure, we recommend that you never communicate sensitive information via unsecured channels (social networks, unencrypted messaging, etc.).

ARTICLE 10 — Protection of minors

The Site is exclusively intended for adult users. Even if some of our products (Immunity Kids Gummies, Calm Kids Gummies) are intended for use by children, ILUVMI FRANCE does not collect any personal data concerning minors: only the data of the parent or legal guardian who creates the account and places the order are processed, in accordance with Article 2 of this policy.
If you notice that a minor has nevertheless provided their personal data on the Site without your authorization, contact us at hello@iluvmi.com to request its deletion.

ARTICLE 11 — Modification of this policy

This privacy policy may be updated at any time to reflect legal, regulatory or operational changes. The date of the last update is at the top of this document. In case of substantial modification, you will be informed by e-mail or by a visible notice on the Site.

ARTICLE 12 — Contact us

For any questions related to this policy, or to exercise your rights:
ILUVMI FRANCE.
Parc de Bellegarde, 1 Chemin de Borie, 34170 Castelnau-le-Lez, France
hello@iluvmi.com

 

NOTICE ON COOKIE MANAGEMENT

This notice (hereinafter the "Cookie Management Notice") provides certain information relating to the use of cookies by the Site. It aims to inform you about the origin and use of browsing information processed during your navigation on the Site and about your rights.

What is a cookie?
A cookie is a text file that may be stored on your device (computer, tablet, smartphone, etc.) when you visit a website, read an email, install or use software or a mobile application. 
This text file is a cookie. It allows its issuer, during its validity or registration period, to identify your device during your next visits. 
Some cookies are essential for the use of the Site, others allow to optimize and personalize the displayed content.

What is a tracking pixel?
The term tracking pixel refers to a very small transparent image, usually 1x1 pixel in size, allowing to track the behavior of a recipient when receiving and viewing an email.
ILUVMI FRANCE integrates tracking pixels in its newsletters, these trackers are used only if you have given your consent when subscribing to the newsletter or when creating your account. You can withdraw this consent at any time by clicking on the link provided for this purpose at the bottom of each email sent by ILUVMI FRANCE. The withdrawal of consent results in the cessation of sending the newsletter.

Who are the cookie issuers on our Site?
Cookies that may be placed on your device when you visit pages of the Site are issued by ILUVMI FRANCE and/or third parties. Only the issuer of a cookie is likely to read or modify the information contained therein. 
Cookies placed by ILUVMI FRANCE are mainly related to the operation of the Site.
Third-party cookies may be placed by ILUMVI FRANCE's partners, whose data protection policy you can consult to set cookie parameters. 

What are the cookies issued on the Site used for? 
Subject to your choices, various cookies may be installed on your device for the purposes described below:

Essential cookies (do not require your consent)
"Essential" cookies are technical cookies that are strictly necessary for the operation of the Site and allow you to navigate the pages of the Site, access the various products and services we offer. These include, for example, cookies that remember your session identifiers, your shopping cart or the information you have entered in a form, or cookies that adapt the presentation of the Site to your preferences (language used, display resolution). Cookies strictly necessary for the proper functioning of the Site will always be active on your device to enable your navigation on the Site.

Non-essential cookies (subject to your consent)
Targeting/advertising cookies
If you accept them, targeting/advertising cookies allow us to display advertisements on the web pages you visit that are adapted and customized to your profile and interests on third-party websites with advertising spaces. To this end, we may share your browsing data with our partners, including social networks. These advertisements will be offered to you based on, for example, your browsing history, your purchases, or your location data.

Performance cookies
These cookies allow us to produce aggregated and anonymous statistics related to the traffic on our Site (for example, the number of visits, pages viewed, time spent on the Site, the type of device used...). These cookies help improve the performance, features, and services offered to you.

Preference cookies
These cookies allow us to record your cookie choices and save your preferences to make your navigation on the Site faster and more personalized.

Tracking pixels
In its newsletters, the tracking pixels used by ILUVMI FRANCE allow us to know if you open our emails, at what time you do so, and from what device, in order to measure the deliverability and performance of our emails.
The precise and up-to-date list of tools used for each category is available via [our cookie management tool — name to be specified], accessible from the "Cookie preferences" link at the bottom of the page.

How long are cookies stored?
Essential cookies placed on your device and exempt from your consent are valid for a maximum of 13 months; this duration is not automatically extended during new visits to the Site.
Non-essential cookies placed on your device and requiring your consent are valid for a maximum of 6 months. After this period, your consent will need to be reobtained.
Upon expiration of these periods, the personal data collected relating to the placement of cookies will be deleted.

How to manage cookies placed on your device?
You have the following different ways to manage the implementation of cookies.
Shopify's cookie management tool
During your first visit to the Site, a cookie management banner allows you to accept, refuse, or set non-essential cookies. You can change your choices at any time via the cookie preference management link at the bottom of the page.

Your browser settings
You can independently disable cookies by adjusting your browser settings. However, by disabling certain cookies, you may not be able to use all the features of the Site.
For managing cookies and your choices, the configuration of each browser is different and is described in your browser's "Help" menu.