Privacy policy
Last updated: septembre 2026
Data controller
DTM MEDIAS, 28 rue de Londres, 75009 Paris, France. For any question about your data: contact@zuhae.com.
Data collected and purposes
Zuhae collects only what its business requires:
- Order and delivery — name, address, email, phone. Legal basis: performance of the contract. Retention: ten years, under accounting obligations.
- Basket and session — basket contents, chosen language and currency. Legal basis: legitimate interest in operating the shop. Retention: the session.
- Routine advice — the skin type and goal you tell the advisor. Legal basis: your explicit request. These answers are not stored in any database and are not linked to any account. Retention: the session.
- Support — the content of your exchanges with customer service. Legal basis: legitimate interest. Retention: three years.
The automated advisor
Routine advice is written by a language model operated by Anthropic PBC (United States). To produce it, the following are sent: the skin type and goal you selected, the reference of the product added to the basket, and a list of candidate products.
No identifying data is sent: no name, no address, no email, no account identifier. This transfer outside the European Union is covered by the European Commission’s standard contractual clauses.
The advice produced is indicative and is not medical advice.
Recipients
Your data is accessible only to the processors required:
- the site host (Hostinger International Ltd — 61 Lordou Vironos Street, 6023 Larnaca, Chypre);
- the payment provider, which alone handles card details;
- the carrier handling delivery, which receives your delivery details;
- Anthropic PBC, within the limits described above.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability. Exercise them at contact@zuhae.com, with proof of identity. We reply within one month.
You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with your own national authority.
Cookies
The site sets a single session cookie, strictly necessary to operate the basket and remember the chosen language. It enables no advertising tracking and requires no prior consent.
There is no advertising tracker, no third-party analytics tool and no social network button on the site at this date. Any change will be accompanied by a compliant consent banner.
Security
The site is served exclusively over HTTPS. Database access is restricted, and card details never pass through our servers.