PRIVACY & PERSONAL DATA PROTECTION POLICY

COSMETIC FAMILY pays special attention to the protection of the personal data of each user of its website and is committed to ensuring the highest level of protection.

To deliver its services, COSMETIC FAMILY collects personal data from visitors of its website www.cosmeticfamily.com.

COSMETIC FAMILY, acting as the Data Controller, undertakes to comply with the provisions of the French Data Protection Act (Loi n°78-17 of January 6, 1978, as amended) as well as the General Data Protection Regulation (GDPR) n°2016/679 of April 27, 2016.

For any additional information on personal data protection, you can consult the website of the French National Commission on Informatics and Liberty (CNIL): www.cnil.fr.

1. What is the Purpose of Collecting Your Personal Data?

COSMETIC FAMILY only uses your personal data if it has a valid legal basis. We rely on the following legal grounds:

• Performance of a contract: To process your orders, deliver your products, or manage your customer account.

• Your consent: To send newsletters or use certain cookies.

• Legitimate interest: To improve our products and services or secure our website.

• A legal obligation: For invoicing and accounting.

Details of our processing purposes:

• Order management: Processing, delivery, invoicing, management of complaints, withdrawals, and product returns.

• Transactions: Processing and securing payments.

• Customer relations: Creation and management of customer accounts, communication with customer service.

• Experience improvement: Evaluation and improvement of our products, statistical analysis of website traffic, market research, and profiling.

• Marketing communication: Sending newsletters and special offers (subject to your express consent).

• Promotional events: Organizing contests and giveaways.

2. How Long is the Data Kept?

Unless there is a specific legal obligation, COSMETIC FAMILY applies the retention periods recommended by the CNIL:

Data Type	Retention Period
Prospect data (without purchase)	3 years from the last active contact (e.g., clicking on an email).
Customer data	3 years from the last purchase or last activity.
Cookies and trackers	13 months maximum after being placed on your device.
Invoicing data	10 years (French legal and accounting obligation).

3. What Are Your Rights and How Can You Exercise Them?

3.1 Your Rights Regarding Your Data

In accordance with European regulations, you have the following rights:

• Right of access: To obtain confirmation that your data is being processed and to receive a copy of it.

• Right to rectification: To correct inaccurate or incomplete data.

• Right to erasure ("right to be forgotten"): To request the deletion of your data within the limits provided by law.

• Right to object: To object at any time to a processing activity, particularly for commercial prospecting or profiling purposes.

• Right to restriction of processing: To temporarily suspend the use of your data.

• Right to data portability: To retrieve your data in a structured format to transmit it to a third party.

• Withdrawal of consent: To withdraw your consent at any time for processing activities based on this ground.

Data Security: If COSMETIC FAMILY detects a personal data breach likely to result in a high risk to your rights and freedoms, you will be informed of this breach as soon as possible.

3.2 How to Exercise Your Rights?

You can submit your request through two means:

• By mail:

  COSMETIC FAMILY

  437 chemin du Caladou

  06560 VALBONNE (France)

• By email: client@malouetmarius.com

To help us process your request efficiently, please provide your first name, last name, email address, and, if possible, your customer reference. Proof of identity may be requested in case of reasonable doubt regarding your identity.

We commit to responding to you within a maximum of one month (this period may be extended by two months in the case of complex requests or a high volume of simultaneous requests).

4. Who Are the Recipients of Your Data?

4.1 Processors and Partners

Your data may be transmitted to rigorously selected third-party technical service providers located within the European Union, solely for the purposes of our services:

• Secure payment providers.

• Carriers and logistics providers.

• IT hosting services and email delivery tools.

4.2 Non-Partner Third Parties

COSMETIC FAMILY undertakes not to sell or lease your personal data to third parties for marketing or commercial purposes.

4.3 Links to Third-Party Websites

Our website may contain links to external websites. COSMETIC FAMILY has no control over these sites and declines all responsibility for their privacy policies or how your data is processed on these external platforms. We encourage you to review their respective privacy policies.

5. What are the Rules Concerning Commercial Prospecting?

COSMETIC FAMILY complies with the principle of prior consent (opt-in) for sending commercial prospecting by electronic means (email or SMS), in accordance with Directive 2002/58/EC.

• By email: You will only receive our offers if you expressly checked the acceptance box when registering.

• The similarity exception: If you are already a customer of ours, we may send you offers by email for products similar to those you have already purchased, unless you object.

How to Object to Prospecting?

• Do not check the dedicated box when creating your account.

• Click on the unsubscribe link located at the bottom of each of our emails.

• Reply "STOP" to any commercial SMS received.

• Contact us directly by email at client@malouetmarius.com.

Telephone Marketing: If you do not wish to be contacted by phone for marketing purposes, you can register for free on the French telephone marketing opt-out list via www.bloctel.gouv.fr.

6. What is a Cookie and What is its Purpose?

A cookie is a small text file placed on your terminal (computer, tablet, or smartphone) when visiting a website. It helps facilitate navigation and remembers your preferences.

When you browse the COSMETIC FAMILY website, we collect standard connection information (IP address, browser type, pages visited, date and time of connection). This data allows us to analyze website traffic and improve its usability.

You can configure your web browser to refuse cookies or to alert you before they are placed. Please note that disabling certain cookies may affect your user experience on our website.

7. What is the Purpose of Web Beacons?

Some pages of our website may contain web beacons (also known as clear GIFs or pixels) that count visitors and gather anonymous traffic statistics to optimize our services.

This information is strictly anonymous and is only used to evaluate the effectiveness of our campaigns and our website.