Last update: September 9, 2025
The purpose of this privacy policy is to help you understand how your personal data is collected, processed, and stored by HEART SPARKLE via the Website.
HEART SPARKLE understands that data protection and privacy are important issues for all users visiting the Website.
HEART SPARKLE is committed, in accordance with GDPR regulations, to respecting your privacy and protecting your personal data, i.e., data that can directly or indirectly identify you as an individual.
The purpose of this privacy policy is to outline HEART SPARKLE’s commitments in this area.
Definition
When you use our Site, we may ask you to provide us with personal data about yourself.
The term “personal data” refers to all data that can be used to identify an individual, including your surname, first names, pseudonym, photograph, postal and e-mail addresses, job title, telephone numbers, date of birth, data relating to your transactions on the Site, details of your purchases, credit card numbers, SIRET, VAT registration number, IP address, and any other information you may choose to give us about yourself.
Purpose
The purpose of this policy (hereinafter the “Policy”) is to inform you about the means we use to collect your personal data, in strict compliance with your rights.
In this regard, we would like to inform you that we comply with Law No. 78-17 of January 6, 1978 on information technology, files, and civil liberties, in its current version (hereinafter: the “Data Protection Act”), as well as Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: the “GDPR”).
Identity of the data controller
The company responsible for collecting your personal data is GHECNT, a SAS with share capital of 1,000 euros, registered in the Pontoise Trade and Companies Register under no. 930 237 623, with its registered office at 40 rue du Val de Glatigny, 95280 Jouy le Moutier, France (hereinafter referred to as “We”).
Collection of personal data
The legal basis for our collection of your personal data is as follows:
– this collection is necessary afin order to perform the contract entered into when you use our services on our Site;
– legitimate interest when you voluntarily provide us with personal data during your visit to our Site, the data then being collected to enable us to better respond to your requests for information about our services.
Your personal data is collected for one or more of the following finalities:
– Managing your access to and use of certain services accessible on the Site,
– Effect operations relating to Customer management concerning contracts, invoices, Customer relationship follow-up,
– Constitute a fichier of users, customers and prospects,
– Send newsletters, solicitations and promotional messages. If you do not wish us to do so, we give you the option of expressing your refusal in this respect when your data is collected,
– To compile commercial and visitor statistics for our services,
– Organize contests, lotteries and all other promotional operations, with the exception of online games of chance subject to approval by the Autorité de Régulation des Jeux en Ligne.
– Manage people’s opinions on products, services or content,
– To manage any unpaid invoices and disputes relating to the use of our products and services,
– Personalize responses to your requests for information,
– Comply with our legal and regulatory obligations. When we collect your personal data, we inform you whether certain information is mandatory or optional (by means of asterisks visible on the Site).
| Why do we collect your personal data? | What categories of personal data do we collect for this purpose? | What is the legal basis authorizing us to collect your personal data for such a purpose? |
|---|---|---|
| We collect your personal data in order to identify you when you use our site and in order to send you messages relating to the proper administration of our site (e.g. confirmation of registration, modification of the site or conditions of use, etc.). |
Identification data
Connection data
|
The legal basis for this processing is the performance of the contract binding us when you accept our general terms and conditions when creating your account. |
| We collect your personal data in order to deliver your order/service. |
Identification data
|
The legal basis for this processing is the performance of the contract binding us when you accept our general terms and conditions when creating your account. |
| We collect your personal data in order to improve and optimize our site, for example by studying your behavior during your visit and drawing conclusions in order to make modifications in terms of ergonomics and user experience. |
 Usage and consumption data  Connection data |
The legal basis for this processing is our legitimate interest in providing and improving the user experience of our site visitors and members. |
| We collect your personal data in order to understand your preferences and provide you with commercial offers for services/products similar to those you have already ordered. |
Usage and consumption data  Identification data |
The legal basis for this processing is our legitimate interest in providing and improving the user experience of our site visitors and members. |
When we collect your personal data, we inform you whether certain information is mandatory or optional.
Recipients of personal data
The following will have access to your personal data:
– Our company staff;
– Control services (lawyers, accountants, etc.);
– Our subcontractors (communication service providers, productivity software providers, data hosting service providers, payment service providers, billing service providers, audience analysis and measurement service providers, customer relationship management service providers);
– Public bodies may also be recipients of your personal data, exclusively to meet our legal obligations, court officers, officiers ministériels and bodies responsible for effecting debt collection.
Retention period for personal data
Concerning data relating to the management of customers and prospects :
Your personal data will not be kept beyond the period strictly necessary to manage our commercial relationship with you.
However, data required to establish proof of a right or contract, or to comply with a legal obligation, will be kept for the period stipulated by the law in force.
With regard to any prospecting operations aimed at customers, their data may be kept for a period of three (3) years from the finding of the commercial relationship.
Personal data relating to non-customer prospects may be kept for a period of three (3) years from the date of collection or last contact with the prospect.
At the end of this period of three (3) years, we may contact you again to find out whether you wish to continue to receive commercial solicitations.
If the right of access or rectification is exercised, data relating to identity documents may be kept for the period stipulated in article 9 of the French Code of Criminal Procedure, i.e. one (1) year. If the right of opposition is exercised, such data may be archived for the limitation period stipulated in article 8 of the French Code of Criminal Procedure, i.e. three (3) years.
The financial transactions relating to the payment of purchases and fees via the Site are confined to a payment services provider, which ensures their smooth and secure processing.
For the purposes of our services, this payment service provider may receive personal data relating to your credit card numbers, which it collects and stores in our name and on our behalf. We do not have access to this data.
In order to enable you to make regular purchases or pay charges afférents on the Site, your credit card details are kept for the duration of your registration on the Site and, at the very least, until you make your last transaction.
The data relating to the visual cryptogram or CVV2, written on your bank card, is not stored.
If you do not wish your personal data relating to your credit card numbers to be stored under the conditions specified above, we will not store this data beyond the time required to complete the transaction.
In any event, the data relating to these may be kept, for finality of proof in the event of a possible challenge to the transaction, in intermediate archives, for the period stipulated in article L 133-24 of the French Monetary and financial Code, in this case thirteen (13) months following the debit date. This period may be extended to fifteen (15) months afin to take into account the possibility of using payment cards with différé debit.
Concerning the management of lists of opposition to receive prospecting:
The information used to take into account your right to object is kept for a minimum of three (3) years from the date you exercise your right to object.
Concerning audience measurement statistics:
Information stored in users’ terminals or any other element used to identifier users and enabling their traceability or frequentation will not be kept beyond thirteen (13) months.
COOKIES AND TRACKING TECHNOLOGIES
Types of cookies used:
– Functional cookies necessary for the website to function
– Analytical cookies to measure audience (Google Analytics)
– Advertising cookies for ad personalization (Google Ads, Meta Ads, Pinterest Ads)
Cookie retention period:
– Functional cookies: session duration
– Analytical cookies: 13 months maximum
– Advertising cookies: 13 months maximum
Consent management:
A cookie manager is available on our site to manage your preferences. For users in the EU, UK, and Switzerland, we use an IAB TCF-certified Consent Management Platform (CMP).
Necessary
Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
| Cookie | Duration | Description |
|---|---|---|
| wcml_client_currency | 2 days | Switch currency |
| wcml_client_currency_language | 2 days | Currency language |
| commercekit-nonce-value | 2 hours | Nonce value |
| commercekit-nonce-state | 2 hours | Nonce state |
| o2s-chl | 1 day | o2Switch sets this cookie to block the automated access by the host. |
| wt_consent | 1 year | Used for remembering users’ consent preferences to be respected on subsequent site visits. It does not collect or store personal information about visitors to the site. |
Functional
Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
| Cookie | Duration | Description |
|---|---|---|
| wp-wpml_current_language | session | WordPress multilingual plugin sets this cookie to store the current language/language settings. |
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
| Cookie | Duration | Description |
|---|---|---|
| _ga_* | 1 year 1 month 4 days | Google Analytics sets this cookie to store and count page views. |
| _ga | 1 year 1 month 4 days | Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. |
| sbjs_migrations | session | Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website. |
| sbjs_current_add | session | Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website. |
| sbjs_first_add | session | Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website. |
| sbjs_current | session | Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website. |
| sbjs_first | session | Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website. |
| sbjs_udata | session | Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website. |
| sbjs_session | 1 hour | Sourcebuster sets this cookie to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website. |
Performance
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
| Cookie | Duration | Description |
|---|---|---|
| _uetsid | 1 day | Bing Ads sets this cookie to engage with a user that has previously visited the website. |
| _uetvid | 1 year 24 days | Bing Ads sets this cookie to engage with a user that has previously visited the website. |
Advertisement
Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.
| Cookie | Duration | Description |
|---|---|---|
| MUID | 1 year 24 days | Bing sets this cookie to recognise unique web browsers visiting Microsoft sites. This cookie is used for advertising, site analytics, and other operations. |
Others
Other cookies are those that are being identified and have not been classified into any category as yet.
| No cookies to display. |
Manage cookie preferences
You can change your cookie preferences any time by clicking the Consent Preferences button. This will let you revisit the cookie consent banner and change your preferences or withdraw your consent right away. In addition to this, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers.
Chrome: https://support.google.com/accounts/answer/32050
Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac
Microsoft Edge: Delete cookies in Microsoft Edge – Microsoft Support
If you are using any other web browser, please visit your browser’s official support documents.
Use of Google Ads, Meta, Pinterest, advertising cookies, and analytics cookies
Google, Meta, and Pinterest services used
We use Google Ads, Google Analytics, and other Google services, as well as Meta and Pinterest, to promote our products and services. These services may collect and process personal data in accordance with their own privacy policies.
Consent for personalized advertising:
– For users in the EU/EEA, UK, and Switzerland: we ask for your explicit consent to use advertising cookies and personalize ads.
– This consent covers the use of your personal data for remarketing and targeted advertising purposes.
– You can withdraw your consent at any time via our cookie manager.
Legal basis for advertising processing:
– EU/EEA and UK: Consent (Article 6(1)(a) of the GDPR)
– US: Legitimate interest subject to your opt-out rights under applicable laws (CCPA, etc.)
Advertising and analytics cookies
– Google Ads cookies: enable the delivery of personalized ads
– Meta Ads cookies: enable the delivery of personalized ads
– Pinterest Ads cookies: enable the delivery of personalized ads
– Remarketing cookies: enable us to show you ads based on your previous visits
– Analytics cookies: Google Analytics collects data about your use of the site.
Purposes of processing
– Delivery of targeted ads
– Measurement of advertising performance
– Improvement of our marketing campaigns
– Analysis of visitor behavior
You can manage your advertising preferences:
– Google: https://adssettings.google.com
– Meta: https://www.facebook.com/settings
– Pinterest: https://policy.pinterest.com/privacy-policy
You can control advertising cookies through your browser settings or our consent management platform. For more information about Google’s advertising cookies, visit: https://policies.google.com/technologies/ads
Consent for users in the European Economic Area, the United Kingdom, and Switzerland
In accordance with the GDPR and Google’s consent policies, we collect your consent before:
– Placing cookies that are not strictly necessary
– Processing data for advertising purposes
– Sharing data with advertising partners
You can withdraw your consent at any time via our cookie banner or by contacting us.
Managing your preferences
You can:
– Accept or decline advertising cookies
– Change your preferences at any time
– Disable advertising personalization via Google settings
California Resident Rights (CCPA/CPRA)
If you are a California resident, you have the following rights:
– Right to know: to know what personal information has been collected
– Right to delete: to request the deletion of your data
– Right to non-discrimination: not to be discriminated against for exercising your rights
– Right to opt out: to refuse the “sale” of your personal information
“Sale” of personal information
We do not sell your personal information in the traditional sense. However, certain data transfers to our advertising partners may constitute a “sale” as defined by the CCPA.
How to exercise your rights
Contact us at [email protected] or at 40 rue du Val de Glatigny, 95280 Jouy le Moutier, France.
Security
We inform you that we take all necessary precautions and appropriate organizational and technical measures to preserve the security, integrity and confidentiality of your personal data, and in particular to prevent it from being distorted, damaged or accessed by unauthorized third parties. We also use secure payment systems that comply with the state of the art and applicable regulations.
Hosting
We inform you that your data is retained and stored for the entire duration of its retention on the servers of the company o2switch, located in the European Union.
Transfers outside the European Union
Your data may be transferred outside the European Union as part of the tools we use and our relations with our subcontractors.
This transfer is secured using the following tools:
– Either this data is transferred to a country that has been deemed to offrant an adequate level of protection by a decision of the European Commission ;
– Or we have entered into a specific contract with our subcontractors governing transfers of your data outside the European Union, based on the standard contractual clauses between a data controller and a subcontractor approved by the European Commission.
Access, rectification, limitation and deletion of your personal data
In accordance with European regulations on the protection of personal data, you have the following rights:
– A right of access allowing you to know at any time whether or not your personal data is being processed by our services and, if so, to have access to said personal data and to the information required by law concerning the methods of processing this data,
– A right of rectification allowing you to request that any inaccuracies concerning your personal data be corrected as soon as possible,
– A right to erasure, allowing you to request that your personal data be erased as soon as possible, provided that this request for erasure complies with the conditions required by applicable law,
– A right to restrict the processing of your personal data, provided that this request for restriction complies with the conditions required by applicable law,
– A right to portability, allowing you to receive your personal data in a structured, commonly used, and machine-readable format, or to request that this personal data be transmitted to another data controller, provided that this request for portability complies with the conditions required by applicable law,
– The right to object to the processing of your personal data for reasons relating to your particular situation, provided that this objection complies with the conditions required by applicable law.
– The right to withdraw at any time the specific consent given for the collection of your personal data, in particular when the processing of your personal data is used for commercial prospecting purposes.
– The right to define guidelines for the storage, erasure, and communication of your personal data after your death.
You have the right to obtain the restriction of the processing of your personal data in the cases defined in Article 18 of the GDPR:
– During the verification period we implement when you contest the accuracy of your personal data, – When the processing of this data is unlawful and you wish to restrict this processing rather than delete your data,
– When we no longer need your personal data, but you wish to retain it in order to exercise your rights,
– During the period of verification of legitimate grounds, when you have objected to the processing of your personal data.
Persons whose data is collected on the basis of our legitimate interest are reminded that they may object to the processing of their data at any time. However, we may continue to process the data if there are legitimate grounds for doing so that override your rights and freedoms, or if the processing is necessary to establish, exercise, or defend our legal rights.
You can unsubscribe from our promotional emails via the link provided in the emails. Even if you choose to no longer receive promotional messages from us, you will continue to receive our administrative messages.
Portability of your personal data
You have a right to the portability of the personal data you have provided to us, understood as the data you have actively and consciously declared in the course of accessing and using the services, as well as the data generated by your activity in the course of using the services.
We remind you that this right does not apply to data collected and processed on a legal basis other than consent or the performance of the contract binding us.
This right may be exercised free of charge, at any time, and in particular when you close your account on the Site, afin order to recover and store your personal data.
To this end, we will send you your personal data, by any means deemed useful, in a standard open format that is commonly used and readable by computer, in accordance with the state of the art.
Making a complaint to a supervisory authority
You are also informed that you have the right to lodge a complaint with a competent supervisory authority, (the Commission Nationale Informatique et Libertés for France), in the Member State in which you have your habitual residence, your place of work, or the place where the violation of your rights is alleged to have occurred, if you consider that the processing of your personal data covered by this charter constitutes a violation of the applicable laws.
This remedy may be exercised without prejudice to any other remedy before an administrative or judicial authority. You also have the right to an effective administrative or judicial remedy if you consider that the processing of your personal data covered by this policy constitutes a violation of applicable laws.
Modifications
We reserve the right, at our sole discretion, to modify this Policy in whole or in part at any time.
These modifications will take effect upon publication of the new policy.
