Privacy Policy & GDPR Compliance
Effective as of 01/01/2026
Article 1 – Introduction
The purpose of this privacy policy is to inform users of the sarah-cosmetiques.fr website about how their personal data is collected, used, and protected, in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the French Data Protection Act.
Article 2 – Data controller
The data controller is: MAJDOUB Sarah
Address: 500 rue Léo Brun, 06210 Mandelieu-la-Napoule
Email : Sarah.ali161999@gmail.com
Article 3 – Personal data collected
When using the website, certain personal data may be collected, including:
- First and last name,
- Email address,
- Telephone number,
- Information about the event (date, location),
- Delivery address (when ordering cosmetic products).
Article 4 – Purposes of processing
Personal data is collected for the following purposes:
- Responding to requests for quotes and organising make-up services,
- Managing orders for cosmetic products,
- Communicating with customers,
- Improving the user experience of the website.
Article 5 – Legal basis for processing
Data processing is based on:
- The user’s consent
- Compliance with a legal obligation
- The legitimate interest of the data controller
Article 6 – Shelf life
Personal data is retained for:
- Customer data: 3 years after the last contact
- Cookies: 13 months maximum
Article 7 – Data security
The data controller implements all necessary technical and organisational measures to ensure the security and confidentiality of personal data (secure access, protected hosting).
Article 8 – User rights
In accordance with the GDPR, users have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to object
- Right to restriction of processing
- Right to data portability
Any requests can be sent by email to: Sarah.ali161999@gmail.com
Article 9 – Cookies
The website only uses cookies that are strictly necessary for its proper functioning, in particular for:
- The security and proper display of the website.
These cookies do not require the user’s prior consent in accordance with the recommendations of the CNIL (French Data Protection Authority).
No audience measurement or marketing cookies are used.
Article 10 – Complaint to the CNIL
If the user considers that their rights have not been respected, they may lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés): https://www.cnil.fr.
Article 11 – Policy change
The data controller reserves the right to modify this policy at any time.
The current version is the one published on the website.
