Privacy policy

Last update : December 2025

Protecting your privacy is a priority for KAYLA. This privacy policy tells you how we collect, use, store and protect your information when you visit kaylaparis.com or make a purchase.

By using our site, you accept the practices described in this policy. We invite you to read it carefully.

1. Identity of the Data Controller

KAYLA
10 rue de Penthièvre
75008 Paris, France

Telephone: +33 7 82 22 52 40
Email: contact@kaylaparis.com
Website: https://kaylaparis.com

KAYLA is responsible for processing your personal data in accordance with the General Data Protection Regulation (RGPD) and the French “Informatique et Libertés” law.

2. Personal data collected

We collect different types of data depending on your interactions with our site:

2.1. Data you provide directly to us

• Identification information: surname, first name, email address, telephone number
• Delivery information: full postal address
• Billing information: billing address
• Account information: username, password (encrypted)
• Communications: messages sent via our contact form

2.2. Automatically collected data

• Browsing data: IP address, browser type, operating system, pages visited, length of visit
• Cookie data: preferences, shopping cart, site browsing history
• Device data: device type, unique identifiers

2.3. Payment data

Payment information (credit card number, expiry date, CVV) is processed directly by our secure payment service providers and is never stored on our servers. We use payment solutions that comply with PCI-DSS standards.

3. Purposes of Processing

We use your personal data for the following purposes:

• Order processing: management, preparation, dispatch and tracking of your purchases
• Managing your customer account: creating and administering your personal space
• Customer service: answers to your questions and requests for assistance
• Commercial communication: newsletters and promotional offers (with your consent)
• Improving our services: analysis of browsing behavior to optimize the user experience
• Legal obligations: tax and accounting compliance, fraud prevention
• Security: protection against fraudulent and malicious activity

4. Legal basis for processing

In accordance with the RGPD, we process your data on the following legal bases:

• Contractual performance: for processing your orders and providing our services
• Consent: for the sending of marketing communications and the use of certain cookies
• Legitimate interest: to improve our services, security and fraud prevention
• Legal obligations: for our tax, accounting and legal obligations

5. Recipients of Data

Your personal data may be shared with the following categories of recipients:

• Payment service providers: for secure transaction processing
• Carriers: for delivery of your orders (La Poste, Colissimo, DHL, etc.).
• Web host: for secure hosting of our site
• Analysis tools: Google Analytics 4 (GA4) and Microsoft Clarity to analyze site traffic, user behavior, heat maps and session records
• Tag management: Google Tag Manager (GTM) for deployment and management of tracking codes
• Advertising and remarketing platforms: Google Ads, Meta (Facebook/Instagram) Ads and Snapchat Ads for targeted ad delivery, conversion tracking and remarketing
• Marketing platforms: for sending newsletters (if you have subscribed)
• Competent authorities: in the event of legal obligation

We never sell your personal data to third parties. All our partners are contractually bound to respect the confidentiality of your data and to use it only for the intended purpose.

6. Cookies and Similar Technologies

6.1. What is a cookie?

A cookie is a small text file placed on your device when you visit our site. It enables us to remember your preferences and improve your browsing experience.

6.2. Types of cookies used

• Essential cookies: essential for site operation (shopping cart, connection, security). These cookies cannot be deactivated.
• Performance and analysis cookies: Google Analytics 4 (GA4) and Microsoft Clarity collect information on site usage, including heat maps and session records, to improve our services.
• Functional cookies: store your preferences (language, currency, products viewed).
• Advertising and remarketing cookies: Google Ads, Meta (Facebook/Instagram) Pixel and Snapchat Pixel are used to display relevant ads, track conversions and create remarketing audiences.

6.3. Cookie management

On your first visit, a banner allows you to accept or refuse non-essential cookies. You can change your preferences at any time via your browser settings:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

7. Shelf life

We store your personal data for the following periods:

• Order data: 10 years from order date (accounting and tax obligations)
• Customer account data: for the life of the account + 3 years after the last activity
• Browsing data: 13 months maximum
• Marketing data: 3 years after your last contact with us or until you unsubscribe
• Cookies: 13 months maximum, depending on type

Once these deadlines have expired, your data will be deleted or made anonymous.

8. Data security

We implement appropriate technical and organizational measures to protect your data:

• SSL/TLS encryption: all data transmitted via our site is encrypted (HTTPS protocol).
• Secure payments: transactions processed by PCI-DSS-certified service providers
• Restricted access: only authorized persons have access to your data
• Encrypted passwords: your credentials are stored securely
• Monitoring: our systems are regularly audited and updated

9. Your rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain confirmation of the processing of your data and receive a copy of it
• Right of rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your data under certain conditions
• Right to restriction: restrict the processing of your data
• Right to portability: receive your data in a structured and commonly used format
• Right to object: to the processing of your data, in particular for marketing purposes
• Right to withdraw your consent: at any time for processing based on your consent

How to exercise your rights

To exercise your rights, you can :

• Contact us by phone: +33 7 82 22 52 40
• Contact us by email: contact@kaylaparis.com
• Please write to us at : KAYLA, 10 rue de Penthièvre, 75008 Paris, France
• Use the contact form on our website

We will respond to your request within one month. This period may be extended by two months for complex requests.

10. Data Transfers Outside the EU

Some of our service providers may be located outside the European Union. In such cases, we ensure that appropriate safeguards are in place:

• Standard contractual clauses approved by the European Commission
• Service providers subscribing to recognized certification schemes

11. Protection of minors

Our site is not intended for persons under the age of 16. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us.

12. Changes to the Policy

We reserve the right to modify this privacy policy at any time. Any changes will be posted on this page with an updated date. In the event of substantial modifications, we will inform you by email or via a notification on our site.

We encourage you to visit this page regularly to stay informed about our data protection practices.

13. Contact us

If you have any questions about this privacy policy or the processing of your personal data, please contact us :

KAYLA
10 rue de Penthièvre
75008 Paris, France

Telephone: +33 7 82 22 52 40
Email: contact@kaylaparis.com
Contact form: https://kaylaparis.com/contactez-nous/