Privacy Policy – ​​Hidaya Moda (France)

Last updated: 21/12/2025

Introduction

Hidaya Moda, a modest fashion boutique established in France in 2018, places paramount importance on the confidentiality of your personal data . True to our ethical values ​​and respect for our customers' privacy, we are committed to transparency regarding how we collect, use, and protect your personal information. This Privacy Policy explains what data we collect, for what purpose, on what legal basis, with whom it is shared, and your related rights. By using our website or services, you acknowledge that you have read and understood these terms. If you do not agree with these practices, please do not use our website.

Data controller identity: Hidaya Moda is the data controller of your data (registered in France). For any questions or to exercise your rights regarding personal data, you can contact us using the contact details provided at the end of this document.

1. Personal data collected

We only collect personal data that is strictly necessary for managing our online business and providing our services. This data comes either directly from you, from your browsing on our site, or from trusted partners. Here are the categories of data we collect, their origin , and how we use them:

• Account and identification data : information you provide when creating an account or placing an order, such as your first and last name , email address , password , phone number , and postal address . Origin: provided by you during registration or ordering. Use: to create and manage your customer account, process your orders, and contact you about them (confirmation, support). Your telephone number may be given to the carrier to facilitate the delivery of your order .
• Order and payment data : information necessary for the purchase and payment of our products, such as the products ordered , the transaction amount , the payment method used (e.g., credit card, PayPal), and billing and delivery details ( postal address , billing address ). Origin: provided by you during the ordering process. Use: to fulfill the sales contract, process payment via our secure payment providers, deliver the products, and send invoices and order confirmations . Note: Your payment data (such as credit card numbers) is transmitted securely to our payment provider and is not stored unencrypted on our website. We use an SSL- encrypted connection on the payment pages to protect this sensitive information .
• Browsing and device data : Information automatically collected during your visit to our website through cookies and similar technologies. This may include your IP address , the browser and device used, the referring webpage (original URL), the pages viewed on our site, the duration of your visit , your approximate geographic location , and cookie identifiers. Origin: Collected automatically via your browser and cookies when you interact with the site . Use: To ensure the proper functioning and optimal display of the site on your device, to maintain a personalized user experience (e.g., saving your shopping cart, preferred language), to analyze site traffic and understand how visitors navigate in order to improve our services. This browsing data helps us, for example, to know if you are a new or returning visitor, which pages are most frequently visited, etc., in order to optimize the user experience of our online store. (See the Cookies section below.)
• Communication data : Information you may provide when you contact our customer service or interact with us (for example, via the contact form, email, or social media). This may include your name, contact details, and the content of the conversation. Origin: Provided directly by you when you contact us. Use: To answer your questions, assist you, and improve our customer support.
• Marketing data (optional) : If you have consented to receive our newsletter or promotional offers, we collect your email address and possibly your phone number (for sending marketing SMS messages). Origin: Provided by you when subscribing to the newsletter or via opt-in (checkbox) during a purchase. Use: To send you newsletters, exclusive offers, and personalized marketing communications related to Hidaya Moda. You can withdraw your consent at any time and stop receiving these communications (see User Rights section).

Minors: Our site is not intended for children and teenagers under the age of 16. Therefore, we do not knowingly collect data from anyone under 16. If you are a parent or legal guardian and believe your minor child has provided us with personal information, please contact us so we can delete it .

2. Use of personal data

We use your personal data exclusively for specific and legitimate purposes. Generally, the main uses of your data are:

·         Providing our products and services: processing and fulfilling your orders (preparation, shipping, delivery), handling payment transactions, and providing you with the relevant documents (order confirmation, invoice) . This also includes managing your customer account (purchase history, preferences) and after-sales service (handling returns, exchanges, or refunds where applicable).

·         Customer communication and support: responding to your questions, requests or complaints submitted via customer service or social networks, and informing you of the progress of your orders or any updates to our services (for example, temporary unavailability of the site, changes in conditions).

·         Sending information and marketing offers: If you have consented, we use your contact details to send you our newsletters or other marketing communications (promotions, new products) that may be of interest to you. You will only receive these messages if you have expressly consented by ticking the corresponding box when creating your account or placing an order, or by voluntarily subscribing to the newsletter . You can unsubscribe from these mailings at any time (see Your Rights below).

·         Personalizing the user experience: understanding your shopping preferences and browsing habits to personalize your experience on the site. For example, we can suggest items similar to those you've already viewed or save the items in your shopping cart from one visit to the next.

·         Statistical analysis and website improvement: We evaluate the performance of our website and marketing campaigns using audience analysis tools (e.g., Google Analytics) . This analysis allows us to improve our pages, better tailor our product catalog to customer expectations, and correct any technical issues. The data used for these purposes is aggregated or pseudonymized whenever possible.

·         Targeted advertising: with your consent where required by law, we may use certain browsing and purchase data to offer you targeted advertising on our site or on third-party sites/applications (for example, displaying banners for Hidaya Moda products on Facebook or Google) These advertisements are made possible by the use of cookies or marketing trackers (see the Cookies section). You can object to targeted advertising as explained in the Cookies section.

·         Website security and fraud prevention: We ensure the security of our platform, your accounts, and our transactions. This includes detecting suspicious or malicious activity (e.g., credit card fraud attempts, automated bots) and implementing protective measures. For example, our payment provider, Shopify, may implement automated fraud detection mechanisms (e.g., temporarily blacklisting an IP address after several failed payments) . These processes are designed to protect your interests (preventing fraudulent use of your payment methods) as well as our own, and have no significant legal effect on you.

·         Compliance with legal and regulatory obligations: We process and retain certain personal information to comply with our legal obligations. For example, we retain purchase invoices for the legally required period, respond to official requests from authorities, or comply with tax and accounting obligations.

We do not use your personal data for purposes incompatible with those listed above without your consent. In particular, Hidaya Moda does not sell any personal data to third parties for commercial purposes. Any use of your data not described in this policy will be subject to specific information and, where applicable, your prior consent.

3. Cookies and trackers

Our website uses cookies and similar technologies (pixels, tags, etc.) to function correctly and improve your browsing experience. A cookie is a small text file placed on your device (computer, smartphone, etc.) via your browser when you visit a website. Cookies perform several functions: they allow the website to remember your actions and preferences from one page to another or during subsequent visits (for example, saving the contents of your shopping cart, your language, or region) , to ensure the order process, and to obtain information on how the website is used.

Types of cookies used:

·         Cookies necessary for the website to function : These technical cookies are essential for browsing the website and using its basic features (e.g., accessing your account, adding items to your cart, securing your connection). Without them, the website could not function normally. They do not require your prior consent.

·         Preference cookies: these allow us to remember your choices (e.g. display language, delivery country) in order to improve your experience.

·         Statistics (analytics) cookies: These cookies collect information about website traffic (number of visits, most viewed pages, browsing paths, etc.) . We use this data in aggregate form to understand how to improve our website and services. For example, we may use Google Analytics, a web analytics service provided by Google, to obtain reports on website usage. Important: we have configured these tools so that no directly identifiable data is transmitted (your IP address can be anonymized).

·         Targeted marketing/advertising cookies: These cookies, often issued by third-party partners (e.g., Facebook, Google Ads), allow us to show you personalized ads based on your inferred interests, searches, or actions on our site (products viewed, purchases made, etc.) . For example, if you view a product on our site, you might see an ad for that product on Facebook. These tracking technologies require your explicit consent.

Cookie Management: On your first visit to our site, a cookie banner informs you about the use of these different categories of cookies. You have the option to accept all cookies, refuse them (except for strictly necessary cookies), or customize your cookie choices individually. You can change your cookie preferences at any time (via the "Cookie Policy" link or your browser settings). Most browsers allow you to block or delete existing cookies . Note : Refusing optional cookies will not prevent you from browsing the site, but some enhanced features (such as personalized recommendations) may be limited. Similarly, blocking advertising cookies will not completely stop online advertising, but the ads will no longer be tailored to your interests .

To learn more or adjust your settings, see our separate Cookie Policy (final section of this document) or your browser's help menu.

4. Legal basis for processing (GDPR)

In accordance with the General Data Protection Regulation (GDPR), each processing of your personal data is based on a valid legal basis (Article 6 of the GDPR). In practice, we process your data on the following legal bases:

·         Contract performance – Most of the data we collect is for the purpose of performing the sales contract we have with you. For example, processing your order and payment, delivering purchased products, or providing you with requested services (managing your customer account) cannot be done without using this data. This legal basis also applies to pre-contractual measures taken at your request (e.g., estimating delivery costs, answering a question before purchase).

·         Consent – ​​We ask for your consent for certain specific processing activities, such as sending marketing emails or SMS newsletters, placing analytical and advertising cookies, or participating in loyalty programs. When you consent, you can withdraw your consent at any time; this will not affect processing already carried out, but we will cease processing in the future. .

·         Legal obligation – Certain data processing activities are mandated by law or regulation . This is the case, for example, with the retention of customer invoices (accounting/tax obligation) or the disclosure of data to authorities in the event of a legal request. We cannot avoid these obligations.

·         Legitimate interest – We may process certain data for legitimate interests that do not infringe upon your fundamental rights and freedoms . For example, statistical analysis of website usage to improve our services, fraud prevention, or sales statistics fall within our legitimate business interest. Similarly, retaining your contact details for customer relationship purposes (excluding legal obligations) for a reasonable period may be justified by our interest in providing you with personalized support. In all cases, we balance our interests with respect for your privacy to ensure they are compatible. You may object to this processing based on legitimate interest for reasons relating to your particular situation (see User Rights).

(Less common bases:) Vital interest – a very rare scenario where processing your data would be necessary to protect your vital interests (e.g., a medical emergency). Public interest mission – as Hidaya Moda is a private company, we do not undertake any public interest missions; therefore, this basis is not used in our context. .

5. Sharing data with third parties

Your personal data may be shared with trusted third parties in the cases and for the purposes described below. Hidaya Moda only discloses your information to service providers or partners strictly necessary for its business, and always in compliance with applicable regulations. These third parties act either as data processors acting on Hidaya Moda's instructions or as independent entities responsible for processing certain services. In all cases, we ensure that these recipients provide appropriate guarantees of confidentiality and security for your data.

Here are the categories of recipients with whom we may share data:

·         E-commerce platform (website hosting) : Our online store is developed and hosted on the Shopify platform. As such, Shopify processes some of your data on behalf of Hidaya Moda, specifically for hosting the customer and order database, managing the payment system, and the website's technical infrastructure . Your browsing and purchase data therefore passes through Shopify's secure servers. You can consult Shopify's privacy policy for more details on how this platform uses your data .

·         Payment Providers : To process your orders, we use third-party payment solutions (e.g., banks, online payment services such as Stripe, PayPal, Klarna, etc.). These providers process the payment information you provide (card number, bank details) securely and in accordance with financial security standards. They may receive data such as the transaction amount, your name, and address to verify and validate the transaction. For example, if you choose to pay in installments via Klarna, some of your personal data (identity, contact information, order details) will be transmitted to Klarna so they can assess your eligibility for this payment method . These payment providers act as separate data controllers for your payment data and have their own legal obligations regarding data protection.

·         Carriers and delivery services : To ship your orders, we share with the chosen carrier (La Poste, Colissimo, DHL, UPS, or other logistics provider) the information strictly necessary for the delivery of your package. This includes your name, delivery address, and telephone number (to facilitate package delivery or tracking notifications) . This data allows the carrier to deliver your order to you.

·         Analytics and Advertising Tools : As mentioned in the Cookies section, we use third-party services to analyze website traffic and deliver targeted advertising. For example, Google Analytics may collect browsing data (anonymized IP address, pages viewed, etc.) to provide us with reports on website visits . Similarly, we may share certain data (products purchased, customer category) with advertising partners such as Facebook or Google Ads , via cookies or pixels, to retarget our customers with relevant ads . These partners may therefore have access to pseudonymized information about your use of our site. This sharing only occurs with your consent (consent to marketing cookies). You can object to this type of advertising processing at any time (see Cookie Policy and User Rights).

·         Technical service providers : We may use other service providers for specific services, such as sending transactional emails or newsletters (email marketing service), hosting backup databases, technical maintenance, etc. These providers may need access to certain data as part of their duties. They act as data processors and are contractually obligated to process the data entrusted to them only on our behalf and according to our instructions, ensuring its confidentiality. .

·         Legal authorities and public bodies : We may be required to disclose your personal data if we are legally obligated to do so or upon formal request from an authority (example: judicial request, court order, police requisition) In this case, we only provide the information legally required. Similarly, if we believe in good faith that such disclosure is reasonably necessary to detect or prevent illegal activity, suspected fraud, to enforce our General Terms and Conditions of Sale, or to protect the safety of Hidaya Moda, our customers, or the public, we may share the relevant data with the competent authorities .

Guarantees with our subcontractors: All service providers who process personal data on our behalf (subcontractors) are bound by contracts that include data protection clauses compliant with Article 28 of the GDPR. In particular, they must provide sufficient guarantees regarding the implementation of appropriate technical and organizational measures to ensure that the processing meets regulatory requirements and protects your rights. They are not permitted to use your data for purposes other than those we have specified.

Finally, as previously stated, we do not sell your data to third-party marketing companies or exchange your personal information for financial gain . In the event of a change in our company's organization (e.g., merger, acquisition, or transfer of business), your data may be among the assets transferred to the successor entity, but you would be notified, and this privacy policy would continue to apply to your information as appropriate. .

6. Your rights as a user

In accordance with applicable data protection legislation (GDPR and the French Data Protection Act), you have rights regarding your personal data. These rights can be exercised within the limits set by law, and some of them only apply in certain situations. We are committed to facilitating the exercise of your rights and responding to your requests within the legal timeframes. Your rights include:

·         Right of access : You have the right to obtain confirmation that we hold personal data concerning you, and to receive an intelligible copy of that data, as well as information on the processing carried out (purposes, categories of data, recipients, etc.). In other words, you can ask us what information we hold about you and what it is used for. .

·         Right to rectification : If you find that any personal data concerning you is inaccurate or incomplete, you can request that it be corrected or completed in our records . For example, updating your address if it has changed, correcting the spelling of your name, etc. We will ensure that the correction is made as soon as possible.

·         Right to erasure (or right to be forgotten ): In certain cases, you can request the deletion of your personal data. This right applies, for example, if the data is no longer necessary for the purposes for which it was collected, if you withdraw your consent (for data processed on that basis), or if you object to processing and there are no overriding legitimate grounds for retaining it. We will then erase your data, unless its retention remains required by law or for the establishment, exercise, or defense of legal claims. .

·         Right to object : You have the right to object at any time, on grounds relating to your particular situation, to certain processing of your data based on legitimate interest . If you exercise this right, we will cease the processing in question unless there are compelling legitimate grounds for continuing it (for example, the need to retain certain data to comply with the law). Important: You can always object, without giving a reason, to the use of your data for marketing purposes. For example, you can request to stop receiving newsletters by unsubscribing or contacting us – an unsubscribe link is included in every email .

·         Right to restriction of processing : This right allows you to ask us to temporarily freeze the use of some of your data , for example, while we verify a request for rectification or the grounds for an objection. When the restriction is granted, we will no longer be able to process the data in question (except for storage) without your consent, except for certain purposes (exercising legal rights, protecting another person, or complying with a legal obligation).

·         Right to data portability : For data you have provided directly to us, and which is processed automatically based on your consent or a contract, you have the right to receive a copy in a structured, commonly used, and machine-readable format . This allows you to easily reuse or transmit it to another organization. Upon request and where technically feasible, we can also transfer this data directly to another data controller you designate.

·         Right to withdraw your consent : For all processing based on consent (e.g., sending marketing communications, use of optional cookies), you can withdraw your consent at any time. Simply unsubscribe or change your preferences (via the unsubscribe link in emails, by adjusting your cookie settings, or by contacting us). Withdrawal of consent is not retroactive: processing carried out beforehand remains valid, but we will no longer use your data for those purposes in the future .

·         Right not to be subject to automated decision-making : Hidaya Moda does not make any decisions with significant legal effects concerning you based solely on automated processing (without human intervention). For example, we do not use automated profiling systems that would automatically reject an order based on your personal data. Should we consider such a process, you would have the right to request human intervention and express your point of view. Currently, the only automated processing implemented is for fraud detection by our service provider (e.g., temporary IP blocking after repeated failed attempts), which has no significant impact on users. .

·         Post-mortem directives : In France, you have the right to define directives regarding the fate of your personal data after your death (retention, deletion, disclosure). You can provide us with such instructions, which we will respect when the time comes.

Exercising your rights: These rights can be exercised free of charge (unless the request is manifestly unfounded or excessive) by contacting us using one of the methods indicated in the Contact section. To ensure we can respond promptly, please specify the right you wish to exercise and any information that will allow us to identify you (e.g., the email address linked to your account or order). We may, if necessary, ask you for proof of identity to verify that the request is indeed from the person concerned . We will strive to respond as soon as possible and at the latest within one month of receiving your request, with a possible extension to two months in the case of a complex request (we will inform you if this is the case).

No discrimination: Exercising your rights will not negatively impact the availability of our services. We do not discriminate against or penalize individuals exercising their rights (in accordance with the GDPR).

Complaint to the authority : If, despite all our efforts, you believe that your rights are not being respected or that the protection of your personal data is not being ensured in accordance with regulations, you have the option of filing a complaint with the supervisory authority in your country. In France, this is the CNIL (National Commission for Information Technology and Civil Liberties). You can contact the CNIL via its website www.cnil.fr. However, we encourage you to contact us first so that we can seek an amicable solution to your request. If you are not satisfied with our response, you retain the right to appeal to the CNIL or another competent European authority .

7. Data retention period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. After this period, the data is either deleted or irreversibly anonymized to prevent you from being identified.

In practice:

·         Customer account data : retained as long as your account is active. If you no longer use your account, we may deactivate it and delete the associated data after a period of inactivity of 2 years . Before deletion, you will be notified in advance and you will have the option to request that your account be retained if you wish.

·         Order and billing data : kept for 10 years from the date of the order , in secure archiving, in accordance with legal accounting and tax obligations in France (article L123-22 of the Commercial Code) Your purchase documents (invoices) and associated information (order details, identity, payment) are therefore archived for this period for legal proof purposes.

·         Prospect data (newsletter) : If you are not a customer but are subscribed to our newsletter, we retain your data until you unsubscribe or for 3 years after your last contact. After these 3 years without any interaction from you, we will delete or anonymize your contact data, unless you consent to continue retaining it.

·         Browsing data and cookies : Cookies each have a limited lifespan. We comply with the CNIL's recommendations on this matter. Analytical and marketing cookies are not stored for more than 13 months on your browser (and the information collected via these cookies is stored for a maximum of 25 months in aggregate form). Necessary cookies may have a longer lifespan (up to 24 months for some) because they are essential for long-term operation , but you can delete them at any time via your browser. (See Cookie Policy.)

·         Communications : Emails or messages exchanged with our customer service may be kept for a few months (maximum 2 years) after your request has been resolved, then deleted, unless their longer retention is justified (e.g., unresolved dispute).

·         Security logs : the site's technical logs (connections, errors, event logs) are kept for a few months for security and auditing purposes, then purged regularly, except for a specific incident requiring their prolonged retention (security investigation).

Upon expiry of the above retention periods, or if you expressly request it beforehand and conditions permit, we will securely delete your personal data. In some cases, instead of permanent deletion, we may anonymize the data (for example, to maintain aggregate sales statistics). Exception: when the law requires us to retain data for a longer period, or when your data is necessary to establish, exercise, or defend legal claims, we may be required to retain it despite your deletion request, but we will inform you accordingly. .

8. Data transfers outside the European Union

Hidaya Moda primarily stores and processes your data within the European Union. However, in some cases, your data may be transferred outside the EU, particularly due to the use of services provided by international companies. For example, the Shopify platform hosts data on servers that may be located in Canada or the United States , and some of our service providers (Google, Facebook, etc.) are based in the United States or other countries outside of Europe.

We take all appropriate measures to ensure an adequate level of protection for your information during these transfers. When the recipient country does not have an adequacy decision from the European Commission (i.e., a level of data protection deemed equivalent to European law), we govern the transfers with appropriate contractual safeguards , for example, by signing the European Commission's Standard Contractual Clauses . These standard clauses guarantee that your personal data receives the same protection as in the EU, by imposing strict confidentiality and security obligations on recipients.

In the specific case of Canada , the country benefits from partial adequacy recognition by the EU for commercial organizations (PIPEDA law), which covers Shopify, headquartered in Canada. Data transferred to Shopify is therefore protected in accordance with the GDPR . For service providers based in the United States, we ensure they comply with the required mechanisms (such as the aforementioned Standard Contractual Clauses, and/or the new EU-US Transatlantic Data Privacy Framework where applicable).

You can request further information from us regarding international data transfers concerning you (e.g., a copy of the standard contractual clauses signed with our service providers, subject to commercial confidentiality). Despite these measures, it is possible that foreign local authorities may access your information under local laws (e.g., surveillance laws). We will ensure that we only transfer the minimum amount of data necessary and consistent with its intended use.

9. Data Security

The security of your data is a priority for Hidaya Moda. We implement appropriate technical and organizational security measures to protect your information against unauthorized access, disclosure, alteration, or destruction. This includes: encrypting communications on our website using the HTTPS/SSL protocol (indicated by a small padlock icon in the address bar, guaranteeing the confidentiality of transmitted data) , storing your data on secure servers, protecting our databases (firewalls, strict access controls, pseudonymization of certain sensitive data), and internal procedures limiting access to your data to only those employees and service providers who need it to operate the service, under a strict confidentiality agreement.

We also encourage you to help protect your data by choosing a strong password and not sharing it with anyone. If you suspect your account has been compromised (e.g., unauthorized access), please notify us immediately so we can take the necessary steps (blocking the account, resetting the password, etc.).

Despite our best efforts, no system is 100% infallible. In the event of a data breach likely to pose a high risk to your rights and freedoms (e.g., a leak of sensitive personal data), we will notify you as soon as possible and take appropriate corrective measures in accordance with legal requirements.

10. Privacy Policy Updates

We may occasionally modify this Privacy Policy, particularly to reflect changes in our practices or to comply with new legal or regulatory obligations. In the event of a significant change affecting your rights, we will notify you via the website or by email (e.g., the next time you log in) . We encourage you to check this page regularly to stay informed about the latest ways your data is processed. The date of the last update is shown at the top of the document.

By continuing to use our site or services after these changes take effect, you agree to the updated policy. If you do not agree with the terms of the new policy, you may exercise your rights (including the right to erasure) or discontinue using our services.

11. Contact and complaints

For any questions, requests for further information about our Privacy Policy, or to exercise your rights, you can contact us as follows :

·         By email : privacy@hidaya-moda.fr (or) contact@hidaya-moda.fr

·         By post : Hidaya Moda, Data Protection Department, [full postal address in France].

We place the utmost importance on processing your requests as quickly as possible and to your satisfaction. For any complaint or report concerning the management of your personal data, please contact us using the contact details above. We will review your request promptly and get back to you within a maximum of one month, as previously stated. If you feel that our response is not satisfactory, you can contact the CNIL (French Data Protection Authority) or your local data protection authority.

Cookie Policy (summary)

Cookies are small text files placed on your device when you visit our website, and they record information about you. We use cookies to ensure the website functions properly , to improve your experience, and to collect anonymous statistical data. Some cookies may also be used to show you advertisements tailored to your interests on third-party websites.

·         Strictly necessary cookies : essential for using the website (e.g., remembering your shopping cart, allowing you to log in). You cannot disable them because the website would not function without them.

·         Performance/analytics cookies : These help us understand how you use the site (pages visited, time spent, etc.) in order to improve our services . The data collected (by Google Analytics or equivalent tools) is aggregated and does not allow us to directly identify you.

·         Functionality cookies : remember your choices (language, country, session ID) to personalize the experience.

·         Advertising cookies : used, with your consent, to show you relevant ads on or off our site. They may be issued by our advertising partners. For example, Facebook/Google cookies may record that you have visited our site and then show you an ad for our products. .

Your choice: On your first visit, a banner allows you to accept or refuse non-essential cookies. You can change your preferences at any time by clicking on the "Cookie settings" link (website footer) or via your browser settings. You will also find a dedicated page on our website explaining how to do this. Please note that refusing advertising cookies does not mean no advertising will occur, but the ads will not be personalized. Similarly, disabling analytics cookies does not affect your browsing experience on the site.

For more information about our use of cookies, a detailed list of them, and your choices, please see our full Cookie Policy (accessible via the "Cookie Policy" link on our website). If you have any questions, please don't hesitate to contact us. Your consent to cookies is valid for a maximum of 13 months, after which we will ask for it again.

Thank you for your trust and we wish you a pleasant browsing experience on Hidaya Moda. Your data and privacy will always remain protected and respected, in accordance with our commitments and applicable regulations.