Privacy Policy

The data controller is BELYZ LASH (trading as BELYZLASH), represented by its President, Elysza De Magalhaes. For the collection of data by the Meta pixel and its transmission to Meta, BELYZ LASH and Meta Platforms Ireland Limited are joint controllers; the same applies to BELYZ LASH and Pinterest Europe Ltd. for the collection of data by the Pinterest pixel and its transmission to Pinterest (see the Recipients of the data section).

Contact: contact@belyzlash.fr

We collect the following data:

• Identification data: surname, first name, e-mail address, postal address, telephone number.

• Order data: products purchased, amount, order history.

• Payment data: processed securely by our payment provider (BELYZLASH does not store your full bank details).

• Browsing data: IP address, cookies, pages viewed, where your visit came from (see the Cookies section).

• Email data: opening of our emails and clicks on their links, measured by our sending tool.

• Data from your requests: back-in-stock alert, live session reminder, application to the ambassador programme (answers to the questionnaire).

• Orders placed on a marketplace: if you order through TikTok Shop or Amazon, the platform sends us the data needed for delivery.

• Customers of our previous shop: the accounts and order history of our former online shop (WooCommerce) were transferred to Shopify when we changed platform.

Your data is used to:

• process and deliver your orders;

• manage the customer relationship and after-sales service;

• manage registrations for training courses;

• send you marketing communications by e-mail (newsletter, new products, offers), under the conditions set out in the Legal basis section;

• improve our website and our services;

• comply with our legal and accounting obligations;

• let you know, at your request, when a product is back in stock or when the next live session starts;

• remind you by email of an order you did not complete;

• review and answer applications to the ambassador programme;

• measure the website's audience, the opening of our emails and where our orders come from;

• collect your reviews of our products;

• measure the effectiveness of our advertising on Facebook and Instagram and show you targeted ads there, with your consent;

• measure the purchases resulting from our advertising on Pinterest and show you targeted ads there, with your consent;

• prevent fraud at checkout, through Shopify's automatic analysis of each order.

The processing operations are based on: performance of the contract (orders, training courses), your consent (newsletter sign-up, non-essential cookies), our legitimate interest (improvement of services, marketing e-mails sent to customers and beauty professionals under the conditions described below) and compliance with legal obligations (invoicing).

Marketing e-mails. If you are a customer, we may send you e-mail offers for products similar to those you have bought from us, without prior consent, as permitted by Article L.34-5 of the French Postal and Electronic Communications Code. If you are a beauty professional, we may send you offers for products related to your professional activity. In both cases, you are informed of this when we collect your e-mail address, and you can object at any time, free of charge, using the unsubscribe link included in every e-mail or by writing to us. Signing up to our newsletter on the website is based on your consent, which you can withdraw in the same way.

More specifically: audience measurement by Google Analytics, the Klaviyo cookie, tracking where orders come from and the Meta and Pinterest pixels are based on your consent, given in the cookie banner; back-in-stock alerts, live session reminders and the review of applications are based on your request; cookieless audience measurement, the transfer of accounts from our previous shop, the collection of reviews, the prevention of payment fraud and website security are based on our legitimate interest.

Your data is retained for as long as is necessary for the purposes pursued: order data is retained for the statutory period (in particular 10 years for accounting records), and marketing data until you unsubscribe (withdrawal of your consent or objection), and for no more than 3 years after our last contact with you.

Back-in-stock alert requests, live session reminder sign-ups and applications are kept for as long as they are being handled, then for no more than 3 years after our last exchange. Cookies are kept for the periods stated in the Cookies section. With your consent, where your visit came from (source, campaign, ad click identifier) is recorded with your order, kept for no more than 3 years after it, then erased from the order. Withdrawing your consent stops it being recorded on your next orders; you can also ask for it to be erased sooner, as explained in the Your rights section.

Customer reviews are displayed on the site for 3 years from their publication, then removed from the site. The review and the data that comes with it (including your name, your email address and the order concerned) remain stored with Judge.me, our review provider, which does not announce a fixed period: it states that it keeps data only for as long as necessary for the purposes for which it was collected, including to meet its legal obligations, and that it may keep it longer in the event of a complaint or dispute. You can ask at any time for your review and this data to be deleted by writing to contact@belyzlash.fr. For a review left in the Shop app, a copy remains in the Shop app, under Shopify's responsibility.

Your data is intended for BELYZ LASH and for the service providers that help it run the website and the shop. They act on our instructions, are bound by confidentiality and only use your data for the purposes of their service:

• Shopify (Shopify International Limited, Ireland): online shop, customer accounts, orders and payment page;

• Vercel (Vercel Inc., United States): website hosting and cookieless audience measurement;

• Klaviyo (Klaviyo Inc., United States): sending our emails (newsletter, reminders, back-in-stock alerts, live session reminders), tracking applications, measuring email opens and clicks;

• Axeptio (France): collecting and storing your cookie choices;

• Google (Google Ireland Limited and Google LLC, United States): Google Tag Manager, Google Analytics audience measurement with your consent, and showing our products on Google (Google Merchant Center);

• Judge.me (Judge.me Ltd, United Kingdom): review request e-mails after an order, collection and publication of customer reviews;

• Carriers (in particular Colissimo, La Poste): delivering your parcels;

• Colissimo - Officiel (Le Studio de Tom, France) and Sendcloud (Netherlands): apps connected to our shop to prepare your shipments (labels, chosen pickup point);

• Sufio (Slovakia): issuing your invoices and sending them by email.

Payment providers (Shopify's payment service for bank cards and Bancontact, Shop Pay, Apple Pay, PayPal and Klarna) process your payment data on their own behalf, in particular to fight fraud or to assess a request to pay in instalments: their own privacy policies apply.

To protect, develop and improve our business, we also use enhanced features from Shopify, which rely on your interactions with our shop, with other merchants and with Shopify. For these features, as for its Shop app and for Shop Pay, Shopify is the controller of your data: its Consumer Privacy Policy applies (www.shopify.com/legal/privacy/consumers), and you can exercise your rights with Shopify at privacy.shopify.com.

Sale or sharing of data: if you have accepted everything in the banner steps "Outils d'emailing" and "Annonces personnalisées", as well as the three advertising choices in the step "Décidez comment Google utilise vos données", Shopify may use your activity on our shop to show you ads based on your interactions with other merchants and with Shopify, and Google may use the data from your visit to shop.belyzlash.fr (the payment page and the other pages served by Shopify) to personalise the ads it serves; without this consent, this data is not used for that purpose. You can withdraw this consent at any time with the cookie settings button shown on every page of belyzlash.fr, or object to this use with Shopify at privacy.shopify.com.

Meta (Meta Platforms Ireland Limited, Ireland): with your consent (banner step "Annonces personnalisées"), the Meta pixel sends Meta your browsing on the website (pages viewed, products viewed, items added to the cart, checkout started, newsletter sign-up) and your purchase on the payment page (amount and products) to measure the effectiveness of our advertising on Facebook and Instagram and show you targeted ads there. Depending on our settings, Meta may also receive your email address, phone number, name and address in hashed form (not readable in plain text), to match this data to your Facebook or Instagram account. For the collection of this data by the pixel and its transmission to Meta, BELYZ LASH and Meta Platforms Ireland Limited are joint controllers (Article 26 GDPR). The arrangement between them, published by Meta, can be read at www.facebook.com/legal/controller_addendum. You can exercise your rights with BELYZ LASH as well as with Meta. Meta alone is responsible for the processing it then carries out on its own behalf: its own privacy policy applies. You can withdraw your consent at any time with the cookie settings button shown on every page of belyzlash.fr.

Pinterest (Pinterest Europe Ltd., Dublin, Ireland): with your consent (banner step "Annonces personnalisées"), the Pinterest pixel, installed in our Shopify shop, sends Pinterest, from shop.belyzlash.fr (the payment page and the other pages served by Shopify), the pages you view there, the start of checkout, the addition of your payment information and your purchase (amount, currency, products and order number), together with your email address, phone number, name, address and the identifier Shopify assigns to your browser (or, if you are logged in, the identifier of your customer account), in hashed form (not readable in plain text). The pixel also attaches, without hashing them, your IP address, the type and language of your browser, your screen size, the address of the page viewed and of the page you came from, and the identifiers stored in the Pinterest cookies (see the Cookies section). This data is sent from your browser and from Shopify's servers (Pinterest Conversions API); it is shared with Pinterest for behavioural advertising purposes, to measure the purchases resulting from our advertising on Pinterest and show you targeted ads there. For the collection of this data by the pixel and its transmission to Pinterest, BELYZ LASH and Pinterest Europe Ltd. are joint controllers (Article 26 GDPR). The arrangement between them, Annex B to the Pinterest Advertising Services Agreement, sets out their respective obligations: BELYZ LASH gives you the information in this paragraph, and Pinterest Europe enables you to exercise your rights of access, rectification, erasure, restriction and portability over the data it keeps after the transmission. Whatever the terms of that arrangement, you can exercise your rights with BELYZ LASH as well as with Pinterest Europe (Article 26(3) GDPR). The identity and contact details of Pinterest Europe Ltd. and of its data protection officer are set out in Pinterest's privacy policy, available at policy.pinterest.com/privacy-policy, which also sets out the legal basis for its processing and how to exercise your rights with Pinterest. Pinterest alone is responsible for the processing it then carries out on its own behalf. You can withdraw your consent at any time with the cookie settings button shown on every page of belyzlash.fr, and opt out of Pinterest's behavioural advertising in your Pinterest account settings or at optout.aboutads.info.

Some of these providers, including Vercel, Klaviyo, Google, Shopify and Judge.me, may process your data outside the European Union, in particular in the United States, the United Kingdom and Canada. Data from the Meta pixel may be transferred to Meta Platforms Inc., in the United States, and data from the Pinterest pixel to Pinterest, Inc., also in the United States.

These transfers are safeguarded: to the United States, by these companies' participation in the EU-US Data Privacy Framework or, failing that, by the European Commission's standard contractual clauses; to the United Kingdom and Canada, by the European Commission's adequacy decisions. You can obtain a copy of the applicable safeguards by writing to contact@belyzlash.fr.

The website uses cookies. Non-essential cookies (audience measurement, marketing) are only placed with your consent, obtained via the consent banner. You may change your preferences at any time.

Here are the cookies and services used on belyzlash.fr. You can change your choice at any time with the cookie settings button shown on every page of belyzlash.fr.

• axeptio_cookies, axeptio_authorized_vendors, axeptio_all_vendors

  Service

  Axeptio

  Purpose

  Store your cookie choices

  Duration

  6 months

  Set

  Always: required by the website

• _tracking_consent

  Service

  Shopify

  Purpose

  Record the choices you made in our banner, or a refusal until you have answered it, so that Shopify applies them on shop.belyzlash.fr

  Duration

  1 year

  Set

  Always, from your first page, on belyzlash.fr and its subdomains (.belyzlash.fr): required by the website

• NEXT_LOCALE

  Service

  BELYZLASH

  Purpose

  Remember the language you chose

  Duration

  Session

  Set

  Always: required by the website

• belyzlash-auth-token

  Service

  BELYZLASH

  Purpose

  Keep you signed in to your account

  Duration

  30 days

  Set

  Always: required by the website

• belyzlash-cart (local storage)

  Service

  BELYZLASH

  Purpose

  Keep the items in your cart

  Duration

  Until the cart is emptied

  Set

  Always: required by the website

• belyzlash-panier-shopify (local storage)

  Service

  BELYZLASH

  Purpose

  Find the Shopify payment cart, in order to empty your cart once the order has been placed

  Duration

  Until the order is placed or the cart is emptied; after 3 days, deleted on your next visit

  Set

  Always: required by the website

• bl_popup_newsletter (local storage)

  Service

  BELYZLASH

  Purpose

  Avoid offering you the newsletter sign-up again: sign-up made from this browser, refusal of the sign-up window (for 14 days) and, with your consent, arrival from one of our emails

  Duration

  Until you clear the website's data in your browser

  Set

  When you sign up or close the sign-up window; arrival from our emails: after your consent (banner step "Statistiques et audience")

• bl_popup_newsletter_vu (session storage)

  Service

  BELYZLASH

  Purpose

  Show the newsletter sign-up window no more than once per visit

  Duration

  Session (until the tab is closed)

  Set

  When the sign-up window is shown

• bl_origine

  Service

  BELYZLASH

  Purpose

  First-party attribution cookie: remember where your visit came from (source, campaign, ad click identifier) to link it to your order

  Duration

  90 days

  Set

  After your consent (banner step "Statistiques et audience")

• bl_internal

  Service

  BELYZLASH

  Purpose

  Exclude our team's visits from the statistics

  Duration

  2 years

  Set

  Only on our team's devices

• _ga, _ga_WD2YTS73KF

  Service

  Google Analytics 4 (Google)

  Purpose

  Measure the website's audience and shopping journeys

  Duration

  13 months

  Set

  With your consent

• __kla_id

  Service

  Klaviyo

  Purpose

  Recognise your browsing for cart reminders, back-in-stock alerts and new products

  Duration

  2 years

  Set

  With your consent

• _fbp, _fbc

  Service

  Meta Pixel (Meta)

  Purpose

  Measure the effectiveness of our advertising on Facebook and Instagram and show you targeted ads there. _fbc is only set if you arrive from a Meta ad or a Facebook or Instagram link

  Duration

  3 months

  Set

  After your consent (banner step "Annonces personnalisées")

• _epik, _epiko, _derived_epik, _pin_unauth (and their copies in local storage)

  Service

  Pinterest Pixel (Pinterest)

  Purpose

  Measure the purchases resulting from our advertising on Pinterest and show you targeted ads there. _epik is only set if you arrive from a Pinterest ad

  Duration

  1 year

  Set

  On shop.belyzlash.fr (the payment page and the other pages served by Shopify), after your consent (banner step "Annonces personnalisées")

Vercel Web Analytics measures traffic without cookies and without storing any identifier on your device. The website uses Google's Consent Mode in advanced mode: until you accept audience measurement, Google Analytics neither sets nor reads any cookie, but the website sends Google cookieless signals without any persistent identifier (timestamp, browser type, page viewed, your consent status), which allow Google to estimate traffic through modelling. Once you accept, the cookies described above are used.

On shop.belyzlash.fr (the payment page and the other pages served by Shopify), Shopify sets the cookies needed for payment and order security; the list of Shopify's cookies is published at www.shopify.com/legal/cookies. The choices you made in our banner are passed on to it; until you have answered the banner, we pass on a refusal. Shopify has a single consent for all the marketing tools of these pages (Klaviyo, Meta, Pinterest and Google): it only receives it if you have accepted everything in the banner steps "Outils d'emailing" and "Annonces personnalisées", as well as the three advertising choices in the step "Décidez comment Google utilise vos données". Likewise, it only receives your consent to audience measurement if you have accepted Google Analytics 4 in the banner step "Statistiques et audience" and the "Stockage d'analyse" choice in that Google step. On these pages, this consent also enables the pixel of Judge.me, our customer review tool, and, together with the marketing consent, Shopify's own pixel. It also allows Shopify to set two cookies on belyzlash.fr and its subdomains for 14 days, _landing_page and _orig_referrer, which record, when you arrive from another site, your landing page and the site you came from.