Privacy Policy

Last updated: March 2026

In accordance with the General Data Protection Regulation (GDPR - EU 2016/679) and French law no. 78-17 of January 6, 1978, relating to data processing, files, and freedoms (known as the "Data Protection Act"), we inform you about how we collect, use, and protect your personal data.

1. Data Controller

The data controller for personal data is:

Miracle Beauty Paris
Website: miraclebeautyparis.com

Contact email address: miraclebeautyparis@gmail.com

Contact number: 07.77.92.93.14

For any questions regarding your personal data, you can contact us at the email address indicated on our website.

2. Data Collected

We collect the following personal data:

Identification information: last name, first name, email address, phone number
Delivery information: postal address
Payment information: securely processed by our payment providers (we do not store your bank details)
Browsing data: IP address, cookies, pages visited, visit duration
Order history and purchase preferences

3. Purposes of Processing

Your personal data is collected and processed for the following purposes:

Processing and tracking your orders
Managing your customer account
Sending commercial communications (with your consent)
Improving our site and our services
Complying with our legal and accounting obligations
Fraud prevention

4. Legal Basis for Processing

The processing of your data is based on the following legal grounds:

Contract performance: processing your orders and managing your account
Consent: sending newsletters and marketing communications
Legitimate interest: improving our services, fraud prevention
Legal obligation: retaining accounting and tax data

5. Retention Period

Your personal data is retained for the following periods:

Customer account data: for the duration of the commercial relationship + 3 years
Order data: 10 years (accounting obligation)
Browsing data and cookies: maximum 13 months
Marketing data: until you withdraw your consent

6. Recipients of Data

Your data may be shared with:

Our service providers (hosting, payment, delivery, email marketing) within the framework of our service execution
Competent authorities in case of legal obligation

We never sell your personal data to third parties.

7. Transfers outside the EU

Some of our providers (notably Shopify) may be located outside the European Union. In such cases, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decision, etc.) in accordance with the GDPR.

8. Cookies

Our site uses cookies to improve your browsing experience. You can manage your cookie preferences via the consent banner displayed during your first visit. For more information, please consult our cookie policy.

9. Your Rights

In accordance with the GDPR and the Data Protection Act, you have the following rights:

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate or incomplete data
Right to erasure ("right to be forgotten"): request the deletion of your data
Right to restriction of processing: restrict the use of your data
Right to data portability: receive your data in a structured format
Right to object: object to the processing of your data, particularly for commercial prospecting purposes
Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal

To exercise your rights, contact us by email via our contact page. We commit to responding within one month.

10. Complaint to the CNIL

If you believe your rights are not being respected, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) :
Website: www.cnil.fr
Address: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07

11. Changes to the Privacy Policy

We reserve the right to modify this privacy policy at any time. Any changes will be published on this page with the update date. We encourage you to consult this page regularly.