Privacy policy

This translation is provided for convenience only. In the event of any discrepancy, the French version shall prevail.

Privacy Policy

Last updated: 21 August 2026

This Privacy Policy describes how ODR COSMETICS – Odorare Parfumerie (hereinafter “Odorare”, “we”, “us” or “our”) collects, uses, retains and discloses your personal data when you visit the website odorare.fr, create an account, make a purchase, use our services or communicate with us.

Our shop is powered by Shopify, which provides the technical infrastructure enabling us to offer our products and services online.

In the event of any conflict between our Terms of Service and this Privacy Policy regarding the processing of personal data, this Privacy Policy shall prevail.

1. Data controller

The controller of the personal data collected in connection with the operation of the Odorare shop is:

ODR COSMETICS – Odorare Parfumerie
94 Avenue du Général Leclerc
93420 Villepinte
France

Website: odorare.fr
GDPR contact: contact@odorare.fr
Telephone: +33 6 08 05 62 08 — Landline: +33 9 86 17 62 84

However, some of our service providers may act as separate controllers for the processing operations that they determine themselves, in accordance with their own privacy policies.

2. Personal data collected

Personal data means any information that allows you to be identified, directly or indirectly.

Depending on how you use our website and services, we may collect, in particular, the following categories of data:

Identification data and contact details: surname, first name, postal address, billing address, delivery address, telephone number and email address.
Customer account data: login credentials, preferences, settings and information associated with your account.
Order and transaction data: products viewed, added to the basket or to a wish list, products purchased, returned, exchanged or cancelled, order history and information necessary for processing orders.
Payment data: payment method, payment confirmation, amount and transaction information. Full bank details may be collected and processed directly by our payment service providers and are not necessarily directly accessible to or stored by Odorare.
Communications with Odorare: information you provide to us when you contact our customer service or communicate with us.
Technical data: IP address, browser, operating system, device used, connection information and technical identifiers.
Browsing data: pages visited, products viewed, interactions with our website, connection dates and times, and browsing path.
Marketing data: communication preferences and interactions with our marketing communications.
Data collected by cookies and similar technologies: subject to your consent where required, information originating in particular from advertising pixels, measurement tools and other trackers.

3. Sources of personal data

We may collect your data:

directly from you when you create an account, place an order, sign up for our communications or contact Odorare;
automatically when you browse our website, in particular by means of cookies and similar technologies;
from our service providers acting on our behalf;
from certain commercial or advertising partners, within the limits permitted by applicable regulations.

4. Purposes and legal bases of processing

We process your personal data for various purposes.

Performance of the contract

We may process your data where this is necessary to:

record and process your orders;
process payments;
prepare and ship products;
manage deliveries;
manage returns, exchanges and refunds;
manage your customer account;
provide after-sales service;
respond to requests relating to your orders;
manage certain features that you request, such as wish lists.

Legal obligations

Certain data is processed or retained in order to comply with our legal obligations, in particular our accounting and tax obligations.

Consent

Where required by regulations, we obtain your consent before certain processing operations, in particular for:

cookies and trackers that are not strictly necessary;
certain audience measurement tools;
advertising pixels;
certain electronic direct marketing operations;
advertising personalisation that requires consent.

You may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

Legitimate interest

We may also process certain data on the basis of our legitimate interest, in particular to:

secure our website;
prevent and detect fraud;
ensure the security of transactions;
improve our services;
establish, exercise or defend our rights.

Where we rely on our legitimate interest, we ensure that it does not disproportionately infringe your rights and freedoms.

5. Cookies and other trackers

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the operation of the website, security, the basket, payment or the provision of a service you have expressly requested. These trackers may be used without consent where they meet the conditions laid down by regulations.

Other cookies or trackers are used, subject to your consent where required, to:

measure the website’s audience and performance;
analyse your browsing;
measure advertising conversions;
personalise communications;
personalise advertisements;
measure the performance of our marketing campaigns.

Cookie consent

Cookies and trackers that require your consent must only be placed or read after you have expressed your choice.

You must be able to accept or refuse the trackers concerned and to withdraw your consent at any time as easily as you gave it.

Your choice may be stored for a period that avoids asking you again at every visit. In accordance with the CNIL’s recommendations, a period of 6 months is generally considered good practice for storing the choice expressed.

You may change your preferences at any time via the cookie management tool provided on our website.

6. Service providers and recipients of data

We use various service providers that are necessary for the operation of our shop.

These service providers receive only the data necessary to carry out their tasks, subject to their own obligations and responsibilities under applicable regulations.

Shopify

Our shop is powered by Shopify.

Shopify processes certain data relating to your use of our shop in order to provide, secure, develop and improve its services.

Shopify Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

Shopify Privacy Portal:

https://privacy.shopify.com/fr

Klaviyo

We use Klaviyo for certain communication and marketing operations, in particular:

email campaigns;
SMS campaigns, where used;
customer segmentation;
marketing automations;
analysis of interactions with our communications.

This processing is carried out in accordance with applicable regulations and, where necessary, on the basis of your consent.

Klaviyo Privacy Policy:

https://www.klaviyo.com/legal/privacy

TikTok

We may use advertising technologies provided by TikTok, in particular to:

measure conversions;
analyse the performance of our campaigns;
measure the effectiveness of our advertisements;
carry out advertising targeting or personalisation operations.

Where these technologies require your consent, they must only be activated after you have given it via our cookie management tool.

TikTok Privacy Policy:

https://www.tiktok.com/legal/page/eea/privacy-policy/fr

Wish list

Our shop may offer a feature allowing visitors or customers to save certain products to a wish list.

The information necessary for this feature to work may be stored in order to retrieve the saved products and improve the shopping experience.

Where this feature is provided by a third-party provider, the necessary data may be processed by that provider in the course of providing its service.

Other service providers

We may also share certain strictly necessary data with our:

payment service providers;
carriers and logistics providers;
IT service providers;
hosting solutions;
security and fraud prevention tools;
customer service providers;
analytics and measurement providers;
professional advisers, where necessary.

7. Direct marketing

We may use your contact details to send you offers, news or marketing communications under the conditions laid down by applicable regulations.

Where your consent is required, in particular for certain forms of electronic direct marketing, the communications concerned are only sent once it has been obtained.

In situations where regulations permit direct marketing to existing customers without fresh consent, in particular for similar products or services, you always have a simple and free means of objecting to such communications.

Each marketing email includes, in particular, a mechanism allowing you to unsubscribe.

Your objection to marketing communications does not prevent the sending of communications necessary for the performance of your order or the management of your account.

8. Retention periods

We retain your data only for as long as is necessary for the purposes for which it was collected, extended where necessary by the periods required or permitted by regulations.

The main periods applied are as follows:

Data category	Indicative period
Data necessary for order management and invoicing	For the duration of the commercial relationship, then retention of the documents that must be kept for up to 10 years under the applicable accounting obligations
Customer data used for direct marketing purposes	For the duration of the commercial relationship, then 3 years from the end of the commercial relationship or from the last relevant contact, depending on the circumstances
Data of prospective customers who have never made a purchase	3 years from their collection or from the last contact initiated by the prospective customer
Data necessary for managing a customer account	For as long as the account is used, then for the period necessary to manage the relationship, comply with our obligations or defend our rights
Choice expressed regarding cookies	In principle 6 months, in accordance with the CNIL’s recommendations, subject to any necessary adjustments
Data relating to an objection to direct marketing	Retention limited to the information necessary to give lasting effect to that objection, in accordance with the applicable rules

Certain data may be placed in intermediate archiving where this is necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

9. Payment data

Payments made on our shop may be processed by specialised payment service providers.

Odorare does not necessarily have access to the full bank details used in your transaction.

The payment service providers concerned may process certain information as processors or, for certain operations, as separate controllers.

We invite you to consult the privacy policies of the payment service providers offered to you when placing your order.

10. Data security

We implement appropriate technical and organisational measures designed to protect your personal data against, in particular:

unauthorised access;
disclosure;
alteration;
loss;
destruction;
fraudulent use.

However, no method of electronic transmission or storage can guarantee absolute security.

You are, in particular, responsible for keeping the login credentials associated with your customer account confidential.

11. International data transfers

Some of our service providers may process personal data outside France or the European Economic Area (EEA), in particular in the United States.

Where personal data is transferred to a country outside the EEA, we ensure that the transfer is based on a mechanism recognised by applicable regulations.

Depending on the service provider and the country concerned, the transfer may be based in particular on:

an adequacy decision adopted by the European Commission;
where the conditions are met, the EU–US Data Privacy Framework applicable to the US organisations concerned;
the European Commission’s standard contractual clauses;
or any other transfer mechanism recognised by applicable regulations.

Where standard contractual clauses are used, supplementary safeguards may be implemented where necessary.

12. Third-party websites and services

Our website may contain links to websites, social networks or platforms operated by third parties.

When you leave odorare.fr, the processing carried out by these services is governed by their own privacy policies.

Odorare does not control the privacy practices of independent third-party websites and services.

We therefore recommend that you consult their policies before providing them with your personal data.

13. Data relating to minors

Our services are not specifically intended for children, and we do not knowingly seek to collect personal data concerning minors who would not be permitted to provide it to us under applicable regulations.

If you are the legal representative of a minor and believe that the minor has provided us with personal data inappropriately, you may contact us to request its deletion where the legal conditions are met.

14. Your rights

In accordance with the GDPR and applicable French legislation, you may, depending on the circumstances, have the following rights:

Right of access

You may ask whether we process personal data concerning you and obtain access to the data concerned.

Right to rectification

You may request the correction or updating of inaccurate or incomplete data.

Right to erasure

You may request the deletion of certain personal data where the conditions laid down by regulations are met.

Right to restriction of processing

You may request the restriction of certain processing in the situations provided for by the GDPR.

Right to data portability

For certain processing operations, you may request to receive the data you have provided to us in a structured, commonly used and machine-readable format and, where the conditions are met, request that it be transmitted to another controller.

Right to object

You may object to certain processing based on our legitimate interest.

You may also object at any time to the use of your data for direct marketing purposes.

Right to withdraw your consent

Where processing is based on your consent, you may withdraw it at any time.

Such withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Instructions regarding the fate of your data

Where provided for by French law, you may also set instructions regarding the retention, erasure and disclosure of your personal data after your death.

15. Exercising your rights

To exercise your rights or ask a question about the processing of your personal data, you may contact us at:

contact@odorare.fr

or by post:

ODR COSMETICS – Odorare Parfumerie
94 Avenue du Général Leclerc
93420 Villepinte
France

We will respond to your request within the time limits laid down by applicable regulations, in principle within one month of its receipt.

This period may be extended under the conditions laid down by the GDPR, in particular where requests are complex or numerous.

We may request additional information to confirm your identity where this is necessary and proportionate.

Exercising your rights is in principle free of charge, subject to the exceptions provided for by regulations.

16. Complaint to the CNIL

If, after contacting us, you consider that your rights relating to your personal data are not being respected, you may lodge a complaint with the French data protection authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)

www.cnil.fr

You have this right without prejudice to any other administrative or judicial remedy available to you.

17. Relationship with Shopify

Shopify processes certain information relating to your use of our shop in order to provide, secure, develop and improve its services.

Certain features offered by Shopify may also rely on information derived from your interactions with our shop, with Shopify or with other merchants using its services.

Depending on the processing concerned, Shopify may act as a processor or as a separate controller.

For more information:

Shopify Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

Shopify Privacy Portal:
https://privacy.shopify.com/fr