Privacy Policy (GDPR)

ARTICLE 1: PREAMBLE

This privacy policy is intended to inform users of the website:

• How their personal data is collected. “Personal data” means any information that can identify a user, such as first and last name, age, postal or email address, location data, or IP address (non-exhaustive list);

• The rights they have over this data;

• The identity of the person responsible for processing personal data collected and processed;

• The recipients of this personal data;

• The site’s cookie policy.

This policy supplements the Legal Notice and the Terms of Use available at: 👉 www.skincareparis.net

ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of Regulation (EU) 2016/679, personal data shall be:

• Processed lawfully, fairly, and transparently;

• Collected for specified, explicit, and legitimate purposes;

• Adequate, relevant, and limited to what is necessary;

• Accurate and kept up to date;

• Stored for a limited and appropriate period;

• Secured against any unauthorized or unlawful processing, loss, or damage.

Processing is lawful when at least one of the following applies:

• The data subject has given consent;

• Necessity for the performance of a contract or pre-contractual measures;

• Legal obligation;

• Vital interests;

• Task carried out in the public interest;

• Legitimate interests pursued by the controller or a third party.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING BROWSING
3.1 Data collected

The personal data collected in the course of our activity includes:
$List here the data collected: name, email, postal address, delivery address, billing address, phone number, order history, etc.$

Purposes:

• Management of the customer account

• Order tracking

• Sending newsletters

3.2 Collection methods

When you use our site, we automatically collect:

• Information about your device, browser, pages viewed, IP address, delivery and billing information.

Data also collected depending on your actions:

• ✅ Browsing ➔ to improve your experience

• ✅ Ordering ➔ for processing and delivery

• ✅ Protection ➔ for security and fraud prevention

• ✅ Marketing ➔ only with your consent

Data is retained for 1 year, unless a legal obligation requires a longer period.

3.3 Data hosting

The website www.skincareparis.net is hosted by:
Shopify Inc.
Contact: info@skincareparis.com

ARTICLE 4: DATA CONTROLLER & DATA PROTECTION OFFICER
4.1 Data Controller

Data is collected by:
Email: info@skincareparis.com

4.2 Data Protection Officer (DPO)
Email: info@skincareparis.com

If a dispute remains unresolved, you may contact the CNIL (French Data Protection Authority).

ARTICLE 5: USER RIGHTS

Every user has the following rights:

• Right of access, rectification, and erasure (Articles 15–17 GDPR)

• Right to data portability (Article 20)

• Right to restriction and objection (Articles 18 and 21)

• Rights related to automated individual decision-making

• Directions regarding the fate of personal data after death

• Right to lodge a complaint with the supervisory authority (CNIL)

To exercise your rights:
XXX
or by email at: info@skincareparis.com

Proof of identity may be requested (first name, last name, email, customer account).

ARTICLE 6: CHANGES TO THIS POLICY

The publisher of the SkinCareParis website reserves the right to amend this Policy at any time. Previous versions remain applicable to past purchases.

Users are encouraged to review this Policy regularly.

Last edited: July 28, 2025
Updated: August 1, 2025