Privacy Policy

Last updated: 28 October 2026

This policy explains how LENOX PHARM collects, uses and protects the personal data of visitors and customers of the website https://francoisebedon.com (the "Site"), in accordance with Regulation (EU) 2016/679 ("GDPR") and the amended French Data Protection Act No. 78-17 of 6 January 1978 ("Informatique et Libertés").

1. Data controller

The data controller is:

• LENOX PHARM, a French simplified joint-stock company (SAS)
• SIREN 892 772 997 – Head office SIRET 892 772 997 00011
• Registered office: 35 boulevard de Strasbourg, 75010 Paris, France
• E-mail: serviceclient@institut-cosmetic.com

Address for requests about your data: serviceclient@institut-cosmetic.com

2. What data, for what purpose, on what legal basis?

We only collect the data needed for the purposes below. Mandatory fields are marked in our forms; without them we cannot process your request or order.

Sign in with Google (optional): you can create your account or sign in with your Google account instead of a password. This is optional: signing in with your email and password remains available.

• Data received from Google: your Google ID, your email address (and whether it is verified), your first name and last name. We do not receive your Google password and have no access to your contacts or other Google data.
• Purpose: to create your customer account, sign you in and link it to your Google account.
• Legal basis: performance of a contract (creating and managing your customer account at your request).
• Retention: the link between your customer account and your Google account is kept as long as your account exists; you can remove it at any time in "My account > Connected accounts". The technical sign-in log is deleted after 90 days.
• Provider: Google Ireland Limited / Google LLC provides the authentication service, under its own privacy policy (https://policies.google.com/privacy). See also section 4 on transfers outside the European Union.

"Find my skincare" questionnaire: your answers are neither stored nor transmitted by LENOX PHARM. They stay in your browser, in the page address, so you can return to your selection.

We do not make any decision based solely on automated processing that produces legal effects concerning you.

3. Recipients and processors

Your data is accessed by authorised LENOX PHARM staff (customer service, shops, logistics, accounting). It is also shared, to the extent necessary, with our service providers:

Paying with PayPal, Apple Pay or Google Pay may also involve these companies under their own privacy policies.

Your data may also be disclosed to administrative or judicial authorities where required by law.

We do not sell your personal data and we do not pass it on to any third party for its own commercial purposes.

4. Transfers outside the European Union

Some of our providers (in particular Google, Microsoft, Cloudflare, PayPal, Klaviyo, Brevo, Elfsight and, depending on the data centre used, Zoho) are established outside the European Union, notably in the United States, or may process data there. In that case, transfers are covered by the safeguards provided for by the GDPR: an adequacy decision of the European Commission (for example the EU–US Data Privacy Framework, for certified companies) or the European Commission's standard contractual clauses.

You can obtain information about these safeguards by writing to us at the address given in section 1.

5. Retention periods

We keep your data for the following periods, based on the guidelines of the French data protection authority (CNIL):

6. Cookies and trackers

A cookie (or tracker) is information stored on your device when you visit the Site. This section also covers the browser's local storage.

Cookies strictly necessary for the Site to work (cart, language, login, security) are set without consent. Others (audience measurement, marketing, third-party content) may only be set with your consent, which you can give, refuse or withdraw at any time, as easily as you gave it, through the cookie banner shown on your first visit ("Accept all", "Deny all" and "Customize" buttons). You can reopen it at any time with the Cookie settings link at the bottom of every page. Until you make a choice, no audience measurement, marketing or third-party content cookie is set, and neither Google Analytics nor Microsoft Clarity is loaded.

Trackers used on the Site (as recorded on 24 October 2026, updated on 28 October 2026):

Microsoft Clarity helps us understand how the Site is used (pages viewed, clicks, scrolling) so that we can make it easier to use. Sensitive text (numbers, e-mail addresses) and anything you type into forms is masked before being sent. We tell Microsoft that your consent covers audience measurement only, not advertising. If you withdraw your consent, Clarity stops and its cookies set on institut-cosmetic.com are deleted; cookies set on Microsoft's domains (clarity.ms, bing.com) can only be deleted from your browser settings.

Services loaded without any cookie observed: Cloudflare Web Analytics (technical statistics) and Google Fonts (display fonts). Your IP address is sent to these providers when the page loads.

You can also block or delete cookies in your browser settings. Blocking necessary cookies may prevent the cart and your account from working.

7. Your rights

You have the following rights over your data:

• right of access, rectification and erasure;
• right to restriction of processing;
• right to object, in particular to direct marketing, at any time and without giving reasons;
• right to data portability for the data you provided to us;
• right to withdraw your consent at any time, without affecting processing already carried out;
• right to give instructions on what happens to your data after your death.

To unsubscribe from marketing e-mails, use the unsubscribe link in each e-mail, or change your preferences in your customer account.

To exercise your rights, write to serviceclient@institut-cosmetic.com, or by post to LENOX PHARM, 35 boulevard de Strasbourg, 75010 Paris, France. If we have reasonable doubts about your identity, we may ask you for proof. We answer within one month, which may be extended by two months for complex requests; we will inform you if so.

8. Complaint to the CNIL

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at www.cnil.fr. You may also contact the supervisory authority of the EU country where you live.

9. Telephone marketing (Bloctel)

If you live in France and do not wish to receive telephone marketing, you can register free of charge on the French opt-out list Bloctel: www.bloctel.gouv.fr (article L223-1 of the French Consumer Code).

10. Minors

The Site is intended for adults. Products for babies and children must be ordered by an adult. We do not knowingly collect data about minors under 15 without the consent of a holder of parental authority. If you believe a minor has sent us data, contact us so that we can delete it.

11. Security

We take appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS) across the Site, Site protection and anti-bot checks by Cloudflare, access to data restricted to authorised staff, payment handled by a specialised provider with no card numbers kept by LENOX PHARM.

12. Changes

We may change this policy, in particular to reflect changes to the Site, our providers or the regulations. The date of the last update appears at the top of the page. In the event of a significant change, we will inform you by appropriate means.

See also: Legal notice – Terms and conditions – Contact us