PRIVACY POLICY

Updated on 28/10/2025



The purpose of this privacy policy (the “Charter”) is to formalize our commitment to respecting the privacy of users of the website “ana-lucy.com”.

The Charter and the General Terms and Conditions of the Site form a contractual agreement. All capitalized terms not defined in this Charter are defined in the General Terms and Conditions, which can be found at: https://ana-lucy.com/pages/cgv

Personal data means any information relating to an identified or identifiable natural person. We collect and process personal data solely for the purpose of providing our Services or communicating about these Services, in strict compliance with the GDPR.

We only collect personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed. Therefore, you will never be asked to provide personal data considered "sensitive," such as your racial or ethnic origin, political, philosophical, or religious opinions.

By registering on the Site, you authorize us to process your personal data in accordance with this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please refrain from using the Site and the Services.

1. In what cases do we collect your personal data and what data is collected?

We may collect and store your personal data, particularly when you:

• Navigate the Site
• Perform actions on the Site or Services that result in the collection of personal data. Examples: account creation, online payment, etc.
• Contact us.

We use your personal data to enable the implementation and management of the Site's Services and to respond to your specific requests. We also use your personal data to operate and improve our Services, our Site, and our approach. This information is used solely by us and allows us to better tailor our Services to your needs.

If you opted to receive emails and messages from us when creating your account, you will receive electronic and alphanumeric messages about our products and promotions. We will then use the personal data you provided during registration.

You can unsubscribe from these mailings at any time.

1.1 Site Navigation

Connection data: Each time you connect to our Site, we collect certain personal data such as your IP address, your computer's MAC address, and the date and time of connection. We also collect information about the browser you are using.

Browsing data: We also collect information about how you access the Site, the pages viewed, and the duration of your visit. Cookies may be used for this purpose.

1.1.1 Advertising cookies and audience measurement tools

We use cookies and similar technologies to analyze user navigation and measure the performance of our advertising campaigns.
Some of these cookies are placed by our third-party partners in order to deliver personalized advertisements tailored to your interests, on our site or on other online platforms.

This data is collected in a pseudonymized manner and does not allow you to be directly identified.
Our partners act as subcontractors, in accordance with their own privacy policies and applicable data protection regulations.

You can accept or refuse these advertising cookies at any time via the “Manage preferences” module available on our website.
Your consent is obtained before any non-essential cookies are placed, in accordance with the General Data Protection Regulation (GDPR).

1.2 Creating an Account

Access to certain Services requires the prior creation of an Account. In accordance with our Terms and Conditions, personal information such as your first and last name, postal address, email address, and telephone number will be requested when creating your Account.

1.3 Payment

Some of our Services are subject to a fee. For this purpose, we may use external service providers to process payments. These providers may collect personal data to ensure the proper functioning of credit card or other payment methods, and, where applicable, for the delivery of products or services.

To complete a purchase, you will need to provide your billing and payment information, including your credit card number, expiry date, security code, and the cardholder's name if paying by credit card. We may also ask for your mobile phone provider, phone model, and a valid phone number to allow us to process your purchase directly from your mobile phone.

We retain details of your payments and purchases. Transaction information is stored in our systems or with our third-party provider for accounting, compliance, and legal security purposes.

1.4 Subscribing to our Newsletter

When creating your account, you can choose to receive our newsletter containing news, updates, services, and promotions. You can also subscribe to the newsletter by entering your email address in the designated fields on the website. You have the right to withdraw your consent to receive our newsletter at any time, free of charge.

1.5 Contacts

To respond to requests you may send to our Customer Service, we may use your first and last name, email address and telephone number to confirm information about you and facilitate the handling of your requests.

2. How do we protect your personal data?

We have implemented technical and organizational security measures to guarantee the security, integrity and confidentiality of all your personal data, in order to prevent it from being distorted or damaged.
or that unauthorized third parties may access it. We ensure an appropriate level of security, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing as well as the risks and their likelihood.

However, it should be noted that since no security measure is infallible, we are unable to guarantee absolute security for your personal data.

Furthermore, you are responsible for maintaining the confidentiality of the password that allows you to access your Account. Do not share this information with anyone. If you share your computer, remember to log out before leaving a Service.

3. In what cases do we share your personal data?

When you browse the Site, your personal data may be transmitted to external service providers. These third parties provide services on our behalf and in our name to ensure the proper functioning of credit card payments and other Services.

Personal data may be transferred to countries outside the European Union (such as the United States) for the purpose of storing the data in a database.

In accordance with the GDPR, all transfers of personal data to a country located outside the European Union and/or not offering a level of protection considered sufficient by the European Commission have been subject to cross-border flow agreements in accordance with the standard contractual clauses issued by the European Commission.

Except where a third party asks you to accept its own privacy policy and terms of use, third-party companies that have received your personal data have committed to processing your personal data only for the implementation of our Services.

We will never share your personal data with third-party companies for marketing and/or commercial purposes without your prior consent.

4. How long do we keep your personal data?

We will only retain your personal data for the duration of your registration on the Site in order to ensure your identification when you log in to your Account and to enable the provision of the Services.

Therefore, if you unsubscribe from the Site, your personal data will be erased and only kept in archived form for the purpose of establishing proof of a right or a contract.

In any event, we will retain your personal data for a period not exceeding that necessary for the purposes for which it is processed in accordance with the uses set out in this Charter and in compliance with laws and regulations.

5. What are your rights?

You are the only ones who have provided us with the data we hold, through the Site. You have rights over your personal data.

In accordance with regulations on the protection of personal data, in particular Articles 15 to 22 of the GDPR, and after having verified your identity, you have the right to request access to, rectification or erasure of, your personal data.

Furthermore, within the limits set by law, you also have the right to object to processing, to restrict processing, to decide the fate of your data after your death, to withdraw your consent at any time, and the right to data portability.
personal information provided.

6. Can we amend the Charter?

We reserve the right to modify this Charter at any time. Therefore, we recommend that you consult it regularly. In the event of any changes, we will publish them on this page and in other locations we deem appropriate, depending on the nature and significance of the changes.

Your continued use of the Site after any changes constitutes your acceptance of those changes. If you do not agree to any substantial changes to this Charter, you must stop using the Site.