Privacy Policy

Last updated: 13 February 2023

A word from the Director, Val of Kumiko Matcha:

We are 100% committed to providing you with an excellent customer experience.

If there is anything that did not go well with your order, you can reach us at val@kumikomatcha.fr or at 02 14 00 76 27.

-----------

Kumiko Matcha's personal data protection principles (VALICOM & DECO)

Introduction

On this page, we present the principles by which C/O VALICOM & DECO Kumiko Matcha collects different types of data about its customers, as well as our commitments regarding the security and data protection policy of C/O VALICOM & DECO Kumiko Matcha. 

Definitions

In order to avoid any imprecise interpretation, here are a few elements to help understand the terms used:

  • Personal data: any information relating to an identified or identifiable natural person. A natural person who can be identified, directly or indirectly, is deemed to be "an identifiable natural person".
  • Processing: any operation or set of operations performed, whether or not by automated means, and applied to data or sets of personal data (collection, recording, transmission, storage, retention, extraction, consultation, use, interconnection, segmentation, etc.).

Data controller

All processing of the personal information communicated to C/O VALICOM & DECO Kumiko Matcha is carried out under the responsibility of the company C/O VALICOM & DECO Kumiko Matcha, 38 Rue le Laboureur, 95160, Montmorency, SIRET No. 794 117 051 00019.

For any questions about the processing of personal data, or any request for access, retrieval, portability, rectification or erasure of your personal data, we invite you to contact our data processing manager and data protection representative Mr. NGUYEN VAN NHUT Valentin at the following address: val@kumikomatcha.fr

Request to modify your personal data 

  • As a user of the services of the company Kumiko Matcha, you can modify the personal data concerning you from your customer account
  • For any other request for access, retrieval, portability, rectification or erasure of your personal data, we invite you to contact our data processing manager and data protection representative Mr. NGUYEN VAN NHUT Valentin at the following address: val@kumikomatcha.fr

How do we collect data about you?

The collection of your personal data (such as your email address) is most often based on your customer or prospect relationship, or another relevant relationship with us. For example, we collect data when you take actions on our services, sign up for our website's newsletter, use our website's services or provide us with other information.

When you use Kumiko Matcha's network and communication services, for example by sending an email, identification data is stored in our systems for the use of the services. When you visit the website or load pages from it, you leave us various types of anonymous browsing data, such as your IP address and your browsing history. The operation of the services is based on the use of cookies. We may collect data based on your consent. 

What data do we collect?

When you make a purchase from our store, as part of our buying and selling process, we collect the personal information you provide us with, such as your name, address and email address. When you browse our store, we also automatically receive your computer's Internet protocol (IP) address, which allows us to obtain more details about the browser and operating system you are using.

We store what can be connected to you. The data created and collected during communication includes information about the communicating parties, the time of the connection, routing information, the data transfer protocol, the format of the connection and location information. When browsing the Internet, "measurement data" is collected using cookies. This data cannot be associated with a person. The customer information we collect helps us personalize and continually improve your experience on our site. We use this information to process orders, deliver products and services, process payments and communicate with you about your orders, products, services and weekly articles, keep and update our records, provide you with content such as blog posts and customer reviews, and recommend products and services likely to be of interest to you. We also use this information to improve our stores and websites, prevent or detect fraud or abuse on our website and allow third parties to provide technical, logistical or other functions on our behalf.

List of the types of information we collect 

Information you provide us with

We collect and record all the information you provide us with via our website or by other means. You may choose not to provide us with certain information, but this decision may nevertheless limit the use of our services. We use the information you provide us with, in particular in order to respond to your requests, improve our services and communicate with you.

Automatically collected information

Each time you come into contact with us, we receive and record certain types of information. Like many other websites, we use "cookies" in particular and obtain certain types of information when your browser accesses the Kumiko Matcha website.

Email-related information

To optimize the usefulness and interest of our emails, we frequently receive confirmation of sent emails that you have opened. If you do not wish to receive emails from us, simply unsubscribe at the bottom of the email. With your permission, we may send you emails about our store, new products and other updates. Kumiko Matcha sends customer messages about its products and services to its customers via the consent available in the newsletter sign-up or after ordering on the site. You have the right to prohibit Kumiko Matcha from sending you messages. You can prohibit marketing by following the instructions included in the messages.

How do we manage your information?

Please note that Kumiko Matcha and its subcontractors act under an obligation of secrecy when processing data about you. We maintain the confidentiality of data about you and ensure that it is only used for predefined purposes.

Your data is processed for the purpose of producing and delivering the communication services and other content, developing the services, invoicing, providing you with the best and most complete services possible, and informing you of our services.

We also use your data for customer communication, such as sending information about our services and for direct marketing purposes.

We process the data of our potential customers for direct marketing purposes.

We strive to ensure that customer data is up to date and correct.

We delete obsolete and unnecessary data whenever possible.

We protect all data about you through personal task-based access rights and prevent third-party access to the data.

Where do we send your data? 

We only submit your data, to the extent permitted by applicable legislation and as indicated in the file description, to the authorities and other telecommunications companies.

When we use subcontractors, we will sign a security agreement with them that also covers the use of your data. We are also responsible for this kind of data handling for you.



Kumiko Matcha's data protection principles

The purpose of this data protection policy is to describe the principles and practices we follow at Kumiko Matcha to ensure the protection of privacy, the confidentiality of communication and the legal protection of our customers. Kumiko Matcha regularly updates this policy as operations or services change or expand. For this reason, we encourage you to regularly consult the latest statement. Important core values for Kumiko Matcha include the confidentiality of customer data and communication, as well as the protection of customer privacy in all the company's operations. When handling our customers' personal data, we follow French legislation, the orders and instructions of the authorities, and good data processing practices. Kumiko Matcha implements a high level of data protection. Personal data as well as location-related data is collected only for specific, predefined and legal purposes and is not processed in a manner incompatible with these purposes. We maintain physical and electronic security measures and backup procedures in connection with the collection, retention and communication of customers' personal information. 

General principles of customer data management 

The processing of personal data must always be justified for Kumiko Matcha's operations. Kumiko Matcha has defined the purpose of the collection, handling and submission of personal data in the following section. Kumiko Matcha only processes the customer data necessary for its operations, as defined in the intended use stated in the file description for the customer register. We strive not to process incorrect, incomplete or obsolete data. The processing of customer data is generally based on a relevant relationship, information received during the use or registration of a service, or your consent. We may also process your data for other reasons, for example at your request or where the law requires it. Your information may be processed within Kumiko Matcha. We encourage our customers who have created an account to regularly update their contact details. Please note that as a customer of Kumiko Matcha, you have the right to verify what data about you has been stored in our information systems, or that there is no data about you in our file. You may also refuse the use of your data in accordance with the relevant legislation. The inspection may be carried out once a year free of charge. The request to inspect the data must be made with a document signed between Kumiko Matcha and you.

Collection, retention, extraction and processing of personal data  

REGISTER OF THE SUBCONTRACTORS THAT COLLECT PERSONAL DATA TRANSMITTED VIA KUMIKO MATCHA'S SERVICES: 

Shopify :

  • Data collected: Last name; First name; Address; Phone number; Email address; direct marketing information and consent; information about the company's contact person, company name, information provided by yourself, customer classification information, order, delivery, agreement and invoicing
  • Provider information: https://www.shopify.fr
  • Provider location: Canada 
  • Pursued purpose: Website management and online product sales 
  • Is the data stored or processed outside the EU: Yes 
  • Provider GDPR charter: https://www.shopify.com.au/legal/dpa
  • Retention period: 3 years after the last activity of the person 
  • Data access: Kumiko Matcha internal services; Logistics subcontractors

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our services and products to you.

Your data is stored in Shopify's data storage system and databases, and in the general Shopify application. Your data is kept on a secure server protected by a firewall.

Klaviyo :

  • Data collected:  Email address; direct marketing information and consent
  • Provider information: https://www.klaviyo.com
  • Provider location: United States
  • Pursued purpose: Website's external communication; Newsletter
  • Is the data stored or processed outside the EU: Yes 
  • Provider GDPR charter: https://www.klaviyo.com/privacy/dpa
  • Retention period: 3 years after the person's last activity
  • Data access: Kumiko Matcha internal services

Helpscout : 

  • Data collected: Last name; First name; Phone number; Email address; Information about the person; Company name, Information provided by yourself
  • Provider information: https://www.helpscout.com
  • Provider location: United States
  • Pursued purpose: Customer support and messaging with the company's stakeholders 
  • Is the data stored or processed outside the EU: Yes 
  • Provider GDPR charter: https://www.helpscout.com/company/legal/dpa/
  • Retention period: 3 years after the person's last activity 
  • Data access: Kumiko Matcha internal services 

Register of the providers that collect personal data transmitted via the subcontractors mentioned above:

Google Analytics :

 Sympl :

 Order desk :

 Stripe :

 Paypal :

If you make your purchase through a direct payment gateway, in this case Shopify will store your credit card information. This information is encrypted in accordance with the data security standard established by the payment card industry (PCI-DSS standard). The information relating to your purchase transaction is kept for as long as necessary to finalize your order. Once your order is finalized, the information relating to the purchase transaction is deleted.

All direct payment gateways comply with the PCI-DSS standard, managed by the PCI Security Standards Council, which is the result of the joint effort of companies such as Visa, MasterCard, American Express and Discover.

The requirements of the PCI-DSS standard help ensure the secure handling of credit card data by our store and its service providers.

 Typeform :

  • Provider information: https://www.typeform.com
  • Provider location: Spain
  • Pursued purpose: Collection of customer feedback 
  • Is the data stored or processed outside the EU: No 
  • Provider GDPR charter: https://www.typeform.com/blog/news/gdpr/ 

 Stamped :

  • Provider information: https://stamped.io
  • Provider location: United States
  • Pursued purpose: Generation of customer reviews 
  • Is the data stored or processed outside the EU: Yes 
  • Provider GDPR charter: https://stamped.io/privacy

 Disqus :

 As a general rule, the third-party providers we use will only collect, use and disclose your information to the extent necessary to enable them to perform the services they provide to us.


However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we are required to provide them for your purchase transactions.

As regards these providers, we recommend that you read their privacy policies carefully so that you can understand how they will handle your personal information.

It should be remembered that certain providers may be located, or have facilities located, in a jurisdiction different from yours or ours. So if you decide to proceed with a transaction that requires the services of a third-party provider, your information could then be governed by the laws of the jurisdiction in which that provider is located or those of the jurisdiction in which its facilities are located.

For example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, your information that was used to complete the transaction could be disclosed under United States legislation, including the Patriot Act.

Once you leave our store's website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or by the General Terms and Conditions of Sale and Use of our website.

Sending and sharing of data 

Kumiko Matcha may only submit your data to third parties in accordance with the legislation in force. We submit information to the authorities upon request, for example the police and security authorities, as well as other authorities for the reasons specified by the legislation. Information relating to our customers is an important part of our business and it is not our business to trade it. We share this information only in the cases previously stated and for the purposes described in this privacy policy with Kumiko Matcha and which are either subject to this privacy policy or apply rules at least as protective as those described in this privacy policy. In addition, we may submit your data to subcontractors, in which case we will ensure that the confidentiality of the data is maintained, and we will also be responsible for the management of the data in that case. If we process your data outside the EU region, we will protect your data by ensuring that the subcontractor guarantees the appropriate processing of the data.

Processing of identification and location data related to electronic communication

Kumiko Matcha treats all data and all messages created during communication as confidential. We are bound by an obligation of secrecy and a prohibition on using messages or other confidential information. When communication takes place via a network, it always leaves a trace. These network traces are called identification data if they can be connected to a person. Network traces are created, for example, during telephone calls, the sending of electronic and SMS messages and browsing on the Internet, and may contain information about the correspondents, the connection route or routing, the data transfer protocol used, the event and the terminals used or their location. Our providers manage the identification and location information of communication in accordance with the law in force for purposes such as, for example, the implementation and use of the services, invoicing and technical development. Our subcontractors may also manage the identification data in the event of misuse, breach of data security and fault repair. In all the situations above, we only process identification and location data to the extent necessary to accomplish a certain specific task.

Persons authorized to manage identification and location data 

Only specific persons at our service providers whose work requires access to identification and location data may process this data. In practice, authorization is only granted to persons performing tasks related to invoicing, the maintenance or development of networks or communication services, the prevention and investigation of abuse, customer service and marketing. Persons entitled to handle the data may only manage it to the extent required to perform individual tasks.

Duration of the processing of identification and location data and data storage 

We process identification and location data for as long as necessary for invoicing, technical development, fault repair, marketing, investigation of misuse or data security purposes. However, the handling takes place only to the extent required by the actions and without unduly compromising the confidentiality of a message and the protection of privacy. We store the data required for invoicing for at least one year from the due date of the invoice and for a period not exceeding three years from the due date of the invoice, unless it is necessary to retain the data for a longer period related to the collection of the invoice. Otherwise, the data is stored to the extent permitted and required by the relevant legislation.

Website, visit tracking  

We also collect data concerning website visits. This data includes the IP address and the corresponding DNS name, the organization that registered the IP address, the name and address of the visited page, the page loading time and the browser type. Please note that the IP address is an identification required for the functioning of the Internet, used to direct messages transmitted on the Internet to the appropriate places. As a general rule, the IP address is not connected to the person using the computer, but it can be connected to the organization that registered the IP address. The IP address connection can be established at the request of the authorities.

Cookies 

This site also makes use of cookies. The purpose of the cookie is to signal the visitor's passage on the site. Cookies are used by VALICOM & DECO only for the purpose of improving the personalized service provided to the visitor.

In no case do we collect visitors' email addresses without them deliberately providing them to us.

The data collected consists of our customers' contact details (last name, first name, address, phone number, email address). As a customer of Kumiko Matcha, you can browse our websites anonymously. However, like most websites, we use cookie technology. When you view our website, the cookie assigns a random number to the browser that does not indicate your identity. Cookies help Kumiko Matcha determine which are the most popular sections of its websites, where visitors go and how long they stay. The data is used to implement and develop services and to target advertising on the websites. You can prevent the storage of the cookie by changing your browser settings. In some cases, prevention may slow down or make it impossible to navigate the pages or the website.

Here is a list of the cookies that we use. We have listed them here so that you have the option to choose whether or not you wish to allow them.


_session_id, unique session identifier, allows Shopify to store information about your session (referrer, landing page, etc.).

_shopify_visit, no data retained, persists for 30 minutes from the last visit. Used by the internal statistics tracking system of our website's provider to record the number of visits.

_shopify_uniq, no data retained, expires at midnight (according to the visitor's location) the following day. Calculates the number of visits to a store by a unique customer.

cart, unique identifier, persists for 2 weeks, stores information relating to your shopping cart.

_secure_session_id, unique session identifier

storefront_digest, unique identifier, undefined if the store has a password; it is used to determine whether the current visitor has access.

While browsing Kumiko Matcha, advertising cookies will be placed on your computer so that we can understand what interests you. Our advertising partners then allow us to present you with retargeting advertisements on other sites based on your previous interaction with Kumiko Matcha. The techniques our partner employs do not collect personal information such as last name, first name, address, phone number, email address. 

You may leave our website by clicking on certain links present on our site. We assume no responsibility for the privacy practices of these other sites and recommend that you read their privacy policies carefully.

Consent

When you provide us with your personal information to complete a transaction, verify your credit card, place an order, arrange a delivery or return a purchase, we assume that you consent to our collecting your information and using it for that purpose only.


If we ask you to provide us with your personal information for another reason, for marketing purposes for example, we will ask you directly for your explicit consent, or we will give you the opportunity to refuse.

If, after giving us your consent, you change your mind and no longer consent to us contacting you, collecting your information or disclosing it, you may notify us by contacting us at val@kumikomatcha.fr or by mail at the following address:

VALICOM & DECO
38 rue Le Laboureur
95160 Montmorency
France

As mentioned previously, we may collect your telephone data (phone number); you have the right to object to telephone canvassing by registering with the BLOCTEL service: https://www.bloctel.gouv.fr/

By using this site, you declare that you are at least the age of majority in your state or province of residence, and that you have given us your consent to allow any minor dependents to use this website.

Data security 

We ensure the data security of our services by using methods proportionate to the severity and sophistication of the threats as well as to the cost. Kumiko Matcha takes care to carry out actions aimed at preventing breaches of data security or eliminating disruptions affecting data security. In addition, we use all means to ensure that the confidentiality of messages or the protection of privacy is not unduly compromised when carrying out the actions above. We provide information about actions related to the data security of our services and other matters concerning data security through appropriate channels. In order to prevent breaches of data security and eliminate disruptions affecting data security, we may, among other things, monitor our service providers. These, for example, prevent the reception of electronic messages, remove viruses and other malicious software from messages and take other comparable technical measures. These measures are necessary within the permitted limits. Our service providers use physical, administrative and technical protection measures to keep secret the messages and identification data transmitted on the communication network. These actions reduce the risk of data about you being disclosed to third parties and prevent any misuse or other unauthorized access. Some of our services also use standardized encryption methods. Please note that as a user of Kumiko Matcha's services, you must also use the most appropriate methods to ensure your own data security. We encourage you to store and use our services and your terminals with care and to monitor their use, for example by using secure codes and unique passwords, and to use sufficient antivirus and firewall services and to keep them, as well as the operating system, up to date.

To protect your personal data, we take reasonable precautions and follow industry best practices to make sure it is not lost, misused, accessed, disclosed, altered or destroyed inappropriately.

If you provide us with your credit card information, it will be encrypted through the use of the SSL secure protocol and stored with AES-256 type encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally recognized industry standards.



Intellectual and industrial property rights 

All elements published within the Kumiko Matcha website, such as sounds, images, photographs, videos, writings, animations, programs, graphic charter, database utilities, software and other underlying technology are protected by the provisions of the Intellectual Property Code and belong to VALICOM & DECO.

The Kumiko Matcha trademark, as well as all figurative or non-figurative trademarks and more generally all other trademarks, illustrations, images and logos appearing on the articles, their accessories or their packaging, whether registered or not, are and shall remain the exclusive property of the company VALICOM & DECO, with the exception of the rights held over the visuals of the products, trademarks and logos of the suppliers of the products presented on the kumikomatcha.fr website.

Any total or partial reproduction, modification or use of these trademarks, illustrations, images and logos, for any reason and on any medium whatsoever, without the express prior consent of the company VALICOM & DECO, is strictly prohibited. The same applies to any combination or conjunction with any other trademark, symbol, logo and more generally any distinctive sign intended to form a composite logo, with the exception of the logos and descriptive signs belonging to the trademarks present on the site. The same shall apply to all copyrights, designs and models, and patents which are the property of the company VALICOM & DECO.

Liability

VALICOM & DECO is not responsible for the content and operation of the sites linked on this site, nor for damages of any nature that may be suffered by the visitor when visiting these sites.

The use of this site implies the visitor's knowledge and acceptance of the characteristics and limits of the Internet and the technologies related to it, the absence of protection of certain data against possible misappropriation or hacking and the risks of contamination by possible viruses circulating on the network. VALICOM & DECO declines all liability in the event of misuse of or incident related to the use of the computer, access to the Internet, the maintenance or malfunction of the servers, the telephone line or any other technical connection, the sending of forms to an incorrect or incomplete address, any computer errors or defects observed on the site.

Applicable law

This site is governed by French law.