Privacy Policy

Last updated: September 2026

This Privacy Policy explains how CRESTWHITE collects, uses, stores and, where necessary, shares your personal data when you visit our website, use our services, place an order or communicate with us.

We take the protection of your personal data seriously and are committed to processing it in accordance with applicable laws, including the General Data Protection Regulation (GDPR).

1. Data Controller

The controller responsible for personal data collected through the use of our website is:

CRESTWHITE
14 Rue de Penthièvre
75008 Paris
France

Phone: +33 7 82 41 94 89

Email addresses:

contact@crest-official.com
contact@crest-white.fr
contact@crestwhite.fr
contact@crestwhite.us
support@crest-officiel.fr

For any questions about the protection of your personal data, you can contact us at:

contact@crest-official.com
contact@crest-white.fr

2. Personal Data We May Collect

When you use our website or place an order, we may collect various categories of personal data.

Contact Details

We may collect:

• Your first and last name.

• Your postal address.

• Your billing address.

• Your delivery address.

• Your phone number.

• Your email address.

Order Information

We may process information relating to:

• Products viewed.

• Products added to your cart.

• Products ordered.

• Your order history.

• Returns.

• Refunds.

• Exchanges.

• Cancellations.

Payment Information

Information required to process payments may be handled by our secure payment service providers.

We may receive certain transaction details, such as:

• Payment status.

• The amount paid.

• The payment method used.

• A transaction reference.

Full banking details are generally processed directly by the relevant payment service providers.

Customer Account Information

Where this feature is available, we may process:

• Your user ID.

• Your preferences.

• Information associated with your account.

• Your order history.

Communications with Our Customer Service Team

When you contact us, we may retain information contained in your communications with our customer service team to handle your request.

Technical Information

When you browse our website, certain information may be collected automatically, including:

• Your IP address.

• The type of device used.

• The browser used.

• Pages visited.

• The date and time of your visit.

• Certain information about your browsing activity.

3. How We Collect Your Data

We may obtain your personal data:

Directly from you, for example when you:

• Place an order.

• Create an account.

• Complete a form.

• Contact our customer service team.

• Subscribe to our newsletter.

Automatically, including through:

• Cookies.

• Similar technologies.

• Technical information transmitted by your device.

From service providers, when they assist with:

• Payments.

• Deliveries.

• Hosting.

• Security.

• Website analytics.

• Customer service.

From partners, where permitted by applicable law.

4. How We Use Your Personal Data

We may use your personal data for the following purposes:

Processing Your Orders

This includes:

• Confirming your order.

• Managing payment.

• Preparing your order.

• Arranging shipment.

• Tracking delivery.

• Managing returns and refunds.

Providing Customer Service

We use certain data to:

• Answer your questions.

• Resolve issues relating to an order.

• Handle complaints.

• Provide assistance.

Preventing Fraud

Certain information may be used to:

• Detect suspicious transactions.

• Secure transactions.

• Protect our website.

• Prevent fraud and misuse.

Improving Our Website

We may analyse certain browsing data to:

• Understand how our website is used.

• Improve the user experience.

• Improve our products and services.

• Resolve technical issues.

Marketing and Promotional Communications

Where permitted by law, we may use your contact details to send you:

• Commercial offers.

• News and updates.

• Promotions.

• Information about our products.

You can unsubscribe from promotional communications at any time.

5. Legal Bases for Processing

Depending on the purpose concerned, we may process your data on one of the following legal bases:

Performance of a contract, particularly to process and deliver your order.

Compliance with a legal obligation, for example to retain certain accounting records or meet a regulatory requirement.

Legitimate interests, particularly to maintain website security, prevent fraud or improve our services.

Consent, particularly where required for certain promotional communications or cookies.

Where processing is based on your consent, you can withdraw it at any time.

6. Sharing Your Personal Data

We may share certain data only where necessary to operate our services.

This may include sharing data with:

• Payment service providers.

• Carriers.

• Logistics providers.

• IT service providers.

• Hosting providers.

• Website analytics services.

• Communication service providers.

• Marketing partners, where permitted by law.

These providers receive only the information necessary to perform their services.

Data may also be disclosed where necessary to comply with a legal obligation or court order, or to protect our rights.

7. Cookies

Our website may use cookies and similar technologies.

Some cookies are necessary for the website to function.

Others may be used to:

• Measure website traffic.

• Remember your preferences.

• Improve the user experience.

• Analyse browsing activity.

• Provide tailored content or advertising.

Where your consent is required, these cookies are used only after you have given your consent.

You can change your cookie preferences at any time using the preference management tool available on our website.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected.

Retention periods may depend on:

• The nature of the data.

• The management of your order.

• Our accounting and tax obligations.

• The handling of any potential dispute.

• The need to prevent fraud.

Certain data may be retained for longer where required by law.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against:

• Loss.

• Unauthorised access.

• Misuse.

• Alteration.

• Unauthorised disclosure.

However, no method of electronic transmission or storage can guarantee absolute security.

We therefore recommend that you never send us particularly sensitive information through unsecured communication channels.

10. Your Rights

Under applicable law, you may have the following rights:

Right of Access

You can request information about the personal data we hold about you.

Right to Rectification

You can request the correction of inaccurate or incomplete data.

Right to Erasure

You can request the deletion of certain data where the legal conditions are met.

Right to Object

You can object to certain processing of your data.

Right to Restriction of Processing

You can request a temporary restriction on the processing of certain data.

Right to Data Portability

In certain circumstances, you can request to receive certain personal data in a structured, usable format.

Withdrawal of Consent

Where processing is based on your consent, you can withdraw it at any time.

Promotional Communications

You can unsubscribe from our promotional emails at any time using the unsubscribe link included in those messages.

11. How to Exercise Your Rights

To exercise your rights or ask a question about your personal data, you can contact us at:

contact@crest-official.com
contact@crest-white.fr

Or by post:

CRESTWHITE
14 Rue de Penthièvre
75008 Paris
France

Where necessary, we may ask you for information to verify your identity and prevent unauthorised individuals from accessing your data.

We will handle your request within the time limits required by applicable law.

12. Complaints to the CNIL

If you believe that your personal data is not being processed in accordance with applicable law, you may also lodge a complaint with the French data protection authority:

Commission Nationale de l’Informatique et des Libertés (CNIL)

You can also contact us beforehand so that we can attempt to resolve your concern directly.

13. International Transfers

Some of our service providers may process or store personal data in countries outside the European Economic Area.

Where such transfers take place, we ensure that they rely on a mechanism permitted by applicable law, including:

• An adequacy decision.

• Standard contractual clauses approved by the European Commission.

• Any other mechanism recognised under applicable law.

14. Links to Third-Party Websites

Our website may contain links to websites or services operated by third parties.

These websites have their own privacy policies.

CRESTWHITE is not responsible for the privacy practices of third-party websites that we do not control.

We recommend that you read their privacy policies before providing them with personal data.

15. Personal Data Relating to Minors

Our services are not specifically intended for children.

We do not seek to knowingly collect personal data relating to minors where such collection is not permitted.

If you believe that a minor has provided us with personal data inappropriately, you can contact us so that we can review the situation.

16. Changes to This Policy

We may update this Privacy Policy to reflect:

• Developments in our services.

• Regulatory changes.

• Changes in our practices.

• New legal or technical requirements.

The applicable version is the one published on our website, together with its last updated date.

17. Contact

For any questions about this Privacy Policy or the use of your personal data:

CRESTWHITE
14 Rue de Penthièvre
75008 Paris
France

Phone: +33 7 82 41 94 89

Email addresses:

contact@crest-official.com
contact@crest-white.fr
contact@crestwhite.fr
contact@crestwhite.us
support@crest-officiel.fr

Primary contact for personal data matters:
contact@crest-white.fr

Additional contact:
contact@crest-official.com