Privacy Policy for European Union Residents
Welcome to the Privacy Policy of Claude Préval LLC (“Claude Préval”, “we”, “us”, or “our”) for the residents of the European Economic Area.
Claude Préval LLC, registered in the State of New York, United States, acts as the data controller for the personal data collected through our website - https://www.claudepreval.com and any related subdomains (the “Website”). We respect your privacy and are fully committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection laws.
1. Introduction
This Policy explains how we collect, use, and protect your personal data when you interact with our Website, as well as your rights under the GDPR. By using our Website, you agree to this Policy.
2. The Data We Collect
We may collect and process the following categories of data:
- Identity Data: name, surname, title, date of birth, marital status and gender.
- Contact Data: billing and shipping address, email address, and telephone number.
- Financial Data: payment card and transaction details.
- Transaction Data: records of purchases, orders, or returns.
- Technical Data: IP address, browser type, device identifiers, operating system, and connection data.
- Profile Data: account details, preferences, purchase history, feedback, and survey responses.
- Usage Data: interactions with our Website, browsing behavior, and engagement metrics.
- Marketing and Communications Data: preferences regarding newsletters, promotions, and contact methods.
Where the collection of certain personal data is required by law, or necessary for the performance of a contract to which you are a party (or in order to take steps at your request prior to entering into such a contract), failure to provide such data upon request may prevent us from fulfilling our legal or contractual obligations.
As a result, we may be unable to provide you with the requested products or services, or to enter into or perform the relevant contract. In such cases, you will be notified at the time the data is requested or when the cancellation becomes necessary.
3. Special Category Data
We do not collect or process sensitive data such as information about race, ethnicity, religion, political opinions, sex life, sexual orientation, health, or biometric identifiers.
4. How We Collect Your Data
a. Direct Interactions – when you provide personal data directly (e.g., to create an account or make a purchase, subscribe to our service or publications, give us feedback).
b. Automated Technologies – via cookies and similar technologies. Please see our cookie policy for further details.
c. Third Parties – from analytics providers, advertising partners, and public databases.
We take reasonable steps to ensure that the personal data we hold about you is accurate, complete, and kept up to date. To help us comply with this obligation, you are requested to inform us promptly of any changes to your personal data during the course of your relationship with us.
If you become aware that any of the information we hold about you is inaccurate or incomplete, you have the right to request its rectification in accordance with Article 16 of the General Data Protection Regulation (GDPR).
Such requests may be submitted by contacting us at privacy@claudepreval.com.
5. How We Use Your Personal Data
We will process your personal data only where permitted by applicable data protection laws. In most cases, this will occur under one or more of the following legal bases:
Performance of a Contract: when the processing of your personal data is necessary for the execution of a contract to which you are a party, or to take steps at your request prior to entering into such a contract;
Legitimate Interests: when the processing is necessary for our legitimate business interests (or those of a third party), provided that your fundamental rights and freedoms do not override those interests; Examples include processing orders, managing accounts, sending updates, and improving our services.
Legal Obligation: when the processing is required for us to comply with legal or regulatory obligations to which we are subject.
Marketing Communications
We aim to provide you with clear choices regarding how your personal data is used, particularly in connection with marketing and advertising. We may use your personal data to better understand your preferences and to identify products, services, and offers that may be of genuine interest to you (“marketing purposes”).
You may receive marketing communications from us if you have requested information, subscribed to our updates, or made a purchase from us - provided that you have not opted out of receiving such communications.
You may withdraw your consent or opt out of receiving marketing messages from us or our third-party partners at any time. To do so, simply use the unsubscribe or opt-out link included in our communications, or contact us directly at privacy@claudepreval.com.
Third-Party Links
Our Website may contain links, plug-ins, or applications operated by third parties that are not affiliated with Claude Préval. Accessing these links or enabling such connections may allow third parties to collect or share information about you.
We have no control over these third-party websites and are not responsible for their privacy practices or content. We encourage you to review the privacy policies of any external websites you visit before providing personal information.
Cookies
Our Website uses cookies and similar technologies to enhance your browsing experience, analyze traffic, and deliver personalized content.
You can configure your browser settings to refuse some or all cookies or to alert you when cookies are being placed. However, please note that disabling cookies may affect the functionality and performance of certain parts of the Website.
For more detailed information about how we use cookies and how you can manage them, please refer to our Cookie Policy.
6. Sharing Your Personal Data
We may share your data with affiliates, service providers, analytics and marketing partners, and legal authorities when required. All third parties must use data only for specified purposes and under confidentiality obligations.
We may disclose your personal data to third parties in the following circumstances:
Business Transactions:
In the event that we buy, sell, merge, or transfer any part of our business or assets (whether as an ongoing concern or otherwise), your personal data may be disclosed as part of such a transaction.
Acquisition:
If Claude Préval LLC or substantially all of its assets are acquired by a third party, the personal data we hold about our customers, partners, or contacts may be transferred as one of the business assets.
Legal Obligations and Law Enforcement:
We may disclose your personal data where required to do so by law, or where we are requested by a competent authority to assist in the investigation, detection, or prevention of criminal or unlawful activities.
Enforcement and Protection of Rights:
We may also share personal data when necessary to enforce our Terms of Use or Terms of Sale, or to protect the rights, property, or safety of Claude Préval LLC, our customers, or others.
This may include exchanging information with other organizations for the purposes of fraud prevention and credit risk mitigation.
Service Providers (Data Processors)
We engage carefully selected third-party service providers who process personal data on our behalf and in accordance with strict confidentiality and data protection obligations. These include, but are not limited to:
Website Analytics Provider: Google Analytics, utilizing the “anonymizeIp” feature to ensure IP anonymization.
Website Platform and Security Provider: Shopify, which provides infrastructure, hosting, and maintenance services for our Website.
Change of Purpose
We will only process your personal data for the purposes for which it was originally collected, unless we reasonably determine that another purpose is compatible with the initial one.
If you would like further information on how processing for the new purpose is compatible with the original lawful basis, you may contact us at privacy@claudepreval.com.
If we intend to use your personal data for any purpose unrelated to the original one, we will notify you in advance and explain the legal basis that permits such processing.
Please note that we may process your personal data without your knowledge or consent, where required or permitted by applicable law.
7. International Transfers
Some partners may process data outside the EEA. We ensure adequate protection through European Commission-approved safeguards such as Standard Contractual Clauses.
Whenever your personal data is transferred outside the European Economic Area (EEA), we ensure that it receives an equivalent level of protection to that guaranteed under the GDPR. To achieve this, we implement one or more of the following safeguards:
Adequacy Decisions:
We may transfer your personal data to countries that the European Commission has determined provide an adequate level of protection for personal data comparable to that of the European Union.
Standard Contractual Clauses (SCCs) and Additional Safeguards:
When transferring data to service providers or partners located outside the EEA in countries that do not benefit from an adequacy decision, we rely on the European Commission’s approved Standard Contractual Clauses and, where appropriate, implement supplementary measures to ensure that your personal data receives the same level of protection as within the EU.
By submitting your personal information to Claude Préval LLC, you acknowledge and agree that your personal data may be transferred, stored, and processed outside the EEA under the safeguards described above.
If you would like more detailed information regarding the specific transfer mechanisms or safeguards we apply, please contact us at privacy@claudepreval.com
8. Data Security
We use appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. Only authorized personnel may access your data under confidentiality agreements.
9. Data Retention
We retain personal data only as long as necessary for its original purpose or as required by law. Basic data ((including Contact, Identity, Financial and Transaction Data) may be retained for up to six (6) years for compliance purposes.
10. Your Rights Under the GDPR
As an EU resident, you have the right to access, rectify, erase, restrict, or object to processing, withdraw consent, and request data portability. You may also file a complaint with your local Data Protection Authority. You have the right to file a complaint at any time with a supervisory authority, particularly the one responsible for the Member State where you live, work, or where you believe your data protection rights have been violated. This applies if you consider that the processing of your personal data breaches the GDPR.
However, we would appreciate the opportunity to address your concerns before you contact a supervisory authority, so please reach out to us first.
As a data subject, you have several rights regarding your personal data. These rights are detailed below, along with guidance on how to exercise them.
Right of Access
You have the right to request access to the personal data we hold about you. This allows you to obtain a copy of your data. We will provide this copy unless doing so would adversely affect the rights and freedoms of others.
Right to Rectification
You can ask us to correct or update any inaccurate or incomplete personal data we hold about you. We may need to verify the accuracy of any new information you provide.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain cases. This means we can store your data but not process it further, except with your consent or for legal or public interest reasons. You may exercise this right if:
(i) you dispute the accuracy of your data;
(ii) processing is unlawful;
(iii) you need the data for legal claims though we no longer require it; or
(iv) you have objected to processing (see below).
Right to Erasure
You can request that we delete your personal data in specific situations, such as when:
(i) the data is no longer needed for its original purpose;
(ii) you withdraw your consent;
(iii) you have objected to processing; or
(iv) your data has been processed unlawfully.
Right to Withdraw Consent
If we process your data based on consent, you may withdraw that consent at any time. This will not affect the legality of processing carried out before your consent was withdrawn.
Right to Object
You may object at any time to the processing of your personal data. This right applies particularly when:
(i) we rely on legitimate interests (ours or those of a third party);
(ii) processing is for scientific, historical, or statistical purposes; or
(iii) data is used for direct marketing.
Please note that objecting does not automatically result in deletion of your data. In certain cases, we may demonstrate compelling legitimate grounds to continue processing that override your interests and rights.
Right to Object to Automated Decision-Making and Profiling
You have the right not to be subject to decisions made solely by automated means (i.e., without human involvement). You are also entitled to receive meaningful information about any automated decision-making or profiling related to your personal data.
Right to Data Portability
You can request that we transfer your personal data to you or another data controller. We will provide the data in a structured, commonly used, machine-readable format. This right applies only to data processed by automated means based on your consent or for contractual purposes.
If you wish to exercise any of these rights, please contact us at privacy@claudepreval.com.
11. Contact Us
Email: privacy@claudepreval.com
Last updated: October 14, 2025