Privacy policy
Last updated: July 13, 2026
CODAGE Paris ("we", "us", "CODAGE") places great importance on protecting your personal data. This policy explains what data we collect, why, how we use it, and what your rights are.
1. Who is responsible for processing your data?
The data controller is B&S SAS ("CODAGE Paris"), whose full contact details are available in our Legal Notice.
For any question relating to your personal data: info@mycodage.com, or by mail to B&S SAS – ZI de la Vallière, La Vallière 2000 – 06730 Saint-André-de-la-Roche – France.
2. What data do we collect?
Depending on your interaction with the Site, we may collect:
- Identification and contact data: first name, last name, email address, postal address, phone number
- Order data: purchase history, cart contents, payment methods (processed securely; we do not store your full banking details)
- Browsing data: pages viewed, cookies, IP address
- Email interaction data: email opens (tracking pixels, see section 5), link clicks
- Skin diagnostic data (if applicable): answers provided as part of our personalized diagnostic tool
3. Why do we use your data?
| Purpose | Legal basis |
|---|---|
| Process and deliver your orders | Contract performance |
| Manage your customer account and loyalty program | Contract performance |
| Send you marketing communications (newsletter, offers) | Consent |
| Measure email opens (tracking pixels) | Consent |
| Improve our products and services, analyze browsing behavior | Legitimate interest |
| Prevent fraud | Legitimate interest / legal obligation |
| Comply with our accounting and tax obligations | Legal obligation |
4. Who do we share your data with?
Your data may be shared with third-party service providers, strictly limited to what is necessary for their respective tasks:
- Shopify (hosting and management of the online store)
- Klaviyo and Brevo (sending our email and SMS communications)
- Carriers (Chronopost, Colissimo, FedEx, UPS) for order delivery
- Payment providers for secure transaction processing
- Where legally required, relevant authorities
We do not sell or rent your personal data to third parties for commercial purposes.
5. Email open tracking
As part of our email communications, some of the messages we send you may contain a tracking pixel. This pixel is a small, invisible image embedded in the email that allows us to know whether the message has been opened.
This tracking helps us measure the performance of our campaigns, understand interest in our communications, and improve the relevance of the content we send you.
Email open tracking is subject to your consent where required by applicable regulations. You may withdraw your consent to open tracking at any time via the "Manage my preferences" page, accessible from our emails.
Withdrawing your consent to open tracking does not automatically unsubscribe you from our marketing communications. You will continue to receive our emails if you remain subscribed.
You may also unsubscribe from our marketing communications at any time by clicking the unsubscribe link at the bottom of any of our emails.
6. Cookies
We use cookies to improve your experience on the Site: remembering your cart, your browsing preferences, and measuring Site traffic.
You may configure your browser to refuse cookies; some Site features may then be limited. For more information on cookies, visit the CNIL website (French data protection authority): www.cnil.fr
7. Data retention periods
Your data is kept for as long as necessary for the purposes for which it was collected, in particular:
- Customer account data: for the duration of the commercial relationship, then 3 years from your last purchase or contact, for commercial prospecting purposes
- Billing and accounting data: 10 years, in accordance with our legal obligations
- Prospect data (if you are not yet a customer, e.g. newsletter sign-up): 3 years from collection or your last contact with us
- Cookies: 13 months maximum
8. Your rights
In accordance with the GDPR and French data protection law, you have the following rights over your personal data:
- Right of access
- Right of rectification
- Right of erasure
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw your consent at any time
To exercise these rights, contact us at info@mycodage.com or by mail to B&S SAS – ZI de la Vallière, La Vallière 2000 – 06730 Saint-André-de-la-Roche – France, providing proof of identity.
You also have the right to lodge a complaint with the CNIL (French data protection authority): www.cnil.fr
9. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration.
10. Changes to this policy
This privacy policy may be updated from time to time, in particular to reflect regulatory changes. The version currently in force is the one published on this page.
11. Contact
For any question regarding this policy or your personal data: info@mycodage.com
