Privacy Policy

The data controller is BELYZ LASH (trading as BELYZLASH), represented by its President, Elysza De Magalhaes. For the collection of data by the Meta pixel and its transmission to Meta, BELYZ LASH and Meta Platforms Ireland Limited are joint controllers (see the Recipients of the data section).

Contact: contact@belyzlash.fr

We collect the following data:

• Identification data: surname, first name, e-mail address, postal address, telephone number.

• Order data: products purchased, amount, order history.

• Payment data: processed securely by our payment provider (BELYZLASH does not store your full bank details).

• Browsing data: IP address, cookies, pages viewed, where your visit came from (see the Cookies section).

• Email data: opening of our emails and clicks on their links, measured by our sending tool.

• Data from your requests: back-in-stock alert, live session reminder, application to the ambassador programme (answers to the questionnaire).

• Orders placed on a marketplace: if you order through TikTok Shop or Amazon, the platform sends us the data needed for delivery.

• Customers of our previous shop: the accounts and order history of our former online shop (WooCommerce) were transferred to Shopify when we changed platform.

Your data is used to:

• process and deliver your orders;

• manage the customer relationship and after-sales service;

• manage registrations for training courses;

• send you marketing communications by e-mail (newsletter, new products, offers), under the conditions set out in the Legal basis section;

• improve our website and our services;

• comply with our legal and accounting obligations;

• let you know, at your request, when a product is back in stock or when the next live session starts;

• remind you by email of an order you did not complete;

• review and answer applications to the ambassador programme;

• measure the website's audience, the opening of our emails and where our orders come from;

• collect your reviews of our products;

• measure the effectiveness of our advertising on Facebook and Instagram and show you targeted ads there, with your consent.

The processing operations are based on: performance of the contract (orders, training courses), your consent (newsletter sign-up, non-essential cookies), our legitimate interest (improvement of services, marketing e-mails sent to customers and beauty professionals under the conditions described below) and compliance with legal obligations (invoicing).

Marketing e-mails. If you are a customer, we may send you e-mail offers for products similar to those you have bought from us, without prior consent, as permitted by Article L.34-5 of the French Postal and Electronic Communications Code. If you are a beauty professional, we may send you offers for products related to your professional activity. In both cases, you are informed of this when we collect your e-mail address, and you can object at any time, free of charge, using the unsubscribe link included in every e-mail or by writing to us. Signing up to our newsletter on the website is based on your consent, which you can withdraw in the same way.

More specifically: audience measurement by Google Analytics, the Klaviyo cookie, tracking where orders come from and the Meta pixel are based on your consent, given in the cookie banner; back-in-stock alerts, live session reminders and the review of applications are based on your request; cookieless audience measurement, the transfer of accounts from our previous shop, the collection of reviews and website security are based on our legitimate interest.

Your data is retained for as long as is necessary for the purposes pursued: order data is retained for the statutory period (in particular 10 years for accounting records), and marketing data until you unsubscribe (withdrawal of your consent or objection), and for no more than 3 years after our last contact with you.

Back-in-stock alert requests, live session reminder sign-ups and applications are kept for as long as they are being handled, then for no more than 3 years after our last exchange. Cookies are kept for the periods stated in the Cookies section. With your consent, where your visit came from (source, campaign, ad click identifier) is recorded with your order, kept for no more than 3 years after it, then erased from the order. Withdrawing your consent stops it being recorded on your next orders; you can also ask for it to be erased sooner, as explained in the Your rights section.

Customer reviews are displayed on the site for 3 years from their publication, then removed from the site. The review and the data that comes with it (including your name, your email address and the order concerned) remain stored with Judge.me, our review provider, which does not announce a fixed period: it states that it keeps data only for as long as necessary for the purposes for which it was collected, including to meet its legal obligations, and that it may keep it longer in the event of a complaint or dispute. You can ask at any time for your review and this data to be deleted by writing to contact@belyzlash.fr. For a review left in the Shop app, a copy remains in the Shop app, under Shopify's responsibility.

Your data is intended for BELYZ LASH and for the service providers that help it run the website and the shop. They act on our instructions, are bound by confidentiality and only use your data for the purposes of their service:

• Shopify (Shopify International Limited, Ireland): online shop, customer accounts, orders and payment page;

• Vercel (Vercel Inc., United States): website hosting and cookieless audience measurement;

• Klaviyo (Klaviyo Inc., United States): sending our emails (newsletter, reminders, back-in-stock alerts, live session reminders), tracking applications, measuring email opens and clicks;

• Axeptio (France): collecting and storing your cookie choices;

• Google (Google Ireland Limited and Google LLC, United States): Google Tag Manager, Google Analytics audience measurement with your consent, and showing our products on Google (Google Merchant Center);

• Judge.me (Judge.me Ltd, United Kingdom): review request e-mails after an order, collection and publication of customer reviews;

• Carriers (in particular Colissimo, La Poste): delivering your parcels.

Payment providers (Shopify's card payment service, PayPal and Klarna) process your payment data on their own behalf, in particular to assess a request to pay in instalments: their own privacy policies apply.

Meta (Meta Platforms Ireland Limited, Ireland): with your consent (banner step "Annonces personnalisées"), the Meta pixel sends Meta your browsing on the website (pages viewed, products viewed, items added to the cart, checkout started, newsletter sign-up) and your purchase on the payment page (amount and products) to measure the effectiveness of our advertising on Facebook and Instagram and show you targeted ads there. Depending on our settings, Meta may also receive your email address, phone number, name and address in hashed form (not readable in plain text), to match this data to your Facebook or Instagram account. For the collection of this data by the pixel and its transmission to Meta, BELYZ LASH and Meta Platforms Ireland Limited are joint controllers (Article 26 GDPR). The arrangement between them, published by Meta, can be read at www.facebook.com/legal/controller_addendum. You can exercise your rights with BELYZ LASH as well as with Meta. Meta alone is responsible for the processing it then carries out on its own behalf: its own privacy policy applies. You can withdraw your consent at any time with the cookie settings button shown on every page.

Some of these providers, including Vercel, Klaviyo, Google, Shopify and Judge.me, may process your data outside the European Union, in particular in the United States, the United Kingdom and Canada. Data from the Meta pixel may be transferred to Meta Platforms Inc., in the United States.

These transfers are safeguarded: to the United States, by these companies' participation in the EU-US Data Privacy Framework or, failing that, by the European Commission's standard contractual clauses; to the United Kingdom and Canada, by the European Commission's adequacy decisions. You can obtain a copy of the applicable safeguards by writing to contact@belyzlash.fr.

The website uses cookies. Non-essential cookies (audience measurement, marketing) are only placed with your consent, obtained via the consent banner. You may change your preferences at any time.

Here are the cookies and services used on belyzlash.fr. You can change your choice at any time with the cookie settings button shown on every page.

• axeptio_cookies, axeptio_authorized_vendors, axeptio_all_vendors

  Service

  Axeptio

  Purpose

  Store your cookie choices

  Duration

  6 months

  Set

  Always: required by the website

• NEXT_LOCALE

  Service

  BELYZLASH

  Purpose

  Remember the language you chose

  Duration

  Session

  Set

  Always: required by the website

• belyzlash-auth-token

  Service

  BELYZLASH

  Purpose

  Keep you signed in to your account

  Duration

  30 days

  Set

  Always: required by the website

• belyzlash-cart (local storage)

  Service

  BELYZLASH

  Purpose

  Keep the items in your cart

  Duration

  Until the cart is emptied

  Set

  Always: required by the website

• belyzlash-panier-shopify (local storage)

  Service

  BELYZLASH

  Purpose

  Find the Shopify payment cart, in order to empty your cart once the order has been placed

  Duration

  Until the order is placed or the cart is emptied; after 3 days, deleted on your next visit

  Set

  Always: required by the website

• bl_popup_newsletter (local storage)

  Service

  BELYZLASH

  Purpose

  Avoid offering you the newsletter sign-up again: sign-up made from this browser, refusal of the sign-up window (for 14 days) and, with your consent, arrival from one of our emails

  Duration

  Until you clear the website's data in your browser

  Set

  When you sign up or close the sign-up window; arrival from our emails: after your consent (banner step "Statistiques et audience")

• bl_popup_newsletter_vu (session storage)

  Service

  BELYZLASH

  Purpose

  Show the newsletter sign-up window no more than once per visit

  Duration

  Session (until the tab is closed)

  Set

  When the sign-up window is shown

• bl_origine

  Service

  BELYZLASH

  Purpose

  First-party attribution cookie: remember where your visit came from (source, campaign, ad click identifier) to link it to your order

  Duration

  90 days

  Set

  After your consent (banner step "Statistiques et audience")

• bl_internal

  Service

  BELYZLASH

  Purpose

  Exclude our team's visits from the statistics

  Duration

  2 years

  Set

  Only on our team's devices

• _ga, _ga_WD2YTS73KF

  Service

  Google Analytics 4 (Google)

  Purpose

  Measure the website's audience and shopping journeys

  Duration

  13 months

  Set

  With your consent

• __kla_id

  Service

  Klaviyo

  Purpose

  Recognise your browsing for cart reminders, back-in-stock alerts and new products

  Duration

  2 years

  Set

  With your consent

• _fbp, _fbc

  Service

  Meta Pixel (Meta)

  Purpose

  Measure the effectiveness of our advertising on Facebook and Instagram and show you targeted ads there. _fbc is only set if you arrive from a Meta ad or a Facebook or Instagram link

  Duration

  3 months

  Set

  After your consent (banner step "Annonces personnalisées")

Vercel Web Analytics measures traffic without cookies and without storing any identifier on your device. The website uses Google's Consent Mode in advanced mode: until you accept audience measurement, Google Analytics neither sets nor reads any cookie, but the website sends Google cookieless signals without any persistent identifier (timestamp, browser type, page viewed, your consent status), which allow Google to estimate traffic through modelling. Once you accept, the cookies described above are used.

On the payment page (shop.belyzlash.fr), Shopify sets the cookies needed for payment and order security. The choices you made in our banner are passed on to it. Shopify has a single consent for all of its marketing tools: it only receives it if you have accepted both banner steps "Outils d'emailing" and "Annonces personnalisées".