Privacy Policy
Last updated: June 13, 2025
L'Éclat du Sourcil, located at 56 rue de Malte, 75011 Paris, France, processes personal data as the data controller in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).
1. Data Collected
We only collect personal data that is strictly necessary in the following situations:
• When placing an order (first name, last name, address, email, phone number, delivery information),
• When contacting us via contact form or email.
We do not collect any sensitive data.
We do not collect browsing data for analytics or marketing purposes.
2. Purpose of Data Processing
Personal data is used for the following purposes:
• Order processing and tracking,
• Customer service management,
• Invoicing,
• Sending information or marketing communications (with your consent).
3. Legal Basis
Processing is based on:
• The performance of a contract (orders),
• Our legitimate interest (customer service),
• Or your consent (newsletter, contact forms).
4. Data Retention
Your data is retained:
• During the duration of the commercial relationship,
• Then archived for 5 years for legal and accounting purposes.
5. Data Recipients
Your data is only accessible to L'Éclat du Sourcil and technical service providers strictly necessary for the operation of the website.
In particular:
• Hosting: Some technical data may be transferred outside the European Union, especially to the United States, through our hosting provider Vercel Inc. These transfers are governed by the Standard Contractual Clauses approved by the European Commission.
• Payments: Payment data is processed by our provider Stripe, which may transfer some data outside the European Union, particularly to the United States. These transfers are also covered by the Standard Contractual Clauses approved by the European Commission.
No other data transfers outside the European Union are performed.
6. Security
We implement appropriate technical and organizational measures to protect your data against loss, alteration, unauthorized access, or disclosure.
7. Your Rights
Under the GDPR, you have the following rights:
• Right of access to your data,
• Right to rectification,
• Right to erasure ("right to be forgotten"),
• Right to restrict processing,
• Right to object,
• Right to data portability.
To exercise your rights, you may contact us at: contact@leclatdusourcil.com.
You may also file a complaint with the CNIL (www.cnil.fr).
8. Cookies
The website www.leclatdusourcil.com only uses essential technical cookies necessary for the proper functioning of the site (e.g., cart management, security, display).
No advertising or analytics cookies (such as Google Analytics) are used.
As a result, no cookie consent banner is displayed, in accordance with CNIL recommendations.