The protection of personal data and privacy of users and customers is essential to TONE.

TONE is committed to processing personal data in accordance with the applicable laws and regulations in the countries where its users access the website www.tonestore.co, including the General Data Protection Regulation ("GDPR") and the French Data Protection Act No. 78-17 of January 6, 1978, as amended.

This Privacy Policy explains how TONE collects and processes personal data provided by the user on the website www.tonestore.co (hereinafter the "Site").

All personal data is subject to computer processing for order processing and delivery, as well as for suggesting products tailored to the customer's needs. This data is exclusively reserved for TONE.

Personal Data

Personal data refers to any information relating to an identified or identifiable natural person (referred to as the "data subject").

In the context of the Site, the data subjects are the internet users visiting this website and the customers who purchase products on the Site.

The personal data covered by this Privacy Policy includes all data relating to these internet users and users (customers), to the extent that they are identified or identifiable, for example, through their user account identifier.

What personal data is collected, for what purposes, and on what legal basis?

All personal data provided by the user on the Site - through a purchase, account creation - is subject to computer or manual processing for the following purposes:

• Management of the commercial relationship (order processing and delivery, choice of samples offered in orders, invoices): When you place an order, we record your data to process your order and ship the purchased products. This information is also kept for security purposes, to comply with legal and regulatory obligations, and to improve and personalize our offers.

• Customer relationship management: Customer support, product advice, suggestion of products tailored to the customer's needs, notifications of restocked items.

• Connection to your user account: When you place an order on our Site, we offer you access to your password-protected "User Account." This allows you to access information about your past orders and update your personal information if necessary. It is important not to disclose your "User Account" access data to third parties, as it is strictly personal.

• Advertising, market research, and marketing analysis: We use the data concerning you to send you information about our products and recommend products for sale on our site that may interest you. We only use email advertising within the limits defined by law.

• Newsletter subscription: If you decide to subscribe to our newsletter, you will receive information about advantageous offers that you can unsubscribe from at any time by clicking on the link provided for this purpose in each newsletter. The information collected during the newsletter registration allows us to provide you with more relevant commercial offers.

• Site consultation: For security reasons, during your visits to our Site, the following data may be collected and temporarily stored: domain name or IP address, HTTP response code, number of bytes transferred, website address from which the user arrived. This processing is based on TONE's legitimate interest in better understanding the Site's traffic. This data may also be used to offer more relevant offers to our users (including through the use of cookies). This processing is based on your consent (via the cookie banner).

We collect information about the device using the following technologies:

• Session cookies: unique session identifier that allows Shopify to store information about your session (referrer, landing page, etc.).

• Shopify_visit: no data retained, persists for 30 minutes from the last visit. Used by our website's internal statistics tracker to record the number of visits.

• Shopify_uniq: no data retained, expires at midnight (depending on the visitor's location) the next day. Calculates the number of visits to a store by a uniquecustomer.

• Cart: unique identifier, persists for 2 weeks, stores information about your shopping cart.

• Secure_session_id: unique session identifier.

• Storefront_digest: unique identifier, undefined if the store has a password, used to determine if the current visitor has access to it.

• "Log files" track site activity and collect data such as your IP address, the type of browser you are using, your internet service provider, your referring and exit pages, and timestamp information (date and time).

• "Invisible pixels," "tags," and "pixels" are electronic files that record information about your browsing on the site.

In addition, when you make or attempt to make a purchase through the site, we collect certain information about you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. These automatically collected pieces of information are referred to as "Order Information." When we use the term "personal information" in this privacy policy, we refer to both device information and order information.

Sharing your personal information

We share your personal information with third parties who assist us in using it for the purposes described above.

For example, we use Shopify to host our online store.

• To learn more about how Shopify uses your personal information, please refer to the following page: https://www.shopify.com/legal/privacy.

We also use Google Analytics to better understand how our customers use the site.

• To learn more about how Google uses your personal information, please refer to the following page: https://www.google.com/intl/en/policies/privacy/.

You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

As mentioned above, we use your personal information to provide you with targeted advertisements or marketing messages that, in our opinion, may interest you. To learn more about how targeted advertising works, you can visit the Advertising Network Initiative (NAI) information page at http://www.networkadvertising.org/understanding-online-behavioral-advertising.