Privacy policy
Last updated: septembre 2026
Data controller
DTM MEDIAS, 28 rue de Londres, 75009 Paris, France. For any question about your data: contact@zuhae.com.
Data collected and purposes
Zuhae collects only what its business requires:
- Order and delivery — name, address, email, phone. Legal basis: performance of the contract. Retention: ten years, under accounting obligations.
- Basket and session — basket contents, chosen language and currency. Legal basis: legitimate interest in operating the shop. Retention: the session.
- Routine advice — the skin type and goal you tell the advisor. Legal basis: your explicit request. These answers are not stored in any database and are not linked to any account. Retention: the session.
- Support — the content of your exchanges with customer service. Legal basis: legitimate interest. Retention: three years.
The automated advisor
Routine advice is written by a language model operated by Anthropic PBC (United States). To produce it, the following are sent: the skin type and goal you selected, the reference of the product added to the basket, and a list of candidate products.
No identifying data is sent: no name, no address, no email, no account identifier. This transfer outside the European Union is covered by the European Commission’s standard contractual clauses.
The advice produced is indicative and is not medical advice.
Recipients
Your data is accessible only to the processors required:
- the site host (Hostinger International Ltd — 61 Lordou Vironos Street, 6023 Larnaca, Chypre);
- the payment provider, which alone handles card details;
- the carrier handling delivery, which receives your delivery details;
- Anthropic PBC, within the limits described above.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability. Exercise them at contact@zuhae.com, with proof of identity. We reply within one month.
You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with your own national authority.
Cookies, measurement and advertising
The site sets a session cookie, strictly necessary for the basket to work and to remember your chosen language, along with a cookie recording your answer to the banner. Neither requires prior consent.
We measure site audience — pages viewed, visit duration, scroll depth. This measurement is internal and first-party: it does not follow you from one site to another, feeds no profiling, and its results are shared with no one.
We set advertising trackers from Meta, TikTok, Snapchat, Taboola and Google Ads as soon as you arrive on the site, without prior consent. They measure how our campaigns perform and limit how often ads repeat. You may object at any time: by writing to contact@zuhae.com, by refusing third-party cookies in your browser settings, or through youronlinechoices.eu and myadcenter.google.com.
Recording your navigation, by contrast, happens only with your consent. It lets us replay a journey to understand what blocked it and fix the site. Password, e-mail and telephone fields are excluded at source. Without consent nothing is recorded and the shop works exactly the same. Your answer is kept for six months and can be changed at any time from the “Cookies” link in the footer.
Some purchase events are also sent from our server to the advertising networks named above. They may include your e-mail address, telephone number and delivery address in an encrypted, irreversible form, as well as your IP address and browser. This data is used solely to match an advertisement to a purchase.
Security
The site is served exclusively over HTTPS. Database access is restricted, and card details never pass through our servers.