Last updated: April 28, 2026.

This Privacy Policy describes how Paradermia collects, uses, protects, and shares your personal data, in compliance with the General Data Protection Regulation (GDPR — EU 2016/679) and the amended Data Protection Act of January 6, 1978.

Data Controller

The data controller for your data is the company Paradermia (SASU), whose full contact details are provided in our Legal Notice.

For any questions regarding the processing of your data or to exercise your rights, you can contact us at: contact@paradermia.com.

Data Collected

We collect the following categories of data:

  • Identification data: surname, first name, title, date of birth (where applicable).
  • Contact data: postal address, email address, phone number.
  • Order data: products ordered, amount, date, delivery and billing address.
  • Payment data: banking information is collected and processed exclusively by our payment provider (Shopify Payments). No banking data is stored on our servers.
  • Diagnostic quiz data: anonymous answers or linked to your account if you wish (skin type, objectives, sensitivities, lifestyle).
  • Browsing data: IP address, browser type, pages viewed, visit duration, traffic source, data collected via cookies.

Purposes and Legal Basis

Your data is processed for the following purposes:

  • Order fulfillment and delivery (legal basis: performance of a contract, Art. 6.1.b GDPR).
  • Customer account management and after-sales service (performance of a contract).
  • Personalization of recommendations via the diagnostic quiz (consent, Art. 6.1.a).
  • Sending commercial communications and newsletters (consent, revocable at any time via the unsubscribe link).
  • Compliance with legal and accounting obligations (legal obligation, Art. 6.1.c).
  • Website security and fraud prevention (legitimate interest, Art. 6.1.f).
  • Anonymized statistics and service improvement (legitimate interest).

Recipients of the Data

Your data is accessible, within the limits of their respective missions, to the following recipients:

  • Authorized personnel of Paradermia.
  • Shopify Inc. — hosting, order management, and payment (Shopify Payments).
  • Klaviyo — management of transactional and marketing emails (subject to your consent).
  • Our partner carriers and logistics providers to ensure delivery.
  • Administrative or judicial authorities upon legal requisition.

Transfers Outside the European Union

Some of our service providers (Shopify, Klaviyo) may host or process data in countries outside the European Union (Canada, United States). These transfers are governed by the tools provided by the GDPR: European Commission's adequacy decisions, standard contractual clauses, or other appropriate safeguards.

Retention Period

Your data is retained for a period not exceeding that necessary for the purposes of processing:

  • Customer account data: duration of the commercial relationship, then 3 years from the last interaction.
  • Billing data: 10 years from the close of the accounting year, in accordance with the French Commercial Code.
  • Commercial prospecting data: 3 years from the last active contact from the prospect.
  • Cookies and trackers: maximum 13 months.
  • Quiz data: retained as long as your account is active, or anonymized for statistics.

Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

  • Right of access to your data.
  • Right to rectification of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"), subject to legal retention obligations.
  • Right to restriction of processing.
  • Right to object to processing, particularly for commercial prospecting purposes.
  • Right to data portability.
  • Right to define directives regarding the fate of your data after your death.
  • Right to withdraw your consent at any time when processing is based on it.

How to Exercise Your Rights

To exercise your rights, you can write to us at contact@paradermia.com, specifying the subject of your request and attaching, if applicable, a copy of an identity document. We commit to responding within one month of receiving your request.

Complaint to the CNIL

If you believe that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

  • Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
  • Website: www.cnil.fr

Cookies and Trackers

The site uses cookies and trackers for various purposes: shopping cart functionality, preference memory, audience measurement, personalization, marketing. You can manage your preferences at any time from the cookie management banner. For non-strictly necessary cookies, your consent is required before any deposit.

Security

We implement appropriate technical and organizational measures to protect your data against loss, alteration, disclosure, or unauthorized access: HTTPS encryption, application firewalls, access control, regular backups.

Policy Changes

We reserve the right to modify this Privacy Policy at any time. The date of the last update appears at the top of the document. In the event of substantial changes, we will inform you by any appropriate means.