PRIVACY POLICY

Data controller

The controller for the processing described in this policy is JOUVENCE CARE, a simplified joint-stock company with share capital of €1,000, whose registered office is at 64 avenue Daumesnil, 75012 Paris, France.

SIRET: 106 341 605 00017 — RCS Paris: 106 341 605 — Intra-Community VAT: FR72 106341605.

Data protection contact: hello@jouvencecare.com — +33 7 66 77 37 05.

Data collected

Depending on how you use the site, Jouvence Care may process in particular: surname, first name, postal address, delivery and billing address, e-mail address, telephone number, information relating to orders, deliveries, returns and exchanges, customer relationship history, the data needed to create and manage an account, marketing preferences and technical information relating to use of the site. Full payment data must not be retained by Jouvence Care where it is processed directly by the payment provider. Jouvence Care may nevertheless receive the information needed to confirm, track and reconcile a transaction.

Purposes and legal bases

Data may be processed for:

• Managing orders, payments, deliveries, returns and customer service — performance of the contract and compliance with legal obligations.

• Creating and managing the customer account — performance of the contract or pre-contractual measures.

• Accounting, invoicing, tax obligations and dispute management — legal obligations and, where relevant, legitimate interest.

• Site security and fraud prevention — legitimate interest and applicable obligations.

• Newsletter and electronic marketing — consent where required, which may be withdrawn at any time.

• Measuring and optimising Meta/Facebook/Instagram campaigns — prior consent where required for marketing trackers.

• Organising La Cure and putting users in contact with a professional — performance of the requested service and, depending on the nature of the information processed, another appropriate legal basis.

La Cure and sensitive data

Jouvence Care seeks to limit the data collected within La Cure to what is strictly necessary. The administrative information needed to book or prepare an appointment may be passed to the professional concerned. In its general journey, Jouvence Care does not ask for a complete medical record or laboratory results. If a user chooses to provide information about their health and Jouvence Care must actually process it, a specific framework must be applied beforehand, in particular enhanced information and, where required, explicit consent or another condition provided for by Article 9 of the GDPR. Where possible, detailed medical information should be given directly to the professional through an appropriate channel. Independent professionals may act as separate controllers for the data they process in the course of their own practice.

Meta Pixel and health data

Jouvence Care plans to use the Meta Pixel for Facebook and Instagram for advertising measurement, subject to the applicable consent choices. Questionnaires intended for professionals, medical information, health data or other special categories of data must not be deliberately sent to the Meta Pixel or used to build advertising audiences.

Recipients

Within the limits of their responsibilities, data may be accessible to authorised Jouvence Care teams and to the providers needed to operate the service: hosting and infrastructure, payment, transport and logistics, technical support, communication tools, security, authorised marketing providers and independent professionals where an introduction has been requested. Each recipient must receive only the information necessary for its task.

Hosting and providers

The site is hosted by Vercel Inc. Payments may be facilitated by Frame and the associated banking flows may involve Wise depending on the operational configuration of Jouvence Care. Carriers and logistics partners may in particular receive the data needed to deliver orders. The list of providers may change. Any substantial change affecting the information owed to users must be reflected in this policy or in appropriate information.

Transfers outside the European Economic Area

Some providers or recipients may be established in, or process data from, outside the European Economic Area. Where the GDPR requires it, Jouvence Care ensures that such transfers rely on an appropriate legal mechanism, for example an adequacy decision or standard contractual clauses accompanied, where necessary, by supplementary safeguards.

Retention periods

Jouvence Care keeps data only for as long as necessary for the purposes pursued, and then for the archiving periods required or permitted by law. As a general rule, marketing data relating to an inactive customer may be kept for a limited period after the end of the commercial relationship, while accounting documents and items needed to evidence a transaction may be kept for the applicable statutory periods. Consent choices and technical data are kept for a period proportionate to their purpose.

Your rights

Under the conditions provided by the regulations, you may in particular request access to your data, its rectification or erasure, the restriction of certain processing, exercise your right to object, request portability where applicable and withdraw your consent at any time for processing based on it. You may exercise your rights by writing to hello@jouvencecare.com. Jouvence Care may request the information reasonably necessary to verify the identity of the person making the request, without systematically requiring a copy of an identity document where this is not necessary.

Complaint to the CNIL

If, after contacting Jouvence Care, you consider that your rights in relation to your personal data are not being respected, you have the right to lodge a complaint with the competent supervisory authority, in particular the Commission nationale de l'informatique et des libertés (CNIL) in France.

Newsletter, SMS and commercial communications

Signing up to the newsletter must be separate from acceptance of the General Terms and Conditions and must not be required in order to place an order. Marketing communications by e-mail, SMS or similar channels are sent in accordance with the applicable rules and the choices expressed by the user. Every communication must allow the recipient to unsubscribe or to exercise their right to object under the conditions provided by law.

Cookies

Strictly necessary cookies may be used to keep the site working. Cookies or trackers subject to consent, in particular marketing technologies such as the Meta Pixel where relevant, must only be activated after the user has made the required choice. Detailed arrangements are set out in the Cookie Policy and in the site's consent manager.

Security

Jouvence Care implements reasonable and proportionate technical and organisational measures to protect data against destruction, loss, alteration, disclosure or unauthorised access. Access to data must be limited to the people and providers who need it for their tasks.

Minors

Jouvence Care's direct-to-consumer sales services are intended for adults, subject to any stricter age requirements applicable in certain territories or to certain services. Jouvence Care does not seek to knowingly collect data from minors outside an appropriate legal framework.

Changes to this policy

Jouvence Care may update this policy to reflect changes in its services, providers, processing activities or regulatory obligations. In the event of a substantial change, appropriate information will be provided where the regulations require it.

Contact

JOUVENCE CARE

64 avenue Daumesnil, 75012 Paris, France

E-mail: hello@jouvencecare.com

Telephone: +33 7 66 77 37 05