Privacy Policy & GDPR Compliance

Effective as of 01/01/2026

 

Article 1 – Introduction

The purpose of this privacy policy is to inform users of the sarah-cosmetiques.fr website about how their personal data is collected, used, and protected, in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the French Data Protection Act.

 

Article 2 – Data controller

The data controller is: MAJDOUB Sarah

Address: 500 rue Léo Brun, 06210 Mandelieu-la-Napoule

Email : Sarah.ali161999@gmail.com

 

Article 3 – Personal data collected

As part of its business, the Sarah-cosmetiques.fr website collects personal data via:

  • The contact form for professional make-up services;
  • Orders for cosmetic products placed on the website.

The personal data that may be collected includes:

  • First and last name
  • Postal address
  • Email address
  • Telephone number
  • Payment details (managed by secure service providers)
  • Information about the event (date, location)

 

Article 4 – Purposes of processing

Personal data is collected for the following purposes:

  • Responding to requests for quotes and organising make-up services;
  • Managing orders for cosmetic products;
  • Ensuring invoicing and delivery;
  • Communicating with customers;
  • Compliance with legal and accounting obligations.

 

Article 5 – Legal basis for processing

Data processing is based on:

  • The performance of a contract (order)
  • The user’s consent
  • Compliance with a legal obligation
  • The legitimate interest of the data controller

 

Article 6 – Recipients of the data

Data may be transmitted to the following service providers:

  • Secure payment providers
  • Delivery services

These service providers are subject to a confidentiality obligation.

 

Article 7 – Shelf life

Personal data is retained for:

  • Customer data: 3 years after the last contact
  • Billing data: 10 years (legal obligation)
  • Cookies: 13 months maximum

 

Article 8 – Data security

The data controller implements all necessary technical and organisational measures to ensure the security and confidentiality of personal data (secure access, protected hosting, payment encryption).

 

Article 9 – User rights

In accordance with the GDPR, users have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to object
  • Right to restriction of processing
  • Right to data portability

Any requests can be sent by email to: Sarah.ali161999@gmail.com

 

 

Article 10 – Cookies

The website only uses cookies that are strictly necessary for its proper functioning, in particular for:

  • Managing the shopping basket and product orders;
  • The security and proper display of the website.

These cookies do not require the user’s prior consent in accordance with the recommendations of the CNIL (French Data Protection Authority).

No audience measurement or marketing cookies are used.

 

Article 11 – Complaint to the CNIL

If the user considers that their rights have not been respected, they may lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés): https://www.cnil.fr

 

Article 12 – Policy change

The data controller reserves the right to modify this policy at any time.

The current version is the one published on the website.

Scroll to Top