Privacy Policies

PRIVACY POLICY

Last updated: August 16, 2026

At Karenation, protecting your personal data is important.

This Privacy Policy aims to clearly and transparently explain what personal data we collect when you use our site, place an order, create an account, contact our customer service, subscribe to our communications, or use certain of our services, notably our personalized skincare diagnostic.

It also specifies why we use this data, how long we store it, with whom it may be shared, and what your rights are.

This policy is established in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and applicable French personal data protection legislation.

1. Data Controller

The data controller for data collected on the Karenation website is:

Karenation – Société par Actions Simplifiée Unipersonnelle (SASU)
60 Rue François 1er
75008 Paris
France

Email: contact@karenation.com
Phone: 06 61 43 09 38
Website: www.karenation.com

Karenation determines the purposes and means of the personal data processing carried out within the scope of its activity.

2. What personal data may we collect?

Depending on your use of Karenation, we may collect different categories of data.

2.1 Identification and contact data

We may notably collect:

  • name;

  • first name;

  • email address;

  • phone number;

  • mailing address;

  • delivery address;

  • billing address.

2.2 Data related to your orders

When you make a purchase, we may process:

  • products ordered;

  • order amount and date;

  • order number;

  • delivery information;

  • order history;

  • returns, refunds, and complaints;

  • payment methods used, without necessarily accessing full banking data.

The banking information required for payment is processed directly by our secure payment providers.

Karenation does not directly store full credit card numbers when payment is processed by an external provider.

2.3 Data related to your customer account

If you create a Karenation account, we may notably store:

  • your identification information;

  • your contact details;

  • your saved addresses;

  • your order history;

  • your preferences;

  • the information necessary for managing your account.

2.4 Browsing data

When you visit our site, certain technical information may be collected, including:

  • IP address;

  • device type;

  • operating system;

  • browser used;

  • pages viewed;

  • date and time of visit;

  • browsing duration;

  • source of your visit;

  • interactions with the site;

  • cookie identifiers or similar technologies.

Some of this data is collected only after obtaining your consent when required.

2.5 Marketing data

When you subscribe to our newsletter or agree to receive our communications, we may process:

  • your email address;

  • your first name;

  • your marketing preferences;

  • your purchase history;

  • your interactions with our communications, when regulations allow and, where applicable, after obtaining your consent.

You can unsubscribe from our marketing communications at any time.

2.6 Customer reviews

When you post or submit a review about a product or your Karenation experience, we may process:

  • your name or pseudonym;

  • your email address;

  • the product concerned;

  • the content of your review;

  • your rating;

  • possibly the photographs or content you choose to submit.

2.7 Personalized skincare diagnostic

Karenation may offer a diagnostic or questionnaire intended to help you better understand your skin and guide you towards a suitable routine.

In this context, we may notably ask you for information regarding:

  • your skin type;

  • your skin concerns;

  • your skin sensitivity;

  • your skincare goals;

  • your skincare habits;

  • the number of products you wish to use;

  • your level of experience in skincare;

  • your preferences regarding textures, routines, or products;

  • certain optional demographic information when useful for personalizing the experience.

This information is used to personalize the recommendations offered to you.

The Karenation skincare diagnostic is a cosmetic guidance tool and does not constitute a medical diagnosis or medical advice.

We recommend that you do not submit, via the questionnaire, medical information that would not be necessary for the cosmetic recommendation.

When information that could be considered particularly sensitive data within the meaning of the regulations is requested, its processing will be limited to what is strictly necessary and will be based, when required, on your explicit consent.

3. Why do we use your data?

Karenation may use your personal data for the following purposes.

Purpose Main legal basis
Process and deliver your orders Contract performance
Manage payments Contract performance
Manage your customer account Contract performance
Manage returns and refunds Contract performance / legal obligations
Respond to your inquiries Contract performance or legitimate interest
Provide after-sales service Contract performance
Issue and retain invoices Legal obligation
Prevent fraud and secure the site Legitimate interest and/or legal obligation
Send a newsletter Consent when required
Send commercial communications Consent or other basis authorized by regulation
Personalize your experience Consent or legitimate interest depending on the processing
Perform a skincare diagnostic Performance of the requested service and/or consent depending on the data concerned
Collect customer reviews Legitimate interest or consent as appropriate
Perform statistics Legitimate interest or consent when trackers require it
Improve our site and our offer Legitimate interest
Comply with our legal obligations Legal obligation

We ensure that we only collect data necessary for the purposes for which it is used.

4. Data origin

Data may be collected:

  • directly from you when you place an order;

  • when you create an account;

  • when you fill out a form;

  • when you perform a skincare diagnostic;

  • when you contact Karenation;

  • when you subscribe to a newsletter;

  • when you leave a review;

  • automatically during your browsing, notably through cookies and similar technologies;

  • from certain technical providers necessary for the fulfillment of your order or the operation of the site.

5. With whom is your data shared?

Karenation does not sell your personal data.

However, your data may be communicated, to the extent necessary, to service providers involved in the operation of our business.

This may notably include:

  • our e-commerce platform and host;

  • our payment providers;

  • our carriers and logistics providers;

  • providers responsible for delivery;

  • emailing and communication solutions;

  • solutions enabling customer review management;

  • technical providers;

  • audience analytics providers;

  • advertising providers when you have accepted the relevant trackers;

  • our professional advisors, accountants, or legal counsel when necessary;

  • competent administrations or authorities when required by law.

These service providers are only authorized to process data within the scope of the missions entrusted to them and in accordance with applicable data protection rules.

6. Shopify

The Karenation website uses the Shopify platform to ensure the technical operation of the online store, the management of certain orders, and various features related to e-commerce activities.

In this context, certain personal data may be processed by Shopify when you visit our store or place an order.

Shopify may also use its own technical subcontractors.

Karenation configures the tools provided by Shopify as much as possible to respect users' choices regarding their privacy and the use of cookies.

7. Payments

Payments made on Karenation are processed by secure payment providers.

Depending on the payment method selected, certain information necessary for the transaction may be transmitted directly to the relevant provider.

These providers have their own privacy policies and may act, depending on the processing concerned, as independent data controllers or processors.

Karenation generally does not receive your complete credit card data.

8. Delivery

To enable the delivery of your order, certain information may be transmitted to the relevant carrier or logistics provider, including:

  • name;

  • first name;

  • delivery address;

  • phone number when necessary;

  • email address when necessary;

  • package-related information.

This information is used only to the extent necessary for the routing and tracking of your order.

9. Transfers of data outside the European Economic Area

Some of our service providers may be established or process certain data outside the European Economic Area.

When this occurs, we ensure that these transfers are based on a mechanism recognized by applicable regulations, for example:

  • an adequacy decision by the European Commission;

  • standard contractual clauses approved by the European Commission;

  • or any other appropriate safeguard provided by the GDPR.

We strive to select providers that offer sufficient guarantees regarding the protection of personal data.

10. How long do we store your data?

Karenation does not store your data indefinitely.

The duration varies depending on the nature of the information and the purpose of its processing.

In general:

Data related to orders and customer relations

They are stored for the duration necessary for the commercial relationship, then archived when necessary to comply with our legal obligations or to defend our rights.

Accounting documents and invoices

Documents that must be kept under our accounting obligations may be archived for a period of 10 years in accordance with applicable legal obligations.

Data used for prospecting concerning our customers

They may be stored during the commercial relationship and then up to 3 years after the end of this relationship or the last relevant contact, subject to applicable legal obligations.

Data relating to prospects

Data used for prospecting may be stored for up to 3 years from their collection or the prospect's last contact.

Requests addressed to customer service

They are stored for the duration necessary to process your request and then, when necessary, for a period allowing for follow-up of the relationship or to meet any legal obligations.

Skincare diagnostic data

Diagnostic responses are stored for the duration necessary for the provision and improvement of the service, then deleted or anonymized when no longer necessary, subject to any legal obligations.

When the diagnostic is associated with your customer account, certain preferences may be retained to facilitate your future recommendations until their deletion, your erasure request, or the expiration of the applicable retention period.

Data related to the newsletter

They are stored until you withdraw your consent or unsubscribe, subject to a maximum duration corresponding to the recommendations of competent authorities regarding commercial prospecting.

Cookies

The retention period depends on the nature of the cookie concerned.

Cookies and trackers are not stored beyond the duration necessary for their purpose and within the limits provided by applicable regulations.

11. Cookies and similar technologies

When you visit Karenation, cookies or similar technologies may be used.

A cookie is a small file stored or read on your device when you visit a website.

Strictly necessary cookies

These cookies are essential for the operation of the site.

They may notably enable:

  • to keep your shopping cart;

  • to ensure site security;

  • to enable payment;

  • to log you into your account;

  • to remember certain choices necessary for the site to function.

When strictly necessary for the requested service, their use does not require your prior consent.

Audience measurement cookies

These cookies help us understand how visitors use Karenation and improve our site.

When consent is required by regulation, these cookies are only placed after your agreement.

Advertising and marketing cookies

These cookies can notably allow:

  • to measure the effectiveness of our campaigns;

  • to display advertisements likely to be more relevant;

  • to measure conversions from advertising platforms.

They are only used when you have given your consent, where required.

Functional cookies

They improve certain functionalities and personalize your experience.

Depending on their purpose, they may require your consent.

12. Managing your cookie preferences

When you first visit, when necessary, a banner allows you to:

  • accept the cookies concerned;

  • refuse them;

  • or customize your choices.

Refusing non-essential cookies does not prevent you from placing an order on Karenation.

You can also change your choices later using the preference management module available on the site.

Withdrawing your consent must be as simple as giving it.

13. Newsletter and commercial communications

Karenation may send you communications related to:

  • our products;

  • our new arrivals;

  • our offers;

  • our skincare tips;

  • our events;

  • our content and news.

When your consent is necessary, you will only receive these communications after having given your agreement.

You can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us.

Unsubscribing from commercial communications does not affect communications necessary for processing your orders, such as order confirmations, delivery information, or service messages.

14. Personalization and product recommendations

Karenation may use certain information you provide to us to personalize:

  • your skincare routine;

  • the products recommended to you;

  • certain content;

  • your experience on the site.

Recommendations from the skincare diagnostic are established notably based on the answers provided in the questionnaire.

These recommendations may be partially automated.

However, they are not intended to produce legal effects concerning you or similar significant effects within the meaning of the GDPR.

You remain free to follow or not follow the proposed recommendations.

15. Security of your data

Karenation implements appropriate technical and organizational measures to protect personal data against, in particular:

  • unauthorized access;

  • loss;

  • alteration;

  • disclosure;

  • destruction;

  • fraudulent use.

We also work with service providers who implement their own security measures.

However, no computer system or method of transmission over the Internet can guarantee absolute security.

16. Your rights

In accordance with applicable regulations, you have, depending on your situation, the following rights:

Right of access

You can ask if Karenation processes personal data concerning you and obtain a copy.

Right to rectification

You can request the modification of inaccurate or incomplete data.

Right to erasure

You can request the deletion of certain personal data when the legal conditions are met.

Right to restriction of processing

You can request that the use of certain data be temporarily limited.

Right to object

You can object to certain processing based on our legitimate interest.

You can notably object at any time to the use of your data for commercial prospecting purposes.

Right to data portability

In the situations provided for by the GDPR, you can request to receive certain data that you have provided to us in a structured, commonly used, and machine-readable format.

Right to withdraw your consent

When processing is based on your consent, you can withdraw it at any time.

The withdrawal of your consent does not affect the lawfulness of processing carried out before this withdrawal.

Rights regarding certain automated decisions

When the conditions provided for by the GDPR are met, you may have rights relating to exclusively automated decisions producing legal effects or significantly affecting you.

Fate of your data after your death

Under the conditions provided for by French legislation, you can also define directives concerning the fate of certain of your personal data after your death.

17. How to exercise your rights?

To exercise any of your rights, you can contact us at:

contact@karenation.com

or by mail:

Karenation
60 Rue François 1er
75008 Paris
France

Please provide sufficient information to allow us to identify your request.

In certain situations, we may ask you for proof to verify your identity when necessary to prevent another person from exercising your rights on your behalf.

We will respond to your request within the deadlines provided by the regulations.

18. Complaint to the CNIL

If you believe, after contacting us, that your rights regarding your personal data are not respected, you have the right to lodge a complaint with the French data protection authority:

Commission Nationale de l'Informatique et des Libertés (CNIL).

19. Data concerning minors

Karenation does not intentionally seek to collect personal data concerning children who do not have the legal capacity or necessary authorizations to use the services concerned.

When the consent of the parental authority holder is legally required, we may request the necessary elements to ensure the existence of this consent.

20. Links to third-party sites

Karenation may contain links to websites or services operated by third parties.

Karenation is not responsible for the data protection practices of these third parties.

We invite you to consult their privacy policy before transmitting your personal data to them.

21. Modification of the Privacy Policy

This Privacy Policy may be modified to take into account:

  • an evolution of our services;

  • the addition of new tools;

  • a modification of our practices;

  • a legal or regulatory evolution.

The date of the last update appearing at the top of this page allows to identify the currently applicable version.

In the event of significant modification, we may inform you by an appropriate means.

22. Contact us

For any questions regarding this Privacy Policy or the use of your personal data, you can contact us:

Karenation

E-mail: contact@karenation.com
Phone: 06 61 43 09 38
Address: 60 Rue François 1er, 75008 Paris, France